$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/33366e57-3c98-34dd-9cde-0f6424040688.roa File: 33366e57-3c98-34dd-9cde-0f6424040688.roa (raw, json) Hash identifier: gduUAJicBXfbLq0W9/1ImL7WMPYczF5r/uzyqPrIr+g= Subject key identifier: C8:D6:E7:BA:84:7B:50:21:B9:E4:79:FB:FA:B7:A1:79:BA:3C:95:88 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584D869556D6AA889AC83B2F0E00 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/33366e57-3c98-34dd-9cde-0f6424040688.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 398156 IP address blocks: 168.220.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:56:d6:aa:88:9a:c8:3b:2f:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=76bb5044-6d13-4553-b447-e0bb736d30f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:2d:e2:83:54:8c:f1:8d:b2:39:08:20:bc: 17:12:d6:1a:1b:2f:a3:53:dc:5a:84:a8:c3:8a:e1: b7:e6:5c:48:b8:7c:f4:62:87:74:41:aa:57:d2:5e: 55:b5:48:59:84:09:e9:48:ad:70:47:5f:18:1e:c0: 4d:bb:a3:25:e8:5b:32:bd:5f:63:8a:7f:cb:c2:ea: 9b:bf:d2:4a:74:d5:bb:cf:a0:4a:cb:26:c0:86:d8: 6b:e5:00:a7:e9:c6:32:fb:fa:64:ed:0f:e2:9f:7e: 82:cb:30:18:91:82:34:6b:14:cb:8a:28:6a:12:71: ad:7d:3e:14:81:60:4c:5c:a5:bd:a3:3d:8b:37:a4: 3d:b7:50:93:12:41:e7:c0:e6:81:47:1f:d7:80:5c: 0f:e6:66:79:cd:b4:ef:7b:be:04:60:d1:df:f5:b0: 6c:a4:b2:73:d6:91:84:f7:c9:d1:e7:4d:1e:1e:46: ec:1f:68:cd:36:2f:62:f9:46:50:4e:79:7e:65:d1: b6:dd:63:07:6e:5b:26:d4:c3:72:c7:42:3e:f1:6d: 9b:fc:11:e2:c5:c9:82:db:6a:47:77:46:44:b5:0d: be:88:59:be:94:d5:6f:de:b2:62:69:0e:1b:87:34: fd:55:da:64:f8:ab:77:73:a8:d3:45:10:08:93:d1: 0e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D6:E7:BA:84:7B:50:21:B9:E4:79:FB:FA:B7:A1:79:BA:3C:95:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/33366e57-3c98-34dd-9cde-0f6424040688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:11:49:c8:c0:60:56:46:3f:81:ff:c9:ea:e4:58:aa:44:4b: 47:30:39:12:40:00:b5:13:53:19:86:7a:6b:74:f7:76:f1:72: e8:c8:e2:fe:81:60:e8:a3:90:f6:23:82:7e:2f:58:96:a6:2a: 4c:89:b8:10:a4:55:49:32:69:b3:c1:cb:9e:8e:69:83:cc:97: 9f:71:00:99:58:db:2d:35:63:a9:ec:05:1f:e9:b0:08:b4:d1: b3:84:fa:cd:37:4a:9e:f8:96:c6:8b:65:f3:58:bc:05:a0:51: 44:b3:d7:8f:d4:b8:e7:cd:7f:2a:b2:21:39:b9:83:00:80:f4: 4f:db:5f:2c:04:60:88:a9:82:bd:fc:d9:d2:22:9b:a5:a6:89: 3c:43:8b:dc:f2:82:46:fc:f9:43:8b:8f:45:c3:5f:1d:0b:96: 38:98:fd:07:93:2f:04:1d:30:d1:bb:c1:e7:3d:2b:ee:76:fd: 96:ea:2a:0b:80:a9:e7:e0:d5:7f:ad:df:58:3a:18:46:c8:4b: dd:b6:fa:b6:d8:2f:1a:ec:fd:b7:88:f2:e2:36:3b:a8:68:da: e2:4e:55:79:ad:76:d8:b1:92:16:30:55:fa:b0:ad:3f:ba:c1: 95:8b:40:ae:ab:c5:50:99:93:f7:78:97:61:71:1d:e9:fd:88: 4a:7c:ff:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVbWqoiayDsvDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NzZiYjUwNDQtNmQxMy00NTUzLWI0NDctZTBiYjczNmQzMGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9st4oNUjPGNsjkIILwXEtYaGy+jU9xahKjD iuG35lxIuHz0Yod0QapX0l5VtUhZhAnpSK1wR18YHsBNu6Ml6FsyvV9jin/Lwuqb v9JKdNW7z6BKyybAhthr5QCn6cYy+/pk7Q/in36CyzAYkYI0axTLiihqEnGtfT4U gWBMXKW9oz2LN6Q9t1CTEkHnwOaBRx/XgFwP5mZ5zbTve74EYNHf9bBspLJz1pGE 98nR500eHkbsH2jNNi9i+UZQTnl+ZdG23WMHblsm1MNyx0I+8W2b/BHixcmC22pH d0ZEtQ2+iFm+lNVv3rJiaQ4bhzT9Vdpk+Kt3c6jTRRAIk9EOtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjW57qEe1AhueR5+/q3oXm6PJWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMzMzNjZlNTctM2M5OC0z NGRkLTljZGUtMGY2NDI0MDQwNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQRScjAYFZGP4H/yerkWKpES0cwORJAALUTUxmGemt093bxcujI4v6B YOijkPYjgn4vWJamKkyJuBCkVUkyabPBy56OaYPMl59xAJlY2y01Y6nsBR/psAi0 0bOE+s03Sp74lsaLZfNYvAWgUUSz14/UuOfNfyqyITm5gwCA9E/bXywEYIipgr38 2dIim6WmiTxDi9zygkb8+UOLj0XDXx0LljiY/QeTLwQdMNG7wec9K+52/ZbqKguA qefg1X+t31g6GEbIS922+rbYLxrs/beI8uI2O6ho2uJOVXmtdtixkhYwVfqwrT+6 wZWLQK6rxVCZk/d4l2FxHen9iEp8/w4= -----END CERTIFICATE-----Generated at Fri Apr 17 16:27:15 2026 by rpki-client