$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa File: 33a3b984-a77f-3d78-88ae-30ae68813e02.roa (raw, json) Hash identifier: QjHzZ5uslU/h7s9Mt+nMPvj1V3UsAgfp213LPD+AS1o= Subject key identifier: 1C:E5:EB:30:A9:55:FF:76:84:43:FA:E6:88:D1:F3:EE:AE:07:65:88 Certificate issuer: /CN=a7001425-6965-4c1f-8e35-f578d112295c Certificate serial: 010D0C9F4328584EA787F4AB423D4658D79F5300 Authority key identifier: F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16920 IP address blocks: 128.224.254.0/24 maxlen: 24 128.224.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:f4:ab:42:3d:46:58:d7:9f:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7001425-6965-4c1f-8e35-f578d112295c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c9b48f0e-6146-47ec-b167-486b5d6a45e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:44:08:d0:09:7d:03:51:2a:f8:9a:51:40: 73:0e:c9:d9:3d:e0:d4:4f:bc:b5:b4:2c:27:27:8a: a6:68:9f:ef:0d:3d:31:6f:12:db:c0:21:17:4f:15: 7c:81:e8:92:40:9b:7e:bc:cb:e2:00:dd:56:46:54: 7e:8d:28:0b:39:99:2a:13:4c:e1:f1:03:19:a0:88: 50:c9:ea:4b:62:49:06:57:00:06:6f:33:ee:f9:4f: 07:f1:20:6e:33:18:53:b0:54:83:4c:b5:1c:ad:53: 06:97:8b:fb:40:f5:03:2a:ca:f6:8f:8c:79:98:13: cd:fc:88:f8:14:65:ed:40:8c:8a:90:5b:84:b3:fd: 36:68:63:ed:87:ec:90:2e:90:c4:c1:0b:4f:c7:5a: 53:b7:3f:97:73:b9:e0:74:85:2c:14:38:31:51:77: 54:30:e9:0a:e4:ef:1f:38:a2:b3:da:19:55:97:07: 23:c6:81:63:ca:f6:46:76:c9:35:ac:0a:22:56:36: f6:08:3c:17:71:e4:c9:39:bd:c5:ba:e3:f0:c2:89: c9:bb:a1:5c:61:3e:67:ba:9d:15:5e:bc:81:8c:47: ac:45:83:58:e5:09:59:ea:30:7f:d9:e4:9d:37:e0: b8:4a:cd:d2:fa:bc:41:37:16:2b:28:ff:0c:59:48: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E5:EB:30:A9:55:FF:76:84:43:FA:E6:88:D1:F3:EE:AE:07:65:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl X509v3 Authority Key Identifier: keyid:F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer sbgp-ipAddrBlock: critical IPv4: 128.224.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e8:f7:77:5b:cd:01:27:dc:1c:2e:33:a3:3f:74:22:05:bc: 9c:c9:8f:ba:18:4a:0b:3d:77:75:97:80:0d:da:a1:2d:a8:6a: a2:12:79:0e:dc:f0:3c:d3:d1:d5:8c:72:58:2b:48:cc:a7:40: 76:c4:0b:7a:06:37:98:18:44:8d:a3:8c:ad:ba:30:ae:b6:02: 6f:d7:fb:ce:40:f7:23:94:b4:db:00:89:16:a3:6c:0a:cf:9d: 24:e7:57:5a:2b:31:52:f9:53:ec:e4:7b:ee:b3:15:d1:8c:d7: af:08:de:67:4d:c9:61:18:99:ee:30:36:42:c2:cf:52:15:d2: 16:6f:e4:c8:7b:91:43:a1:a3:b1:d3:9f:ca:dc:46:f8:dd:ee: 2c:84:04:e8:cb:e1:78:02:da:c3:7e:e5:13:58:71:f3:61:de: 4b:86:f1:7b:e5:9c:ce:c9:79:04:71:50:c2:e9:67:64:4a:08: c9:54:a1:a9:47:3a:6a:27:d8:b9:3b:a2:5d:92:82:be:4b:78: 09:89:a5:01:fa:95:b4:de:49:e1:49:99:cb:6a:6c:65:14:0c: 7e:ab:e5:56:25:ab:d8:3e:0d:a0:e4:a5:b6:b0:c3:3f:39:3b: f6:24:48:74:22:2e:ce:a0:69:ec:39:d7:64:77:9c:85:78:ab: fb:77:fc:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/SrQj1GWNefUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcwMDE0MjUtNjk2NS00YzFmLThlMzUtZjU3OGQxMTIy OTVjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzliNDhmMGUtNjE0Ni00N2VjLWIxNjctNDg2YjVkNmE0NWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng5ECNAJfQNRKviaUUBzDsnZPeDUT7y1tCwn J4qmaJ/vDT0xbxLbwCEXTxV8geiSQJt+vMviAN1WRlR+jSgLOZkqE0zh8QMZoIhQ yepLYkkGVwAGbzPu+U8H8SBuMxhTsFSDTLUcrVMGl4v7QPUDKsr2j4x5mBPN/Ij4 FGXtQIyKkFuEs/02aGPth+yQLpDEwQtPx1pTtz+Xc7ngdIUsFDgxUXdUMOkK5O8f OKKz2hlVlwcjxoFjyvZGdsk1rAoiVjb2CDwXceTJOb3FuuPwwonJu6FcYT5nup0V XryBjEesRYNY5QlZ6jB/2eSdN+C4Ss3S+rxBNxYrKP8MWUhCMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzl6zCpVf92hEP65ojR8+6uB2WIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAw MTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4ZDExMjI5NWMvMzNhM2I5ODQtYTc3Zi0z ZDc4LTg4YWUtMzBhZTY4ODEzZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTcwMDE0MjUtNjk2NS00YzFmLThl MzUtZjU3OGQxMTIyOTVjL2E3MDAxNDI1LTY5NjUtNGMxZi04ZTM1LWY1NzhkMTEy Mjk1Yy5jcmwwHwYDVR0jBBgwFoAU9GxN8F4XluZ5iCEPwLopcDLWK8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAwMTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4 ZDExMjI5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgOD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjo93dbzQEn3BwuM6M/dCIFvJzJj7oYSgs9d3WXgA3aoS2oaqISeQ7c 8DzT0dWMclgrSMynQHbEC3oGN5gYRI2jjK26MK62Am/X+85A9yOUtNsAiRajbArP nSTnV1orMVL5U+zke+6zFdGM168I3mdNyWEYme4wNkLCz1IV0hZv5Mh7kUOho7HT n8rcRvjd7iyEBOjL4XgC2sN+5RNYcfNh3kuG8XvlnM7JeQRxUMLpZ2RKCMlUoalH Omon2Lk7ol2Sgr5LeAmJpQH6lbTeSeFJmctqbGUUDH6r5VYlq9g+DaDkpbawwz85 O/YkSHQiLs6gaew512R3nIV4q/t3/Bw= -----END CERTIFICATE-----Generated at Wed Jul 29 12:17:49 2026 by rpki-client