$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa File: 935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa (raw, json) Hash identifier: CCw/9MObj/nGF5pDtxW3+cdHA5gVOhmcidz7nQiESN8= Subject key identifier: BD:92:9C:F6:6A:13:DF:F7:6F:98:25:31:0E:A1:61:87:B5:F8:31:92 Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Certificate serial: 010D0C9F4328584ED861EAFEF063C127FEA0E000 Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 22504 IP address blocks: 162.118.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:ea:fe:f0:63:c1:27:fe:a0:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=cb352206-b91a-443d-bf10-526519958fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:d8:30:ad:08:8e:3d:8d:fe:5f:5e:11:be: 2b:00:db:f6:fc:43:ee:85:1e:7b:f5:17:5e:d6:3a: 81:e5:8f:f3:2d:2b:c7:01:c1:cc:72:40:9e:c5:c0: 68:97:b1:af:64:c2:36:e5:1a:21:68:1f:53:39:b1: c2:be:a2:0c:45:76:18:b5:d1:22:a0:e4:1d:21:8b: 9b:1b:c9:d0:b5:cd:d9:92:fb:99:02:2d:9a:5c:60: 9b:4b:29:8f:4a:17:43:50:92:80:8f:2f:1e:47:11: 0f:c1:57:56:84:56:74:4f:04:73:2e:57:d2:e0:31: 3d:92:1b:25:25:86:f7:d9:68:27:ce:48:70:4e:f6: e6:54:e3:6f:51:f3:3d:2d:9d:c7:9f:df:ed:b6:aa: 59:84:da:6a:fd:68:81:95:08:39:4e:fb:65:6c:58: c7:8b:f3:cb:69:7a:6a:a7:cd:3d:6e:e9:0b:ad:03: 06:cc:29:d0:dd:43:ee:52:25:13:74:5a:81:d5:23: 6a:79:a3:e6:df:00:a0:ba:74:52:87:24:c0:ca:8d: 06:91:26:f0:3c:b7:01:c8:8d:af:db:78:a4:7c:a2: a4:b9:6f:e7:b0:e7:36:0b:2a:08:c8:8c:57:f2:f6: 39:a1:d1:a2:c9:be:b6:f7:55:87:09:a7:86:64:f7: f1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:92:9C:F6:6A:13:DF:F7:6F:98:25:31:0E:A1:61:87:B5:F8:31:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl X509v3 Authority Key Identifier: keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer sbgp-ipAddrBlock: critical IPv4: 162.118.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:6e:fa:7d:f2:ba:d5:10:ac:cb:34:e8:89:f1:b1:31:3d:92: 85:78:f1:ec:4b:a0:23:93:8c:69:10:94:5a:74:aa:1b:63:f2: 72:68:fc:34:aa:64:ea:ff:1b:a0:9e:6e:d7:56:4d:b1:5b:d2: ba:11:e8:41:6d:ef:96:99:0b:89:15:20:72:5d:e1:f9:ed:ea: 0f:17:b3:4d:fc:37:ec:cc:33:e0:12:d6:64:a5:ad:63:e9:a2: ad:20:0c:82:87:51:14:e4:40:3c:bc:50:f9:1a:a9:1d:c5:54: 94:47:da:c3:70:ab:22:b6:94:b3:e7:a3:60:36:4e:f0:3c:fb: 10:6d:dc:81:70:26:4a:04:de:2b:e0:88:b2:e0:1d:7d:ce:84: a8:d2:cf:46:c7:d9:6b:da:82:d4:7f:cf:1a:f7:2a:df:4a:3a: 95:54:df:2c:7e:5c:17:4c:3b:ac:00:6b:27:ec:71:62:95:a0: f4:22:6d:2b:65:1f:60:32:9e:ed:cc:84:b1:09:95:fb:bf:a8: 23:63:81:33:81:b9:93:22:fb:9f:6d:4c:c9:e0:68:fc:e5:d3: 5f:6e:b8:c4:da:20:d6:71:ab:99:e8:86:c7:da:5c:12:bf:f7: df:db:9c:2a:ea:d2:d4:c1:38:6c:df:a1:35:a3:1a:31:ac:85: 47:33:d2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYer+8GPBJ/6g4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz MTEzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk Y2IzNTIyMDYtYjkxYS00NDNkLWJmMTAtNTI2NTE5OTU4ZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR7YMK0Ijj2N/l9eEb4rANv2/EPuhR579Rde 1jqB5Y/zLSvHAcHMckCexcBol7GvZMI25RohaB9TObHCvqIMRXYYtdEioOQdIYub G8nQtc3ZkvuZAi2aXGCbSymPShdDUJKAjy8eRxEPwVdWhFZ0TwRzLlfS4DE9khsl JYb32WgnzkhwTvbmVONvUfM9LZ3Hn9/ttqpZhNpq/WiBlQg5TvtlbFjHi/PLaXpq p809bukLrQMGzCnQ3UPuUiUTdFqB1SNqeaPm3wCgunRShyTAyo0GkSbwPLcByI2v 23ikfKKkuW/nsOc2CyoIyIxX8vY5odGiyb6291WHCaeGZPfx/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2SnPZqE9/3b5glMQ6hYYe1+DGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvOTM1ZjIzN2YtM2UwOC0z M2QyLWFmMWYtNGIxZWZlNjFkNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1 MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonYhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlu+n3yutUQrMs06InxsTE9koV48exLoCOTjGkQlFp0qhtj8nJo/DSq ZOr/G6CebtdWTbFb0roR6EFt75aZC4kVIHJd4fnt6g8Xs038N+zMM+AS1mSlrWPp oq0gDIKHURTkQDy8UPkaqR3FVJRH2sNwqyK2lLPno2A2TvA8+xBt3IFwJkoE3ivg iLLgHX3OhKjSz0bH2WvagtR/zxr3Kt9KOpVU3yx+XBdMO6wAayfscWKVoPQibStl H2Aynu3MhLEJlfu/qCNjgTOBuZMi+59tTMngaPzl019uuMTaINZxq5nohsfaXBK/ 99/bnCrq0tTBOGzfoTWjGjGshUcz0jE= -----END CERTIFICATE-----Generated at Mon Aug 31 11:49:20 2026 by rpki-client