$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e3aa021b-4de7-3417-b140-22db633a4c46.roa File: e3aa021b-4de7-3417-b140-22db633a4c46.roa (raw, json) Hash identifier: gxvY/4dJ5HLmIcTK9JyjbW1SzFjAINowQlDt5Hwj6yU= Subject key identifier: D3:35:47:81:34:A6:6F:0C:C3:FE:37:A6:15:C4:C3:84:40:1D:04:88 Certificate issuer: /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Certificate serial: 010D0C9F4328584EA78F739F3F01D8A8D753D210 Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e3aa021b-4de7-3417-b140-22db633a4c46.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 18540 IP address blocks: 170.62.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:73:9f:3f:01:d8:a8:d7:53:d2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2d51d0ae-3af7-43b3-86fe-3cb81bd19a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:d6:9e:cd:fa:bb:0a:b4:3f:13:93:b0:67: 13:4d:a7:cf:a5:c6:3e:2f:a6:46:92:0c:4e:80:1a: 74:74:7e:89:13:53:bf:54:e6:13:fc:60:81:ab:67: 8b:43:e2:24:c0:21:9a:9b:fb:95:c1:fd:56:39:17: 47:8b:f7:a5:51:38:bd:bd:25:94:5d:98:07:13:72: 92:10:16:f8:03:bc:2b:91:c3:74:ca:f6:2b:98:12: 72:6a:f5:07:86:cd:ba:5c:0c:e6:58:63:38:21:ae: 9a:42:be:4f:c6:14:98:00:4e:14:83:db:b9:49:c7: 1d:fa:35:6b:1d:86:80:5e:ff:41:6d:16:fd:bb:a6: e0:ab:28:9d:ca:4a:33:0a:5a:3b:38:fb:c5:69:84: 2e:4f:f9:13:c7:f1:2b:69:55:2f:92:17:24:e9:2e: 37:ad:7e:40:5d:94:b6:72:35:78:e3:2a:b8:21:d0: ec:66:c8:59:0b:1c:ab:2c:ad:2e:38:db:ff:5a:f7: 8a:59:fe:4e:c8:f7:c8:c6:e0:17:cd:4b:38:c8:c4: 04:d6:25:58:5f:93:c2:46:a0:d1:a5:03:53:45:3f: bd:17:79:56:7a:80:cc:f6:84:c3:ad:0e:bf:01:98: ca:9b:98:5c:6d:f4:cd:c4:ec:67:2f:5a:00:b6:6c: 32:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:35:47:81:34:A6:6F:0C:C3:FE:37:A6:15:C4:C3:84:40:1D:04:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e3aa021b-4de7-3417-b140-22db633a4c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl X509v3 Authority Key Identifier: keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer sbgp-ipAddrBlock: critical IPv4: 170.62.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:1d:01:21:fb:10:2d:ed:17:00:f3:b8:ed:7e:5f:f4:93:8e: 92:9b:1b:03:40:fd:50:05:f5:bb:e4:29:17:3f:f2:1a:aa:dd: 83:17:3f:28:15:0a:6b:44:d8:7e:6f:b7:57:4f:a7:d9:c3:35: 1f:fb:9a:a3:ee:93:89:b9:31:4b:1c:3b:fd:62:ad:fc:df:a6: 02:54:e8:5f:2f:9f:8c:c7:57:d7:be:26:8c:df:fa:4a:93:e2: d1:f2:7e:5c:8b:4b:21:5a:e5:b1:fd:50:ba:7f:95:2f:f9:2d: 02:b1:3a:c3:5c:ca:6b:bb:86:a4:97:7e:c8:3e:d7:59:87:d7: c8:c8:32:11:e7:14:87:49:2d:2c:7d:09:0a:a7:86:18:6e:3a: a5:0e:89:5a:ca:f7:20:8e:73:2b:4c:12:55:43:5d:23:74:5f: 54:d7:09:ce:12:ce:04:82:6c:b0:28:55:84:00:ca:8d:cf:12: 07:26:c8:8d:60:64:03:ef:99:d5:a0:f9:91:60:c7:15:b9:10: 13:65:a0:30:c8:66:40:60:11:b3:02:de:b7:c0:e6:6a:e3:25: 6c:f9:b7:fe:a8:f8:8f:0f:bd:d6:a2:d7:d9:6f:ed:de:50:80: f0:ad:fd:07:1c:32:17:e3:09:81:2a:7a:c0:d2:c7:80:c6:0c: 74:00:25:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj3OfPwHYqNdT0hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QwMDE5OGYtYTUzMC00OTBjLThlZjUtNWMzMWFjOWI4 OGVlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmQ1MWQwYWUtM2FmNy00M2IzLTg2ZmUtM2NiODFiZDE5YTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IrWns36uwq0PxOTsGcTTafPpcY+L6ZGkgxO gBp0dH6JE1O/VOYT/GCBq2eLQ+IkwCGam/uVwf1WORdHi/elUTi9vSWUXZgHE3KS EBb4A7wrkcN0yvYrmBJyavUHhs26XAzmWGM4Ia6aQr5PxhSYAE4Ug9u5Sccd+jVr HYaAXv9BbRb9u6bgqyidykozClo7OPvFaYQuT/kTx/EraVUvkhck6S43rX5AXZS2 cjV44yq4IdDsZshZCxyrLK0uONv/WveKWf5OyPfIxuAXzUs4yMQE1iVYX5PCRqDR pQNTRT+9F3lWeoDM9oTDrQ6/AZjKm5hcbfTNxOxnL1oAtmwyJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNM1R4E0pm8Mw/43phXEw4RAHQSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDAw MTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMxYWM5Yjg4ZWUvZTNhYTAyMWItNGRlNy0z NDE3LWIxNDAtMjJkYjYzM2E0YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2QwMDE5OGYtYTUzMC00OTBjLThl ZjUtNWMzMWFjOWI4OGVlL2NkMDAxOThmLWE1MzAtNDkwYy04ZWY1LTVjMzFhYzli ODhlZS5jcmwwHwYDVR0jBBgwFoAU7rLnVBdOMcl6DRXlckVdZx3zkr8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDAwMTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMx YWM5Yjg4ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMdASH7EC3tFwDzuO1+X/STjpKbGwNA/VAF9bvkKRc/8hqq3YMXPygV CmtE2H5vt1dPp9nDNR/7mqPuk4m5MUscO/1irfzfpgJU6F8vn4zHV9e+Jozf+kqT 4tHyflyLSyFa5bH9ULp/lS/5LQKxOsNcymu7hqSXfsg+11mH18jIMhHnFIdJLSx9 CQqnhhhuOqUOiVrK9yCOcytMElVDXSN0X1TXCc4SzgSCbLAoVYQAyo3PEgcmyI1g ZAPvmdWg+ZFgxxW5EBNloDDIZkBgEbMC3rfA5mrjJWz5t/6o+I8Pvdai19lv7d5Q gPCt/QccMhfjCYEqesDSx4DGDHQAJQM= -----END CERTIFICATE-----Generated at Wed Jul 29 05:49:55 2026 by rpki-client