$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/33d473ac-ef87-3235-a72d-54f81da887ff.roa File: 33d473ac-ef87-3235-a72d-54f81da887ff.roa (raw, json) Hash identifier: AA8eFDHwe2AZXNzzmYNRIzo2J5ABqDBAB2uF86jJdMc= Subject key identifier: 17:C4:21:B5:35:87:86:46:A8:3F:C2:A8:BB:C1:69:F3:90:9B:BF:E9 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DA581B5E15F95F2AD2EED6800 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/33d473ac-ef87-3235-a72d-54f81da887ff.roa Signing time: Mon 27 Apr 2026 14:51:18 +0000 ROA not before: Mon 27 Apr 2026 14:51:18 +0000 ROA not after: Sun 26 Jul 2026 14:51:18 +0000 asID: 275719 IP address blocks: 38.199.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:81:b5:e1:5f:95:f2:ad:2e:ed:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Apr 27 14:51:18 2026 GMT Not After : Jul 26 14:51:18 2026 GMT Subject: CN=85e4329b-372b-4139-a656-3083f41f7ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e1:16:35:3a:82:a6:3c:0a:18:ec:9b:36:81: 55:85:fc:f2:ef:ad:b2:3d:9a:84:c4:2e:a8:be:48: 5b:74:6f:a0:6a:02:95:c7:81:89:ff:00:7f:ce:0b: ac:39:d7:de:b9:1e:22:90:44:b5:64:7b:5e:6d:45: 6b:1b:85:ee:cb:91:c4:80:3e:8e:f1:dd:16:f9:12: 00:26:7d:db:84:89:db:73:c5:d1:10:c1:13:a8:bf: 00:64:4c:03:b0:60:ef:71:1b:9d:82:85:a3:f2:b1: ce:d0:bc:7b:2e:fd:1f:8b:e6:83:e9:32:e4:d8:49: 2b:60:8a:de:61:f9:33:71:17:da:f4:52:44:26:40: 67:f8:f4:2a:99:9d:af:13:67:b7:60:10:3c:d1:9d: 1b:d9:29:1a:d8:b2:12:38:4b:08:b0:7b:0d:e8:46: 07:74:1d:a7:da:94:99:33:46:2d:57:f2:17:7f:3e: fb:a6:c7:a5:73:61:1c:03:e4:1f:f1:1f:be:49:b6: 66:11:2d:fc:04:0d:25:54:a4:e6:f7:42:b6:44:22: a3:da:ae:98:8f:1f:74:46:ba:2d:81:6d:4d:d9:8c: 32:5a:9f:2e:7c:4b:05:1a:64:69:bd:04:76:81:53: 1c:f0:42:53:a7:76:e3:1d:f5:39:f3:bb:b0:60:04: 53:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C4:21:B5:35:87:86:46:A8:3F:C2:A8:BB:C1:69:F3:90:9B:BF:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/33d473ac-ef87-3235-a72d-54f81da887ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.199.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:13:54:f6:3f:7b:cf:b8:40:17:46:f0:cf:02:dc:10:ea:98: 5d:d3:da:9c:74:be:a2:f5:7b:39:a2:bc:cc:78:81:de:3d:5c: ac:31:22:d7:fa:d4:a7:7a:54:45:63:81:99:74:ed:34:8f:cd: e6:a3:4d:24:89:c4:bd:c5:b2:d8:40:f4:93:dc:5c:42:f6:be: 03:ee:31:d6:0a:22:b6:d6:53:77:aa:b6:b1:58:39:9a:bc:88: 2c:16:79:18:d3:c3:4b:3b:d8:7a:42:2e:1c:a0:04:91:53:2d: 75:b8:50:e6:72:28:84:44:88:da:0a:27:ff:21:a9:4a:24:ac: e4:02:a3:4f:aa:e8:2f:16:e9:39:83:7e:9a:3e:03:f4:3c:29: 65:53:2f:c9:45:c2:36:50:36:3b:fd:21:22:bc:4c:14:43:1b: 2f:cc:9d:d1:b8:b7:0f:2c:77:54:b6:fa:63:5d:c3:b3:2a:61: 9f:94:5c:92:e2:16:0d:c7:f6:fa:dd:8b:34:67:15:63:ab:4a: 6b:9d:69:66:d4:b1:fe:e5:67:af:94:04:c6:ba:96:ac:8e:f3: e5:58:d0:78:be:d4:df:07:2b:4a:d1:df:aa:86:0f:d0:fe:fd: 9c:49:94:af:fa:2f:bd:ea:30:b8:9b:e1:0a:4b:8c:bf:20:84: a6:1c:f9:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2lgbXhX5XyrS7taAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDQyNzE0NTExOFoXDTI2MDcyNjE0NTExOFowLzEtMCsGA1UEAxMk ODVlNDMyOWItMzcyYi00MTM5LWE2NTYtMzA4M2Y0MWY3ZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeEWNTqCpjwKGOybNoFVhfzy762yPZqExC6o vkhbdG+gagKVx4GJ/wB/zgusOdfeuR4ikES1ZHtebUVrG4Xuy5HEgD6O8d0W+RIA Jn3bhInbc8XREMETqL8AZEwDsGDvcRudgoWj8rHO0Lx7Lv0fi+aD6TLk2EkrYIre YfkzcRfa9FJEJkBn+PQqmZ2vE2e3YBA80Z0b2Ska2LISOEsIsHsN6EYHdB2n2pSZ M0YtV/IXfz77pselc2EcA+Qf8R++SbZmES38BA0lVKTm90K2RCKj2q6Yjx90Rrot gW1N2YwyWp8ufEsFGmRpvQR2gVMc8EJTp3bjHfU587uwYARTbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfEIbU1h4ZGqD/CqLvBafOQm7/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzNkNDczYWMtZWY4Ny0z MjM1LWE3MmQtNTRmODFkYTg4N2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJsfdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMsTVPY/e8+4QBdG8M8C3BDqmF3T2px0vqL1ezmivMx4gd49XKwxItf6 1Kd6VEVjgZl07TSPzeajTSSJxL3FsthA9JPcXEL2vgPuMdYKIrbWU3eqtrFYOZq8 iCwWeRjTw0s72HpCLhygBJFTLXW4UOZyKIREiNoKJ/8hqUokrOQCo0+q6C8W6TmD fpo+A/Q8KWVTL8lFwjZQNjv9ISK8TBRDGy/MndG4tw8sd1S2+mNdw7MqYZ+UXJLi Fg3H9vrdizRnFWOrSmudaWbUsf7lZ6+UBMa6lqyO8+VY0Hi+1N8HK0rR36qGD9D+ /ZxJlK/6L73qMLib4QpLjL8ghKYc+WE= -----END CERTIFICATE-----Generated at Tue Apr 28 21:12:01 2026 by rpki-client