$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/e5509d98-c8ea-38e0-88a8-99be28cd2866.roa File: e5509d98-c8ea-38e0-88a8-99be28cd2866.roa (raw, json) Hash identifier: 34S7QhQLEVXvvWChYpsoMGXHVREahKPWghM9MoEzrik= Subject key identifier: 37:EE:BC:1F:8D:33:3A:7D:FA:90:B2:44:7B:D4:2C:DD:F3:BE:8E:D9 Certificate issuer: /CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Certificate serial: 010D0C9F4328584EA79B29B2833D3FD6BA99FD00 Authority key identifier: 2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/e5509d98-c8ea-38e0-88a8-99be28cd2866.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 394911 IP address blocks: 208.90.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:29:b2:83:3d:3f:d6:ba:99:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a9e38a7e-b52f-44b6-b97e-04274bb211c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cf:c8:0b:86:3f:94:e8:6f:e0:91:8c:bf:58: 78:1b:c8:f3:32:c6:d6:42:d0:ca:bd:31:79:53:91: 35:7f:3d:15:b7:f5:65:79:ff:7c:f2:06:aa:db:4a: 6f:9d:6d:75:e5:df:07:d1:69:98:71:d2:df:b9:c3: b3:ff:64:2e:90:87:25:7a:4f:c4:ed:c4:ab:fd:d5: e2:38:39:95:3a:1b:72:19:fb:1a:71:a3:d0:75:80: 99:ad:5e:f4:45:d6:c9:ce:29:cd:1c:14:1a:ce:a6: a6:15:7d:4b:a8:72:37:51:d9:c1:a8:ca:3a:fb:25: d9:80:89:ca:55:5c:8d:a2:f1:48:d3:02:46:6c:fd: da:76:f9:2a:c2:b7:2a:c4:fc:6c:a8:a3:de:40:e0: 92:da:84:2d:f5:86:d7:64:78:1a:84:72:af:14:d1: d9:e9:55:97:2a:d0:96:08:4a:ea:e4:1c:e6:76:c7: 70:e0:96:0b:77:2f:42:9d:7d:81:2a:4e:1a:af:e0: d7:71:94:36:b1:2b:83:0e:e7:6b:ae:29:01:86:c5: 22:ea:d6:2d:e4:4d:c7:0d:21:db:e6:8c:77:d0:ad: 77:62:41:f7:09:53:9d:b7:e8:78:42:1b:8d:3c:2b: dc:2d:14:9a:84:07:36:44:07:1a:e3:3d:93:6a:7a: eb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EE:BC:1F:8D:33:3A:7D:FA:90:B2:44:7B:D4:2C:DD:F3:BE:8E:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/e5509d98-c8ea-38e0-88a8-99be28cd2866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl X509v3 Authority Key Identifier: keyid:2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer sbgp-ipAddrBlock: critical IPv4: 208.90.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:4c:5a:17:4c:a2:1a:39:f3:b6:70:e0:e5:6b:a8:50:18:78: 79:5c:ed:2b:b1:d3:46:51:d7:7e:bf:3f:47:f4:22:d0:9f:73: ec:ce:90:ff:c6:09:c7:af:1a:92:8c:0f:bf:74:33:85:63:0c: 52:d3:07:7d:20:86:31:f1:d1:25:c4:a8:86:a7:18:35:ec:eb: f2:75:b8:f9:5f:cf:44:2b:3e:2d:f3:4e:0b:4b:c8:cd:0c:c8: 6e:bd:94:37:2e:09:f3:b1:e0:55:f2:16:1e:35:7c:b1:7d:77: 22:6e:a6:b3:21:44:5d:c1:e9:61:ef:0c:df:1d:2b:cb:eb:a0: 7f:1b:03:26:74:2a:d0:08:35:9d:08:a6:e0:15:46:19:c2:ee: 60:ad:4b:c5:14:49:c2:28:79:38:52:57:2c:48:13:39:2f:d9: 69:b9:81:a7:ce:14:f0:f7:2d:84:c9:c2:b2:4f:b2:be:a9:75: 92:f0:25:98:3b:92:c5:3b:27:ce:bc:e3:47:0e:13:5b:a9:be: 37:50:44:c0:74:d8:2b:c0:f4:74:f6:9b:30:bf:6b:bc:72:8e: ec:03:5a:42:c9:27:57:e4:2e:14:18:2a:94:4b:17:08:ab:e1: 5a:30:ff:07:d3:7c:27:75:87:81:2d:55:0a:3d:52:81:27:71: 40:d1:44:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmymygz0/1rqZ/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkMWE2YjQtOTAwMy00YzFkLTlhNDgtMDI3MGJlNGFm NTBhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTllMzhhN2UtYjUyZi00NGI2LWI5N2UtMDQyNzRiYjIxMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc/IC4Y/lOhv4JGMv1h4G8jzMsbWQtDKvTF5 U5E1fz0Vt/Vlef988gaq20pvnW115d8H0WmYcdLfucOz/2QukIclek/E7cSr/dXi ODmVOhtyGfsacaPQdYCZrV70RdbJzinNHBQazqamFX1LqHI3UdnBqMo6+yXZgInK VVyNovFI0wJGbP3advkqwrcqxPxsqKPeQOCS2oQt9YbXZHgahHKvFNHZ6VWXKtCW CErq5Bzmdsdw4JYLdy9CnX2BKk4ar+DXcZQ2sSuDDudrrikBhsUi6tYt5E3HDSHb 5ox30K13YkH3CVOdt+h4QhuNPCvcLRSahAc2RAca4z2TanrrUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfuvB+NMzp9+pCyRHvULN3zvo7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Qx YTZiNC05MDAzLTRjMWQtOWE0OC0wMjcwYmU0YWY1MGEvZTU1MDlkOTgtYzhlYS0z OGUwLTg4YTgtOTliZTI4Y2QyODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNkMWE2YjQtOTAwMy00YzFkLTlh NDgtMDI3MGJlNGFmNTBhLzMzZDFhNmI0LTkwMDMtNGMxZC05YTQ4LTAyNzBiZTRh ZjUwYS5jcmwwHwYDVR0jBBgwFoAULcO59xS4bbKlYKbZRw6ggzYFRcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2QxYTZiNC05MDAzLTRjMWQtOWE0OC0wMjcw YmU0YWY1MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FoLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNMWhdMoho587Zw4OVrqFAYeHlc7Sux00ZR136/P0f0ItCfc+zOkP/G CcevGpKMD790M4VjDFLTB30ghjHx0SXEqIanGDXs6/J1uPlfz0QrPi3zTgtLyM0M yG69lDcuCfOx4FXyFh41fLF9dyJuprMhRF3B6WHvDN8dK8vroH8bAyZ0KtAINZ0I puAVRhnC7mCtS8UUScIoeThSVyxIEzkv2Wm5gafOFPD3LYTJwrJPsr6pdZLwJZg7 ksU7J86840cOE1upvjdQRMB02CvA9HT2mzC/a7xyjuwDWkLJJ1fkLhQYKpRLFwir 4Vow/wfTfCd1h4EtVQo9UoEncUDRRLQ= -----END CERTIFICATE-----Generated at Thu Aug 13 23:25:02 2026 by rpki-client