$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/33eb63b4-bd21-319c-9e01-dfd209833ce2.roa File: 33eb63b4-bd21-319c-9e01-dfd209833ce2.roa (raw, json) Hash identifier: cty/yyg6PukM0v9RWWeT1eWChMwHG57p90xoI5IA+jo= Subject key identifier: 32:BA:BA:C8:95:9D:94:2C:C0:1F:FD:41:A1:5C:1A:47:0E:58:36:46 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584D6515098D8DAF1685736E95C0 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/33eb63b4-bd21-319c-9e01-dfd209833ce2.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 14297 IP address blocks: 139.131.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:09:8d:8d:af:16:85:73:6e:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=8ff5045e-be3b-4a3b-9b77-771512d82d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5f:4d:70:52:dd:ed:5a:8a:86:ec:d6:21:d7: 6b:fb:78:29:c3:d4:9b:80:32:be:96:bd:ed:b4:f8: 35:c6:1e:c8:1a:ec:4b:74:fe:65:9a:a7:8f:0c:c3: 78:b9:db:eb:0d:e2:ca:3e:03:db:73:db:79:a0:4c: 1a:97:88:a7:d7:10:28:42:50:2e:74:02:70:d1:c0: 3b:6c:88:08:ca:a2:b3:1a:83:de:69:c2:16:72:61: fb:15:2e:54:39:d9:eb:72:17:5c:26:41:e8:a6:ff: 22:bb:64:dc:de:43:3c:08:e1:91:03:bb:6e:55:3d: 75:01:18:ca:04:39:87:d6:91:76:bf:76:15:25:ce: d1:c5:28:2a:89:88:b7:0a:e9:7c:88:40:7e:39:46: da:14:75:62:9d:a3:64:71:d7:53:dd:06:8c:52:41: eb:f1:0b:fb:3d:e5:dd:4f:6e:3a:5d:4c:c1:b5:6a: d1:d6:56:48:e6:9c:23:f6:88:a4:27:0c:86:f2:c1: bd:a5:9d:82:d3:82:ac:e9:43:02:1d:1a:41:1c:8b: 9f:50:05:9b:a7:51:dd:12:07:e2:b9:c0:c1:2a:1d: 50:6a:8f:a7:55:9c:b8:96:ed:ce:d1:40:a7:48:e1: cf:df:0f:78:f9:05:5a:9d:fa:fd:a9:d0:1c:0b:4b: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BA:BA:C8:95:9D:94:2C:C0:1F:FD:41:A1:5C:1A:47:0E:58:36:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/33eb63b4-bd21-319c-9e01-dfd209833ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:41:8e:ca:2c:87:ab:5f:f2:d7:21:cc:97:cf:01:e1:ea:a3: c3:17:79:28:df:c7:ca:1e:97:fb:87:ee:4b:89:91:9e:01:38: e8:5d:95:e5:07:c0:63:e9:06:1e:3b:f7:aa:c2:34:64:53:1b: 95:b9:37:d0:8f:1b:4c:5d:99:ff:eb:15:d4:3c:91:55:d4:77: 9a:22:5a:34:75:96:3c:4a:45:5b:b8:b9:7e:41:94:d7:1a:73: 55:21:4d:17:f9:25:b6:e9:82:99:4b:76:a4:72:06:64:5f:99: 0c:02:7d:82:05:99:6d:0a:2a:15:1c:ee:87:a8:a6:2a:04:26: 10:f8:51:a3:3c:f8:cc:fd:d3:87:ec:11:d0:e0:03:59:61:a1: 41:cf:f4:e8:79:96:4c:21:9c:75:ac:50:bf:37:6d:0e:ae:44: 19:38:31:9e:71:0a:f8:96:b8:cb:ee:bc:47:e0:21:5b:22:4f: cd:f8:37:c2:b5:47:4b:a2:32:61:25:f5:c7:45:c9:35:e9:c7: 3a:1c:99:cd:2f:7c:e5:86:49:b2:12:48:39:c7:64:ae:3d:b1: 26:75:92:8f:42:0a:a1:a2:15:8a:74:40:9b:eb:70:97:d8:47: 93:52:41:c2:63:43:4e:6a:a4:9c:b1:30:49:35:0b:80:9f:b4: b0:bd:ab:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQmNja8WhXNulcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk OGZmNTA0NWUtYmUzYi00YTNiLTliNzctNzcxNTEyZDgyZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk19NcFLd7VqKhuzWIddr+3gpw9SbgDK+lr3t tPg1xh7IGuxLdP5lmqePDMN4udvrDeLKPgPbc9t5oEwal4in1xAoQlAudAJw0cA7 bIgIyqKzGoPeacIWcmH7FS5UOdnrchdcJkHopv8iu2Tc3kM8COGRA7tuVT11ARjK BDmH1pF2v3YVJc7RxSgqiYi3Cul8iEB+OUbaFHVinaNkcddT3QaMUkHr8Qv7PeXd T246XUzBtWrR1lZI5pwj9oikJwyG8sG9pZ2C04Ks6UMCHRpBHIufUAWbp1HdEgfi ucDBKh1Qao+nVZy4lu3O0UCnSOHP3w94+QVanfr9qdAcC0s23wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK6usiVnZQswB/9QaFcGkcOWDZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvMzNlYjYzYjQtYmQyMS0z MTljLTllMDEtZGZkMjA5ODMzY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4NwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5Bjsosh6tf8tchzJfPAeHqo8MXeSjfx8oel/uH7kuJkZ4BOOhdleUH wGPpBh4796rCNGRTG5W5N9CPG0xdmf/rFdQ8kVXUd5oiWjR1ljxKRVu4uX5BlNca c1UhTRf5JbbpgplLdqRyBmRfmQwCfYIFmW0KKhUc7oeopioEJhD4UaM8+Mz904fs EdDgA1lhoUHP9Oh5lkwhnHWsUL83bQ6uRBk4MZ5xCviWuMvuvEfgIVsiT834N8K1 R0uiMmEl9cdFyTXpxzocmc0vfOWGSbISSDnHZK49sSZ1ko9CCqGiFYp0QJvrcJfY R5NSQcJjQ05qpJyxMEk1C4CftLC9qyI= -----END CERTIFICATE-----Generated at Sat Apr 18 10:07:55 2026 by rpki-client