$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa File: e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa (raw, json) Hash identifier: j9CvHL1jsr93t/mOAff3FNAfMN2L8gNZD6EHZx0/GRE= Subject key identifier: 74:7F:CF:64:28:02:89:95:2E:93:80:20:B9:B8:5D:8F:E4:E1:F4:E0 Certificate issuer: /CN=db3948d9-e295-422b-8439-1e057eb4673b Certificate serial: 010D0C9F4328584EA7888DD3D1AE5F452416BE80 Authority key identifier: 17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30048 IP address blocks: 199.33.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:8d:d3:d1:ae:5f:45:24:16:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3948d9-e295-422b-8439-1e057eb4673b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=833be017-04f3-47b0-bf2d-60bfa0d61445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:6d:0e:c8:8d:a1:55:3a:47:f4:e1:e8:51: 13:ab:c2:cd:e8:f2:87:1c:3b:32:7a:a6:33:4a:78: d1:1b:37:1b:4c:42:dc:45:b0:89:53:ad:3d:98:fd: 83:46:bd:0f:70:ed:6a:d3:0f:da:e2:da:57:b5:18: 04:8d:6a:68:0f:eb:b3:c9:2d:b3:15:07:23:63:c0: 2c:05:92:04:62:d5:38:76:f0:6c:ab:ac:b8:01:9c: d9:5a:77:aa:60:08:0d:90:04:42:5d:5a:9d:c9:1e: 27:ba:17:e8:e6:28:66:15:42:2a:24:fc:37:52:bd: d5:01:85:51:cc:0a:25:3e:d8:1e:6f:7c:a7:b9:95: c6:c0:4a:ed:8f:d6:24:27:98:40:6e:bf:93:07:c9: 8c:a2:0d:55:2a:11:b2:46:3b:6f:f7:ec:2f:db:b5: a4:a2:ab:23:fb:42:67:1a:97:cb:79:57:fe:29:42: 20:01:a8:9d:f3:a0:39:23:c2:60:7f:ac:f2:e9:18: 22:86:57:d7:f1:a2:b8:4a:9c:22:05:a6:f9:eb:e5: 67:03:af:a1:fe:bb:77:e6:db:2d:ae:17:75:3c:b1: 4d:9c:fe:2a:35:54:3f:52:27:9b:3d:2c:cc:e7:9b: d7:e7:bb:79:2e:28:f5:38:f3:b0:f2:0b:65:19:c3: b1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7F:CF:64:28:02:89:95:2E:93:80:20:B9:B8:5D:8F:E4:E1:F4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl X509v3 Authority Key Identifier: keyid:17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a9:4e:d3:f6:9c:f9:65:64:af:0f:4b:e2:11:2e:44:9f:8f: 11:25:0e:62:16:e6:17:c6:61:eb:45:52:c0:c3:1f:52:3f:b2: ba:01:8f:26:a2:0c:74:21:36:80:0d:69:ae:cf:c5:18:33:40: 6e:67:8b:be:3a:1b:8a:fa:3e:26:e1:22:80:92:34:03:98:f9: 9e:bc:2e:c2:05:3d:01:d2:22:c2:e7:2e:71:f1:6c:fc:a8:2b: 28:84:b1:75:3a:f9:4f:4e:c0:7e:fd:4d:52:6b:4d:0a:ef:9b: db:a6:ee:e6:17:c5:fb:8f:b6:f7:91:52:1e:64:1d:a7:13:33: 0e:0e:50:bb:78:18:f3:20:01:ae:ca:2b:8f:44:9e:2a:44:2c: 77:91:d8:9b:3d:8d:ef:ae:8e:5a:5f:8d:3a:b9:e7:84:be:bd: 46:6e:8b:74:41:d0:87:c8:60:95:34:5e:79:78:bd:be:24:90: a3:89:d6:31:ce:c9:80:7c:69:d5:f2:0a:6e:05:0f:23:34:4b: 97:b3:cc:b5:ba:70:65:76:5a:9d:d7:54:ce:85:46:05:76:1c: 36:4b:ea:5b:3c:03:d5:f4:cd:7f:89:6e:38:53:ac:58:42:23: 4a:f9:29:25:b9:3a:f6:dc:0b:7b:dc:fe:d5:0f:37:b5:b8:2b: 73:f5:f2:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niI3T0a5fRSQWvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzOTQ4ZDktZTI5NS00MjJiLTg0MzktMWUwNTdlYjQ2 NzNiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODMzYmUwMTctMDRmMy00N2IwLWJmMmQtNjBiZmEwZDYxNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGhtDsiNoVU6R/Th6FETq8LN6PKHHDsyeqYz SnjRGzcbTELcRbCJU609mP2DRr0PcO1q0w/a4tpXtRgEjWpoD+uzyS2zFQcjY8As BZIEYtU4dvBsq6y4AZzZWneqYAgNkARCXVqdyR4nuhfo5ihmFUIqJPw3Ur3VAYVR zAolPtgeb3ynuZXGwErtj9YkJ5hAbr+TB8mMog1VKhGyRjtv9+wv27Wkoqsj+0Jn GpfLeVf+KUIgAaid86A5I8Jgf6zy6RgihlfX8aK4SpwiBab56+VnA6+h/rt35tst rhd1PLFNnP4qNVQ/UiebPSzM55vX57t5Lij1OPOw8gtlGcOxawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHR/z2QoAomVLpOAILm4XY/k4fTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYjM5 NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1N2ViNDY3M2IvZTg4YTM0YzktMDVkMC0z ZmRlLWE1MTYtN2U1OGJhMzg1N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGIzOTQ4ZDktZTI5NS00MjJiLTg0 MzktMWUwNTdlYjQ2NzNiL2RiMzk0OGQ5LWUyOTUtNDIyYi04NDM5LTFlMDU3ZWI0 NjczYi5jcmwwHwYDVR0jBBgwFoAUF6UPowQBBMXBJShkLw3tZeJs8lwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYjM5NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1 N2ViNDY3M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+pTtP2nPllZK8PS+IRLkSfjxElDmIW5hfGYetFUsDDH1I/sroBjyai DHQhNoANaa7PxRgzQG5ni746G4r6PibhIoCSNAOY+Z68LsIFPQHSIsLnLnHxbPyo KyiEsXU6+U9OwH79TVJrTQrvm9um7uYXxfuPtveRUh5kHacTMw4OULt4GPMgAa7K K49EnipELHeR2Js9je+ujlpfjTq554S+vUZui3RB0IfIYJU0Xnl4vb4kkKOJ1jHO yYB8adXyCm4FDyM0S5ezzLW6cGV2Wp3XVM6FRgV2HDZL6ls8A9X0zX+JbjhTrFhC I0r5KSW5OvbcC3vc/tUPN7W4K3P18ow= -----END CERTIFICATE-----Generated at Wed Jul 29 04:30:30 2026 by rpki-client