$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa File: 935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa (raw, json) Hash identifier: WfCAH1l4iTj+ZcJGpWlQU5M5MsPItzTRg0JBCT2ze9g= Subject key identifier: C6:34:5A:49:A7:43:E4:DE:A5:6B:45:A8:66:94:3E:C5:13:E8:AE:23 Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Certificate serial: 010D0C9F4328584E35FF1E546CBC8F33F419DA00 Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 22504 IP address blocks: 162.118.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:1e:54:6c:bc:8f:33:f4:19:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=172211cf-5806-4661-a661-85c8a85b74e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:ae:e9:30:67:da:08:90:4e:12:ba:38:75:a1: fc:38:ea:df:5d:e7:b8:ce:91:1e:f2:88:d2:7d:7c: 90:66:a9:51:24:24:f1:d3:a8:b8:44:26:1e:65:ca: 8b:bb:18:28:6e:59:6a:cc:91:ce:b2:d0:41:56:8f: 81:5b:7d:95:17:41:a6:64:5b:3b:df:0f:b3:3f:50: 74:87:b7:25:e2:12:e7:7b:d0:50:9a:56:8f:fd:02: f2:38:b1:fa:b7:5e:b5:7f:6a:b9:50:d8:29:ef:80: e3:89:15:c6:c1:e2:61:3a:8f:3e:74:39:dd:58:bd: cd:29:85:b6:c4:20:96:c3:ab:a5:d1:27:1a:78:a9: 33:ad:c7:e2:5d:3b:5e:20:25:89:8f:34:de:a0:e8: e0:35:9a:2e:5e:34:ac:f8:37:37:98:95:54:ad:67: 83:78:84:08:fb:b9:ac:6f:d2:a1:70:0f:6c:73:c0: ca:37:f4:9f:50:19:21:2b:e5:73:d9:9f:35:0a:43: 03:b5:77:fd:52:73:e6:28:a7:a0:76:0a:8e:40:9e: b3:86:4b:2a:d0:d8:09:cb:a0:b7:5e:9f:80:8e:a8: 61:76:dd:c4:71:0e:52:02:ec:02:cd:0b:9a:95:c4: bb:0f:fc:76:84:1b:ac:53:c9:0f:52:a4:be:c8:0f: f6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:34:5A:49:A7:43:E4:DE:A5:6B:45:A8:66:94:3E:C5:13:E8:AE:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl X509v3 Authority Key Identifier: keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer sbgp-ipAddrBlock: critical IPv4: 162.118.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c5:6d:51:69:e4:52:55:f8:11:7f:c4:20:98:c8:0a:c9:21: e4:b9:51:7f:4c:e2:93:85:83:b2:eb:82:f9:ef:79:7d:b7:b6: 89:c9:51:61:b4:8b:72:fa:92:cf:18:d9:54:42:6b:d8:12:e7: 50:d4:d7:a2:60:40:63:4b:2b:8c:05:ac:03:aa:ed:70:b1:4a: 8b:3e:2f:c8:cb:b0:b7:33:ee:2a:16:cb:59:0a:6e:0a:12:c9: 6d:7e:a0:04:69:10:73:66:d1:27:48:86:96:35:0b:dd:2b:b7: 08:15:fa:21:6f:43:8f:4d:94:53:b1:be:c3:44:f1:58:29:06: 22:52:f1:73:ec:73:1b:9e:1e:4d:bf:e5:d4:a4:4a:b8:2f:fb: 5f:5a:f4:31:0c:47:ac:c4:1f:e1:b0:65:f1:e4:ad:ae:d6:89: e2:c2:46:bc:61:da:da:4f:23:8d:08:f5:49:0f:cd:b5:38:11: 25:4a:89:f7:66:3b:38:16:a7:fa:f2:32:f2:9d:b1:7b:21:3c: e9:5e:9d:65:a5:e9:8e:56:2d:af:d7:a5:de:a4:0c:c5:00:5d: 93:2d:52:01:f1:9a:62:1e:bc:90:c3:3e:3b:4c:8b:ae:a1:ad: cc:a0:c9:e4:a3:76:b7:7e:94:90:73:a7:f0:ba:4f:a3:57:1a: 5e:2a:1d:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/x5UbLyPM/QZ2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz MTEzMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk MTcyMjExY2YtNTgwNi00NjYxLWE2NjEtODVjOGE4NWI3NGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/q7pMGfaCJBOEro4daH8OOrfXee4zpEe8ojS fXyQZqlRJCTx06i4RCYeZcqLuxgobllqzJHOstBBVo+BW32VF0GmZFs73w+zP1B0 h7cl4hLne9BQmlaP/QLyOLH6t161f2q5UNgp74DjiRXGweJhOo8+dDndWL3NKYW2 xCCWw6ul0ScaeKkzrcfiXTteICWJjzTeoOjgNZouXjSs+Dc3mJVUrWeDeIQI+7ms b9KhcA9sc8DKN/SfUBkhK+Vz2Z81CkMDtXf9UnPmKKegdgqOQJ6zhksq0NgJy6C3 Xp+Ajqhhdt3EcQ5SAuwCzQualcS7D/x2hBusU8kPUqS+yA/2sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMY0WkmnQ+TepWtFqGaUPsUT6K4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvOTM1ZjIzN2YtM2UwOC0z M2QyLWFmMWYtNGIxZWZlNjFkNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1 MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonYhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbFbVFp5FJV+BF/xCCYyArJIeS5UX9M4pOFg7LrgvnveX23tonJUWG0 i3L6ks8Y2VRCa9gS51DU16JgQGNLK4wFrAOq7XCxSos+L8jLsLcz7ioWy1kKbgoS yW1+oARpEHNm0SdIhpY1C90rtwgV+iFvQ49NlFOxvsNE8VgpBiJS8XPscxueHk2/ 5dSkSrgv+19a9DEMR6zEH+GwZfHkra7WieLCRrxh2tpPI40I9UkPzbU4ESVKifdm OzgWp/ryMvKdsXshPOlenWWl6Y5WLa/Xpd6kDMUAXZMtUgHxmmIevJDDPjtMi66h rcygyeSjdrd+lJBzp/C6T6NXGl4qHcY= -----END CERTIFICATE-----Generated at Fri Jul 17 11:22:09 2026 by rpki-client