$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa File: 935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa (raw, json) Hash identifier: lO4nSU4V14lJ2iSCLcga13z+V/Ay6gdrkLSA+FSR2SU= Subject key identifier: 4D:EE:CC:1D:EE:BC:ED:EF:FA:F1:0A:C3:A8:35:37:1D:75:2C:25:77 Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Certificate serial: 010D0C9F4328584D55BA47482A704BC89A2231A0 Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 22504 IP address blocks: 162.118.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:47:48:2a:70:4b:c8:9a:22:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b273cc68-12c1-4d15-a042-948d493a8b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:07:7b:86:8f:9a:79:b7:1f:37:c5:73:fc: 98:12:81:ad:92:40:96:33:ab:60:56:bf:9c:e1:93: 06:04:33:17:25:a7:ce:d1:c3:b9:ca:8e:cf:51:32: 05:ed:4e:14:21:9b:97:9b:14:47:1e:86:53:25:17: bf:c4:68:ab:50:60:58:b0:34:84:a2:dd:17:b9:7e: 5f:23:7d:11:8f:22:6c:71:0c:25:06:62:be:33:0d: b1:14:87:ec:01:48:fd:cd:fc:70:c5:88:ff:c8:0a: e2:ef:1e:0d:c5:a0:65:e0:bc:e6:50:3a:25:ad:44: 75:30:7b:1e:b4:a1:82:79:d3:cc:ef:a0:cb:62:f1: 06:9e:ac:e3:50:ff:76:9b:12:9f:30:bc:7b:e9:4f: 5e:c1:2a:5e:ac:eb:e6:4f:ae:be:ac:e0:37:f2:69: f4:a0:23:7e:14:3d:14:48:21:13:26:f2:a1:26:a5: 91:f3:cb:05:38:f1:79:0c:e4:b7:d2:a2:de:ce:c7: 49:eb:9c:f1:98:9b:53:3b:93:e0:b6:e6:2e:86:0f: ec:cb:66:e2:02:bd:a0:19:9f:b1:95:3a:15:30:53: 3d:bd:34:f4:b2:1a:64:70:2f:6a:28:0d:12:95:d3: 77:d3:03:cc:4c:a9:a4:a0:61:b4:b1:16:24:54:cb: 6c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EE:CC:1D:EE:BC:ED:EF:FA:F1:0A:C3:A8:35:37:1D:75:2C:25:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl X509v3 Authority Key Identifier: keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer sbgp-ipAddrBlock: critical IPv4: 162.118.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e0:06:60:79:01:00:54:f7:f8:87:28:96:97:bc:fb:06:84: b7:90:64:44:1f:49:c5:75:a7:15:ff:03:c4:f2:1f:32:f7:36: a4:7b:83:ab:15:1c:9b:ea:c0:ca:c5:14:6a:08:5f:a0:78:6a: 1d:d4:89:2f:3b:d8:4e:71:c9:d0:fd:bd:34:45:36:1d:a2:0c: 40:82:ed:03:16:4a:91:98:02:d0:8c:81:ba:da:6d:f5:3d:ff: 0e:71:8c:91:03:df:2b:37:75:6e:fb:44:57:18:d5:6a:cd:b8: 92:5e:5e:a4:a1:ad:19:12:96:1f:fe:fb:97:b9:82:e4:1b:60: 41:3a:a3:e5:35:62:20:17:4f:92:ca:2b:87:61:0c:d8:46:fb: 64:c3:10:39:95:c1:e3:2c:6a:00:df:2c:2a:a9:fd:f2:8d:43: 51:ee:77:1f:15:03:5e:f9:d3:2d:f8:bd:35:4f:23:14:0d:cf: ad:12:72:86:43:f7:3d:b5:36:e6:40:68:44:20:65:51:fb:08: 85:bd:70:66:e2:cd:54:1b:0a:5e:c6:2a:6d:c0:39:44:57:5d: d8:47:31:0d:8b:2e:65:cf:7a:3c:92:2d:a0:c1:45:20:23:fe: 8a:e2:0f:bf:78:cb:23:83:80:dc:c6:4e:d8:a6:e1:ee:66:2c: b9:02:47:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukdIKnBLyJoiMaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz MTEzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjI3M2NjNjgtMTJjMS00ZDE1LWEwNDItOTQ4ZDQ5M2E4YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0YHe4aPmnm3HzfFc/yYEoGtkkCWM6tgVr+c 4ZMGBDMXJafO0cO5yo7PUTIF7U4UIZuXmxRHHoZTJRe/xGirUGBYsDSEot0XuX5f I30RjyJscQwlBmK+Mw2xFIfsAUj9zfxwxYj/yAri7x4NxaBl4LzmUDolrUR1MHse tKGCedPM76DLYvEGnqzjUP92mxKfMLx76U9ewSperOvmT66+rOA38mn0oCN+FD0U SCETJvKhJqWR88sFOPF5DOS30qLezsdJ65zxmJtTO5PgtuYuhg/sy2biAr2gGZ+x lToVMFM9vTT0shpkcC9qKA0SldN30wPMTKmkoGG0sRYkVMtsEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3uzB3uvO3v+vEKw6g1Nx11LCV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvOTM1ZjIzN2YtM2UwOC0z M2QyLWFmMWYtNGIxZWZlNjFkNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1 MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonYhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLgBmB5AQBU9/iHKJaXvPsGhLeQZEQfScV1pxX/A8TyHzL3NqR7g6sV HJvqwMrFFGoIX6B4ah3UiS872E5xydD9vTRFNh2iDECC7QMWSpGYAtCMgbrabfU9 /w5xjJED3ys3dW77RFcY1WrNuJJeXqShrRkSlh/++5e5guQbYEE6o+U1YiAXT5LK K4dhDNhG+2TDEDmVweMsagDfLCqp/fKNQ1Hudx8VA1750y34vTVPIxQNz60ScoZD 9z21NuZAaEQgZVH7CIW9cGbizVQbCl7GKm3AOURXXdhHMQ2LLmXPejySLaDBRSAj /oriD794yyODgNzGTtim4e5mLLkCRx8= -----END CERTIFICATE-----Generated at Wed Apr 15 12:59:09 2026 by rpki-client