$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ca837581-cade-381c-8a7e-a8a78340eb4c.roa File: ca837581-cade-381c-8a7e-a8a78340eb4c.roa (raw, json) Hash identifier: g2xFx0dMudDlW6DNQZhP6y/6TDrWcWhVB8yKu8PhhkQ= Subject key identifier: DA:5D:C1:1C:2C:65:DB:0A:3F:9E:95:94:7B:86:62:2F:FA:DF:2F:A2 Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584F067295E947A6771490649700 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ca837581-cade-381c-8a7e-a8a78340eb4c.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 7311 IP address blocks: 162.33.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:95:e9:47:a6:77:14:90:64:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=83f51d2b-13f7-4ff6-bfb3-4c596c0e23ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:03:ce:d9:21:61:7a:6b:01:26:70:9f:c4: fe:30:bd:e6:d5:da:3a:ae:90:55:c8:d9:51:26:be: d3:43:1b:e5:13:84:94:43:77:ec:bc:82:6d:c8:04: 0d:38:89:19:5b:9c:a1:05:8d:ab:0b:0e:ae:f1:2a: 20:21:1c:2d:7f:51:dc:a1:62:a3:6f:ca:88:25:ae: e1:09:49:b9:0d:b6:99:8d:56:49:39:77:32:ab:82: 31:a6:36:38:15:21:77:62:26:39:b3:e3:59:4d:1d: 5e:c4:63:db:7f:0e:1b:b4:d7:51:74:a1:c0:35:51: e3:52:a8:19:72:84:ac:e6:a3:3b:58:16:6b:19:d6: c0:23:18:17:03:c6:e3:a6:b5:c3:87:2c:93:9a:cf: 8a:f4:c5:ee:1a:75:40:33:9b:64:58:42:45:15:f0: 9f:75:99:3a:f6:ef:89:8d:35:ec:2d:95:d9:5e:9d: 2a:97:da:13:12:55:d1:86:bc:72:1c:b5:15:5b:06: a5:75:56:17:9e:70:a0:a9:1a:36:70:d9:b2:74:9e: 5f:ca:67:9e:26:a2:27:70:3c:8a:0a:b7:a4:0c:8a: 99:bd:75:5c:08:bd:40:18:02:7b:e2:1c:22:70:f7: a5:11:98:4e:7b:68:40:2e:c0:55:aa:03:02:06:e8: 94:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5D:C1:1C:2C:65:DB:0A:3F:9E:95:94:7B:86:62:2F:FA:DF:2F:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ca837581-cade-381c-8a7e-a8a78340eb4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 162.33.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:41:9a:7e:26:d8:ff:cf:c5:51:cb:55:05:b5:a8:92:bc:4f: 0a:a5:4f:ec:91:6e:67:90:8f:3a:cd:e1:c4:92:23:35:05:c9: 2b:a3:ae:ba:6d:96:ae:e1:8f:76:1f:eb:a7:de:f6:5e:da:ce: ef:b7:4c:54:1b:0b:8c:e8:bd:72:df:72:1c:45:0d:ef:a7:4d: 4e:4b:70:96:39:a7:e2:0b:1c:3d:29:63:11:b3:d5:71:f8:1f: a8:b8:ef:40:3a:e3:b2:0a:fd:18:3b:d4:18:f0:d7:27:6e:30: 3d:c7:fb:f4:ca:78:ec:ce:db:18:bc:32:bf:0d:ca:c0:4e:55: 39:97:e7:56:f4:c5:a6:9c:03:51:d3:04:d8:42:e5:54:1b:37: a3:8f:f7:56:5d:a4:3d:ef:07:d4:a1:c7:fe:8c:08:a2:53:aa: 59:34:d4:c2:03:62:a1:42:61:ac:b4:60:43:8d:03:53:58:7a: 52:5c:ea:76:35:6d:8d:fe:b0:76:bc:b5:96:c4:11:0b:7c:66: 82:ce:ac:68:21:2d:4b:7d:0b:80:65:9d:ba:dc:92:4d:ef:21: 4b:41:03:2f:b0:ea:f8:d3:0e:9e:38:31:ad:e1:c7:12:f9:4b: 20:29:26:e3:ee:21:d4:05:78:33:cd:78:f5:4a:16:76:0d:06: ee:b5:95:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcpXpR6Z3FJBklwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ODNmNTFkMmItMTNmNy00ZmY2LWJmYjMtNGM1OTZjMGUyM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsIDztkhYXprASZwn8T+ML3m1do6rpBVyNlR Jr7TQxvlE4SUQ3fsvIJtyAQNOIkZW5yhBY2rCw6u8SogIRwtf1HcoWKjb8qIJa7h CUm5DbaZjVZJOXcyq4IxpjY4FSF3YiY5s+NZTR1exGPbfw4btNdRdKHANVHjUqgZ coSs5qM7WBZrGdbAIxgXA8bjprXDhyyTms+K9MXuGnVAM5tkWEJFFfCfdZk69u+J jTXsLZXZXp0ql9oTElXRhrxyHLUVWwaldVYXnnCgqRo2cNmydJ5fymeeJqIncDyK CrekDIqZvXVcCL1AGAJ74hwicPelEZhOe2hALsBVqgMCBuiUIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpdwRwsZdsKP56VlHuGYi/63y+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvY2E4Mzc1ODEtY2FkZS0z ODFjLThhN2UtYThhNzgzNDBlYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoiG0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJBmn4m2P/PxVHLVQW1qJK8TwqlT+yRbmeQjzrN4cSSIzUFySujrrpt lq7hj3Yf66fe9l7azu+3TFQbC4zovXLfchxFDe+nTU5LcJY5p+ILHD0pYxGz1XH4 H6i470A647IK/Rg71Bjw1yduMD3H+/TKeOzO2xi8Mr8NysBOVTmX51b0xaacA1HT BNhC5VQbN6OP91ZdpD3vB9Shx/6MCKJTqlk01MIDYqFCYay0YEONA1NYelJc6nY1 bY3+sHa8tZbEEQt8ZoLOrGghLUt9C4Blnbrckk3vIUtBAy+w6vjTDp44Ma3hxxL5 SyApJuPuIdQFeDPNePVKFnYNBu61leM= -----END CERTIFICATE-----Generated at Tue Sep 22 01:49:58 2026 by rpki-client