$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/3722329e-a28c-3dbb-b120-e326fbcbaad0.roa File: 3722329e-a28c-3dbb-b120-e326fbcbaad0.roa (raw, json) Hash identifier: IC25OQxNSL3gUZYwlCsU3JJ2xqcAhGfIDAfOb62tKcc= Subject key identifier: 11:B7:C1:57:AB:C1:29:9C:CB:09:E2:FF:92:50:20:C0:D0:3F:D7:06 Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F4328584D4D5A673885FECA2BEEC50820 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/3722329e-a28c-3dbb-b120-e326fbcbaad0.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 13638 IP address blocks: 162.33.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:67:38:85:fe:ca:2b:ee:c5:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=3dc28058-e645-48ba-b9bc-c05a7d3af3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ae:12:3d:46:94:f7:28:0d:cd:56:d1:a0:99: 32:8f:08:2a:96:db:3e:b0:97:5c:01:5a:88:b5:68: d4:94:77:06:27:0e:78:f4:df:bf:b1:78:42:94:ed: 87:2d:d0:1d:ea:6f:28:fd:c7:54:f2:27:fb:0e:54: 2a:ea:31:22:fe:71:59:e1:57:6e:fe:20:eb:ed:56: 2c:99:6b:fe:2c:2b:0d:7a:ef:9a:85:f3:5b:e7:cf: f0:db:23:e0:0c:cc:41:19:f6:92:93:84:bb:86:52: f6:06:ec:3c:1d:ad:ab:72:4b:a0:db:7e:e4:e3:bb: 35:53:1f:c2:57:11:67:7a:68:63:85:99:62:24:9b: e2:95:6e:22:c8:9a:41:2f:3b:3c:75:19:6f:54:b0: e2:7f:9f:34:66:fe:8e:d3:01:eb:76:47:c8:ee:48: e4:be:4f:fc:2c:b1:bc:7b:a9:3c:a4:53:ea:5b:f3: bb:97:66:cc:67:4f:34:cf:bf:19:02:46:13:eb:06: 2c:50:b7:ba:a0:a2:90:4b:71:d1:43:8e:a8:04:ba: 01:57:5f:43:88:8e:59:62:1d:12:92:90:e4:9b:48: fc:99:ec:e6:37:5c:e0:d6:76:5f:a7:dd:d8:55:a7: 36:69:0f:b5:4e:13:6e:5e:1f:18:77:0a:31:25:e3: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B7:C1:57:AB:C1:29:9C:CB:09:E2:FF:92:50:20:C0:D0:3F:D7:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/3722329e-a28c-3dbb-b120-e326fbcbaad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 162.33.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:45:c1:84:e5:51:2a:59:be:ae:25:68:20:97:38:d6:a2:db: 2c:7b:46:e7:fd:6c:d8:67:21:c7:bf:1e:5b:a3:c9:46:57:fa: 20:dd:1a:01:c0:71:cf:d8:72:7e:fe:ce:95:c7:ac:f2:e4:d7: ee:33:51:76:63:00:0e:9a:f0:7e:10:fa:db:a2:52:47:00:f8: 37:40:42:48:55:fe:32:a9:1b:07:c7:1b:c3:7e:e6:1b:99:cb: c8:29:72:68:49:ef:1a:77:fc:14:af:e5:aa:40:ff:15:fb:61: 93:41:03:c4:67:9e:f0:88:12:50:12:45:4d:9e:83:f2:ab:c6: 9b:6f:52:3e:89:e6:cf:da:d0:e6:4e:ec:ac:55:6e:70:f4:ca: 80:99:b3:cb:4f:0b:a3:20:ab:16:44:d0:1b:78:9e:c7:62:20: 11:b3:62:f0:5a:e7:12:97:fd:01:e0:ab:44:40:fb:ec:72:6b: f2:85:e1:dd:a6:df:dc:52:da:75:17:5c:48:02:35:49:1f:4a: a0:1f:c1:fe:bf:ba:9e:47:01:49:b3:fe:52:d6:00:73:a4:c3: 58:7e:7d:47:48:b5:d9:70:fb:92:a8:ab:62:02:da:7e:f0:65: d3:95:83:1a:28:dd:e6:1c:4f:4a:91:7f:39:d9:f8:9d:67:53: 52:2a:ac:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWmc4hf7KK+7FCCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk M2RjMjgwNTgtZTY0NS00OGJhLWI5YmMtYzA1YTdkM2FmM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq4SPUaU9ygNzVbRoJkyjwgqlts+sJdcAVqI tWjUlHcGJw549N+/sXhClO2HLdAd6m8o/cdU8if7DlQq6jEi/nFZ4Vdu/iDr7VYs mWv+LCsNeu+ahfNb58/w2yPgDMxBGfaSk4S7hlL2Buw8Ha2rckug237k47s1Ux/C VxFnemhjhZliJJvilW4iyJpBLzs8dRlvVLDif580Zv6O0wHrdkfI7kjkvk/8LLG8 e6k8pFPqW/O7l2bMZ080z78ZAkYT6wYsULe6oKKQS3HRQ46oBLoBV19DiI5ZYh0S kpDkm0j8mezmN1zg1nZfp93YVac2aQ+1ThNuXh8YdwoxJeOoowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBG3wVerwSmcywni/5JQIMDQP9cGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvMzcyMjMyOWUtYTI4Yy0z ZGJiLWIxMjAtZTMyNmZiY2JhYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFoiEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9FwYTlUSpZvq4laCCXONai2yx7Ruf9bNhnIce/HlujyUZX+iDdGgHA cc/Ycn7+zpXHrPLk1+4zUXZjAA6a8H4Q+tuiUkcA+DdAQkhV/jKpGwfHG8N+5huZ y8gpcmhJ7xp3/BSv5apA/xX7YZNBA8RnnvCIElASRU2eg/KrxptvUj6J5s/a0OZO 7KxVbnD0yoCZs8tPC6MgqxZE0Bt4nsdiIBGzYvBa5xKX/QHgq0RA++xya/KF4d2m 39xS2nUXXEgCNUkfSqAfwf6/up5HAUmz/lLWAHOkw1h+fUdItdlw+5Koq2IC2n7w ZdOVgxoo3eYcT0qRfznZ+J1nU1IqrNo= -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:15 2026 by rpki-client