$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/33a07a10-b3c9-301a-95d6-2b8363fac942.roa File: 33a07a10-b3c9-301a-95d6-2b8363fac942.roa (raw, json) Hash identifier: 7r0Z7htpegGvYTybePYJYrBi/Jz5L0UZS15D5P1hMjE= Subject key identifier: 14:E8:B6:4C:74:C9:8D:69:F3:A7:A5:30:88:E8:C8:10:1C:9C:BF:3A Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584DA6B03141698F7CF6FC898780 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/33a07a10-b3c9-301a-95d6-2b8363fac942.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 23473 IP address blocks: 216.171.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:31:41:69:8f:7c:f6:fc:89:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=50360258-9fbe-4060-a572-c649168b9025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:ce:4b:f8:83:00:75:2e:d3:1b:f9:13:22: b8:47:a1:84:d9:76:57:ba:47:ce:70:8e:27:d1:92: 46:a4:dc:d8:d2:e2:44:9e:52:12:5c:0f:b0:ed:5e: cd:10:18:34:3a:b1:15:30:8d:a0:16:67:c5:25:b7: c0:3d:c2:9a:07:3f:e2:95:31:3e:8d:0a:9e:dd:4e: 12:02:02:4f:52:8f:cf:c0:63:d4:74:ba:01:b1:5e: e1:a7:46:ec:48:0c:c4:a7:a3:2a:82:a9:4f:1b:2d: 17:9f:33:24:22:9e:02:d5:b6:b0:3b:3f:51:a7:36: fa:cb:4b:c8:87:04:36:08:50:ef:bf:29:9b:47:0e: 84:32:c0:82:cd:4f:e4:b6:5d:15:f7:de:86:e8:f1: 64:fd:1a:a0:14:5f:be:98:e6:3d:12:5f:dc:06:e3: d8:72:a8:83:c6:92:86:9c:6c:17:16:01:f4:64:ba: b2:51:19:eb:3f:77:80:26:27:d6:db:38:9b:d1:80: 83:78:c4:07:1e:36:1d:f5:7a:75:e6:ef:13:74:e0: d2:53:36:a6:a8:da:fd:a1:f2:9e:a3:4e:9c:9b:c7: dc:55:33:f8:d6:b3:a9:56:a2:c4:c4:a9:d9:a9:02: 12:0f:1f:d6:06:08:dd:da:4c:8b:3b:78:4a:56:13: 09:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E8:B6:4C:74:C9:8D:69:F3:A7:A5:30:88:E8:C8:10:1C:9C:BF:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/33a07a10-b3c9-301a-95d6-2b8363fac942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:50:cd:e8:4c:5a:b6:44:09:ae:e6:15:f0:ac:77:ed:4c:89: 1a:2f:c2:5b:31:f0:4f:96:59:40:93:0d:3e:a7:29:b7:74:00: 7b:2c:21:d9:d0:b0:41:9c:ea:a7:1d:e3:a2:c8:11:a3:ff:54: df:05:de:de:b2:34:29:99:43:f0:18:29:5b:b9:7f:80:3a:17: 93:54:f1:d0:2a:c5:34:49:fe:14:a0:66:cc:a4:05:e0:00:cc: f9:6b:03:b8:4e:9b:d9:bd:2b:fd:9b:46:04:3e:d6:04:3d:43: 60:57:a3:0e:89:7b:97:99:0a:87:2e:fd:a4:52:94:6e:17:31: d3:b1:46:83:b1:00:42:eb:df:fc:60:62:5b:cf:c1:07:ea:ed: 08:67:24:1e:4f:a6:28:74:bb:be:b3:48:86:4b:e8:95:84:77: c8:03:16:bf:c6:4d:c1:af:a8:f6:ef:69:e7:e1:be:2f:ad:49: 2c:a0:01:51:89:41:5c:90:df:1b:24:9e:45:4b:52:94:0f:fd: 49:38:bd:d0:8b:a8:4c:c2:d1:b7:10:80:24:38:28:fe:fe:b0: 9e:ec:7f:16:a5:24:d1:1a:73:98:02:66:ce:df:f2:ca:89:77: f4:e1:36:78:a1:35:2c:62:03:67:93:28:21:3c:8b:ee:97:20: 32:95:0f:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msDFBaY989vyJh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NTAzNjAyNTgtOWZiZS00MDYwLWE1NzItYzY0OTE2OGI5MDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVDOS/iDAHUu0xv5EyK4R6GE2XZXukfOcI4n 0ZJGpNzY0uJEnlISXA+w7V7NEBg0OrEVMI2gFmfFJbfAPcKaBz/ilTE+jQqe3U4S AgJPUo/PwGPUdLoBsV7hp0bsSAzEp6MqgqlPGy0XnzMkIp4C1bawOz9Rpzb6y0vI hwQ2CFDvvymbRw6EMsCCzU/ktl0V996G6PFk/RqgFF++mOY9El/cBuPYcqiDxpKG nGwXFgH0ZLqyURnrP3eAJifW2zib0YCDeMQHHjYd9Xp15u8TdODSUzamqNr9ofKe o06cm8fcVTP41rOpVqLExKnZqQISDx/WBgjd2kyLO3hKVhMJAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTotkx0yY1p86elMIjoyBAcnL86MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzNhMDdhMTAtYjNjOS0z MDFhLTk1ZDYtMmI4MzYzZmFjOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1QzehMWrZECa7mFfCsd+1MiRovwlsx8E+WWUCTDT6nKbd0AHssIdnQ sEGc6qcd46LIEaP/VN8F3t6yNCmZQ/AYKVu5f4A6F5NU8dAqxTRJ/hSgZsykBeAA zPlrA7hOm9m9K/2bRgQ+1gQ9Q2BXow6Je5eZCocu/aRSlG4XMdOxRoOxAELr3/xg YlvPwQfq7QhnJB5Ppih0u76zSIZL6JWEd8gDFr/GTcGvqPbvaefhvi+tSSygAVGJ QVyQ3xsknkVLUpQP/Uk4vdCLqEzC0bcQgCQ4KP7+sJ7sfxalJNEac5gCZs7f8sqJ d/ThNnihNSxiA2eTKCE8i+6XIDKVD4Q= -----END CERTIFICATE-----Generated at Thu May 7 03:15:44 2026 by rpki-client