$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa File: 33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa (raw, json) Hash identifier: xVA+ttLk8ahiEtrztvm/vDLuYSrnxsU0h57ELHGUuBk= Subject key identifier: 1D:3B:AE:14:52:94:7C:E7:E1:47:B5:59:8B:79:5E:47:D0:A9:C9:94 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA798A808B118810FF73CEC80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 852 IP address blocks: 199.212.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:a8:08:b1:18:81:0f:f7:3c:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ab2e7e38-1e06-4f1c-88d5-a915c09f3b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f2:9d:81:3a:3f:34:be:0b:7e:15:8c:0c:a5: 85:21:78:29:96:e2:69:69:d4:64:bd:9d:1e:50:47: 38:e2:98:a1:00:4d:2f:b4:67:80:74:2c:ce:8e:3b: de:3d:a1:92:cf:e0:75:ee:a7:c4:c7:97:ba:91:1d: 90:33:e3:ae:ab:c0:48:d3:52:3a:54:9b:e6:22:00: 1e:f5:75:c3:d0:99:eb:82:62:bd:54:b2:78:95:da: ae:c8:6b:a5:0e:27:6c:9c:39:7b:cb:f7:9b:76:27: 18:dc:66:52:4a:6e:cc:db:38:1b:3f:e0:9a:28:57: c5:c6:3c:72:8d:de:ad:5b:44:8a:20:ba:df:af:29: 6b:56:4c:13:1f:07:04:1c:e0:e2:60:83:7d:3e:b9: e8:ad:25:2e:d1:02:44:a2:f8:f3:7a:cc:84:ac:7a: 91:9a:1a:e4:bb:75:d7:09:90:a4:af:33:58:14:6f: 15:2d:22:c5:f1:e2:1b:8c:47:33:cf:45:79:0b:81: d3:24:71:fb:90:e2:54:c6:be:bf:ad:64:c5:2c:12: 23:d2:a7:28:e6:38:7b:76:8d:1d:33:b9:00:c2:a2: eb:08:8c:06:ef:bd:0f:d1:df:be:2f:e7:79:fb:09: 43:cb:d9:b5:3c:43:9b:e7:4b:73:28:68:77:89:61: 8a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3B:AE:14:52:94:7C:E7:E1:47:B5:59:8B:79:5E:47:D0:A9:C9:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33c1c010-cd03-3010-9b9a-7fb2fd1236b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 199.212.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:74:5a:cb:a1:ae:ea:31:21:61:20:90:50:b9:b6:e5:86:b6: 25:1d:f1:b7:02:e2:1d:f8:1f:46:cd:75:2d:e2:d6:ea:68:d0: a4:c0:19:1f:0e:53:48:76:df:cb:60:57:53:f9:68:fd:91:3c: 82:0f:01:76:cf:61:f4:1b:e3:53:0b:58:5a:6f:c2:cb:0f:be: 61:dd:74:3c:a2:ab:8e:34:25:92:fa:3e:1c:c2:5e:70:d8:92: e2:7a:b9:8a:64:69:7b:f6:4e:ae:40:d7:d2:fd:9b:7c:80:44: 9b:71:3f:26:5c:8c:99:34:7a:be:b6:ee:0a:eb:34:6a:66:23: 34:8c:e3:f6:b1:96:49:0a:94:fb:94:72:b9:0c:96:fa:c0:44: 28:bf:0a:46:e6:86:c6:24:c3:28:49:f2:7d:1f:e9:72:57:8c: 19:1d:43:eb:b9:ab:6d:be:4b:5a:10:f7:10:29:a6:05:b1:30: 2d:74:44:9f:18:82:3b:79:ad:3d:69:c6:35:bf:10:9b:be:0f: 64:e6:4f:52:6e:3d:d8:53:cf:8f:80:49:cc:af:44:20:e9:c9: ac:06:ac:ae:5b:c8:0d:f0:f8:6a:34:e9:fc:ae:12:80:65:29: be:1c:97:63:15:0e:e8:3b:42:0c:58:34:d2:4f:f6:a0:05:3f: 3a:17:b7:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmKgIsRiBD/c87IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWIyZTdlMzgtMWUwNi00ZjFjLTg4ZDUtYTkxNWMwOWYzYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPKdgTo/NL4LfhWMDKWFIXgpluJpadRkvZ0e UEc44pihAE0vtGeAdCzOjjvePaGSz+B17qfEx5e6kR2QM+Ouq8BI01I6VJvmIgAe 9XXD0JnrgmK9VLJ4ldquyGulDidsnDl7y/ebdicY3GZSSm7M2zgbP+CaKFfFxjxy jd6tW0SKILrfrylrVkwTHwcEHODiYIN9PrnorSUu0QJEovjzesyErHqRmhrku3XX CZCkrzNYFG8VLSLF8eIbjEczz0V5C4HTJHH7kOJUxr6/rWTFLBIj0qco5jh7do0d M7kAwqLrCIwG770P0d++L+d5+wlDy9m1PEOb50tzKGh3iWGKmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB07rhRSlHzn4Ue1WYt5XkfQqcmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzNjMWMwMTAtY2QwMy0z MDEwLTliOWEtN2ZiMmZkMTIzNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx9SYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ0WsuhruoxIWEgkFC5tuWGtiUd8bcC4h34H0bNdS3i1upo0KTAGR8O U0h238tgV1P5aP2RPIIPAXbPYfQb41MLWFpvwssPvmHddDyiq440JZL6PhzCXnDY kuJ6uYpkaXv2Tq5A19L9m3yARJtxPyZcjJk0er627grrNGpmIzSM4/axlkkKlPuU crkMlvrARCi/CkbmhsYkwyhJ8n0f6XJXjBkdQ+u5q22+S1oQ9xAppgWxMC10RJ8Y gjt5rT1pxjW/EJu+D2TmT1JuPdhTz4+AScyvRCDpyawGrK5byA3w+Go06fyuEoBl Kb4cl2MVDug7QgxYNNJP9qAFPzoXt3I= -----END CERTIFICATE-----Generated at Wed Jul 29 03:40:46 2026 by rpki-client