$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa File: 38442203-0a23-3c40-8941-6f49f8a5fb72.roa (raw, json) Hash identifier: WQYfuB3ZwNDUfhIqGysx5v58VrqY0T3i7VTyvxP7zEA= Subject key identifier: A2:C2:97:6B:76:0D:98:18:B3:D3:6A:61:84:9C:EA:F5:E3:52:21:64 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584EBDDC636D9148A837FA86B42D Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa Signing time: Thu 06 Aug 2026 01:00:12 +0000 ROA not before: Thu 06 Aug 2026 01:00:12 +0000 ROA not after: Wed 04 Nov 2026 02:00:12 +0000 asID: 33039 IP address blocks: 142.248.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:dc:63:6d:91:48:a8:37:fa:86:b4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Aug 6 01:00:12 2026 GMT Not After : Nov 4 02:00:12 2026 GMT Subject: CN=03a8af9e-c5fe-45d2-8809-7eecf576d303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d2:4a:9b:54:7d:fe:fe:3b:a8:17:46:ff:be: 0e:91:4a:d0:72:52:4c:77:a6:82:e5:c0:fa:de:89: 23:e1:8a:7b:ea:c7:3b:43:03:81:dd:5d:a2:25:f6: 52:ab:06:41:f3:b8:96:16:1e:2e:51:89:8b:23:f9: bd:62:aa:d9:bd:08:09:b1:c9:52:68:4a:e9:99:9f: 61:70:82:b4:d0:6b:52:01:26:14:89:52:28:10:74: 8f:66:b8:61:65:6f:9f:7d:89:c9:af:d0:d5:3c:94: f1:16:a1:e1:64:41:c5:e4:5a:5f:39:dd:8b:17:05: ca:f0:64:a8:1d:25:44:93:0d:e2:1c:f6:1b:f6:61: 18:fe:ad:77:13:fb:73:c2:84:e4:84:06:ca:9f:9c: 5f:ec:8f:d5:c7:57:7e:1f:cf:00:62:fa:9e:d4:83: c2:2d:ae:54:99:0e:de:8b:3e:d4:e1:ab:19:6d:5c: 72:78:bb:fb:63:f3:e1:5c:24:6d:2d:e6:07:58:6e: 37:18:1b:63:50:17:2b:f6:25:22:c5:22:b2:ad:8e: 58:a3:37:8b:35:fe:99:e4:68:ad:be:fc:e0:a4:b6: c4:63:c4:58:8f:3f:66:eb:67:53:6b:31:84:d9:74: 8b:8d:9f:fd:63:c6:72:6a:1a:fc:ec:d8:e3:80:6f: a1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C2:97:6B:76:0D:98:18:B3:D3:6A:61:84:9C:EA:F5:E3:52:21:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv4: 142.248.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d0:0c:b3:d3:89:be:e2:06:55:c4:61:35:37:52:b4:ed:10: e7:b6:87:94:03:9a:b6:1a:c4:94:f0:47:76:40:34:2f:87:8c: 8c:c8:b0:1a:51:08:6c:63:9c:95:2d:ab:39:2c:ce:e2:67:7e: 17:83:4b:fa:36:d8:0a:f4:af:25:1c:f9:ca:40:08:15:74:dd: 6c:55:cf:74:b4:bb:7c:5e:64:62:9e:54:55:6e:b5:9b:9a:7c: 0a:28:0b:a4:49:85:69:30:57:5c:c1:bb:48:2a:0b:5e:2b:84: 17:86:ad:2f:a1:4d:5c:f8:25:e7:04:9d:78:e3:12:51:ba:81: f5:3c:66:a8:a5:41:e2:80:a8:9c:15:91:a8:5d:ac:03:28:42: 30:29:b4:aa:e3:c2:b9:17:4d:24:61:d8:fa:63:de:6f:15:ef: 87:7f:47:fe:91:3c:e9:b5:a5:33:82:8c:1a:4f:58:9a:41:6d: bc:63:00:c5:15:de:2b:87:5d:30:3d:4d:46:6e:eb:39:4c:3d: 91:2c:9b:f7:72:bf:6d:96:19:73:16:ff:c1:21:d4:b8:c3:87: 50:38:2f:8e:90:91:8a:a5:34:9f:01:a8:8b:9c:b4:21:20:87: 39:27:fb:e3:cf:02:3c:a0:6a:50:c7:06:83:91:ab:12:b3:41: b8:11:d0:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE693GNtkUioN/qGtC0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDNhOGFmOWUtYzVmZS00NWQyLTg4MDktN2VlY2Y1NzZkMzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tJKm1R9/v47qBdG/74OkUrQclJMd6aC5cD6 3okj4Yp76sc7QwOB3V2iJfZSqwZB87iWFh4uUYmLI/m9YqrZvQgJsclSaErpmZ9h cIK00GtSASYUiVIoEHSPZrhhZW+ffYnJr9DVPJTxFqHhZEHF5FpfOd2LFwXK8GSo HSVEkw3iHPYb9mEY/q13E/tzwoTkhAbKn5xf7I/Vx1d+H88AYvqe1IPCLa5UmQ7e iz7U4asZbVxyeLv7Y/PhXCRtLeYHWG43GBtjUBcr9iUixSKyrY5YozeLNf6Z5Git vvzgpLbEY8RYjz9m62dTazGE2XSLjZ/9Y8Zyahr87NjjgG+hVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLCl2t2DZgYs9NqYYSc6vXjUiFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvMzg0NDIyMDMtMGEyMy0z YzQwLTg5NDEtNmY0OWY4YTVmYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnQDLPTib7iBlXEYTU3UrTtEOe2h5QDmrYaxJTwR3ZANC+HjIzIsBpR CGxjnJUtqzkszuJnfheDS/o22Ar0ryUc+cpACBV03WxVz3S0u3xeZGKeVFVutZua fAooC6RJhWkwV1zBu0gqC14rhBeGrS+hTVz4JecEnXjjElG6gfU8ZqilQeKAqJwV kahdrAMoQjAptKrjwrkXTSRh2Ppj3m8V74d/R/6RPOm1pTOCjBpPWJpBbbxjAMUV 3iuHXTA9TUZu6zlMPZEsm/dyv22WGXMW/8Eh1LjDh1A4L46QkYqlNJ8BqIuctCEg hzkn++PPAjygalDHBoORqxKzQbgR0CI= -----END CERTIFICATE-----Generated at Thu Sep 24 06:46:51 2026 by rpki-client