$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/33843f95-5170-3761-9f6b-ef4bc13b712c.roa File: 33843f95-5170-3761-9f6b-ef4bc13b712c.roa (raw, json) Hash identifier: hvZHksakaUmlkYy/JbV3PRJyQxwvOKc8/nat3Ts9WUY= Subject key identifier: 21:D5:55:DB:43:F6:23:FD:2A:E9:3B:80:5D:CE:98:C2:34:9A:05:4C Certificate issuer: /CN=fab1a958-ded9-4a94-97d9-0ff41a67ab25 Certificate serial: 010D0C9F4328584EA787CDC81835F1FDB23C5EE0 Authority key identifier: F5:8D:66:1A:71:A8:F2:70:03:41:53:6D:90:C9:C3:61:5F:FA:7C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/33843f95-5170-3761-9f6b-ef4bc13b712c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23309 IP address blocks: 169.199.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:cd:c8:18:35:f1:fd:b2:3c:5e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fab1a958-ded9-4a94-97d9-0ff41a67ab25 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a369ec21-570a-4f40-bad6-b5ec02c297e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fc:0b:e5:a4:3c:52:6c:d9:95:a8:7d:91:b9: cd:f7:03:79:72:1d:1e:aa:53:86:e9:27:ea:eb:7d: 86:e2:8b:62:7d:75:71:c8:11:76:4d:cf:f9:45:c7: bc:fe:1b:17:99:ad:28:7c:25:98:f8:a2:ca:ea:ed: 7f:ea:ec:ee:54:b5:fb:e1:5a:0c:b2:00:1b:4f:d2: e5:25:76:5a:eb:50:cc:0e:3a:5f:13:3b:d6:cd:ce: bd:0f:96:24:1c:dc:f0:44:bc:6f:14:a7:5d:7e:da: dc:46:61:83:91:cb:42:89:8b:0f:dd:c7:80:99:2e: e6:22:d1:2f:75:5f:c8:3c:fa:48:97:37:09:cd:0d: 28:b2:e2:2d:08:fa:b0:ce:2b:f2:11:00:d4:95:14: 66:65:24:74:d3:60:99:78:82:29:1e:a4:8c:91:79: 4c:f5:1f:75:14:6c:74:8f:43:fa:10:8b:a5:7d:76: b3:ef:bd:c4:27:e4:79:1a:fb:bc:fd:ab:10:1d:30: dc:23:58:30:ff:57:b7:09:01:da:ba:2b:4f:c9:0f: c5:b2:98:b8:7e:c6:7d:08:b8:69:00:fb:9d:80:82: df:99:61:24:67:f8:c3:94:93:38:1b:b1:ba:12:f1: 48:11:2c:50:06:51:91:e0:81:64:62:7b:77:e5:75: bb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D5:55:DB:43:F6:23:FD:2A:E9:3B:80:5D:CE:98:C2:34:9A:05:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/33843f95-5170-3761-9f6b-ef4bc13b712c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.crl X509v3 Authority Key Identifier: keyid:F5:8D:66:1A:71:A8:F2:70:03:41:53:6D:90:C9:C3:61:5F:FA:7C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25.cer sbgp-ipAddrBlock: critical IPv4: 169.199.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:9c:8c:0f:a8:da:2f:04:9b:c1:cf:de:77:3c:63:cf:9d:6e: ae:b8:5c:42:58:28:08:56:cf:bc:de:f3:a2:c1:8f:13:f5:9d: b2:20:74:10:57:37:c6:0a:b5:fd:fc:00:78:c0:4f:ba:c5:7b: d1:ab:27:25:aa:3e:5a:e2:d7:7d:ff:60:0d:70:1a:36:1e:13: d5:e2:45:f2:8a:6b:bb:59:b6:09:2d:0c:8b:c7:11:89:87:e6: 1f:db:d2:75:52:65:1b:cb:26:2c:0f:80:05:3f:67:71:ee:1b: e6:1d:19:ff:3a:f8:e3:7d:3b:15:29:47:72:f8:df:e5:3e:a6: f9:14:b3:1b:6f:c8:13:bb:d3:a3:0c:e4:e4:78:9c:6c:11:6d: 5e:ef:dd:29:eb:d5:53:44:55:76:c6:bf:d3:91:76:0f:63:d9: ee:b3:ec:2a:e2:db:12:e8:12:4b:26:52:bb:bc:ef:76:fe:6f: 3f:22:6d:cb:b0:3b:20:c0:fe:52:7d:36:d2:13:c9:f2:e7:21: f3:13:45:d0:07:ab:bf:8a:0e:79:3a:c8:7d:83:1d:1a:79:d4: 96:87:84:08:f3:c1:c2:d2:41:6d:c5:03:09:98:5f:31:e8:2a: 5f:5f:10:f9:f8:c1:e4:12:71:b3:eb:10:68:71:4b:85:00:8b: 4a:76:95:74 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nh83IGDXx/bI8XuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFiMWE5NTgtZGVkOS00YTk0LTk3ZDktMGZmNDFhNjdh YjI1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTM2OWVjMjEtNTcwYS00ZjQwLWJhZDYtYjVlYzAyYzI5N2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofwL5aQ8UmzZlah9kbnN9wN5ch0eqlOG6Sfq 632G4otifXVxyBF2Tc/5Rce8/hsXma0ofCWY+KLK6u1/6uzuVLX74VoMsgAbT9Ll JXZa61DMDjpfEzvWzc69D5YkHNzwRLxvFKddftrcRmGDkctCiYsP3ceAmS7mItEv dV/IPPpIlzcJzQ0osuItCPqwzivyEQDUlRRmZSR002CZeIIpHqSMkXlM9R91FGx0 j0P6EIulfXaz773EJ+R5Gvu8/asQHTDcI1gw/1e3CQHauitPyQ/Fspi4fsZ9CLhp APudgILfmWEkZ/jDlJM4G7G6EvFIESxQBlGR4IFkYnt35XW7swIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCHVVdtD9iP9Kuk7gF3OmMI0mgVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mYWIx YTk1OC1kZWQ5LTRhOTQtOTdkOS0wZmY0MWE2N2FiMjUvMzM4NDNmOTUtNTE3MC0z NzYxLTlmNmItZWY0YmMxM2I3MTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmFiMWE5NTgtZGVkOS00YTk0LTk3 ZDktMGZmNDFhNjdhYjI1L2ZhYjFhOTU4LWRlZDktNGE5NC05N2Q5LTBmZjQxYTY3 YWIyNS5jcmwwHwYDVR0jBBgwFoAU9Y1mGnGo8nADQVNtkMnDYV/6fJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mYWIxYTk1OC1kZWQ5LTRhOTQtOTdkOS0wZmY0 MWE2N2FiMjUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqccwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAf5yMD6jaLwSbwc/edzxjz51urrhcQlgoCFbPvN7zosGPE/WdsiB0EFc3 xgq1/fwAeMBPusV70asnJao+WuLXff9gDXAaNh4T1eJF8opru1m2CS0Mi8cRiYfm H9vSdVJlG8smLA+ABT9nce4b5h0Z/zr44307FSlHcvjf5T6m+RSzG2/IE7vTowzk 5HicbBFtXu/dKevVU0RVdsa/05F2D2PZ7rPsKuLbEugSSyZSu7zvdv5vPyJty7A7 IMD+Un020hPJ8uch8xNF0Aerv4oOeTrIfYMdGnnUloeECPPBwtJBbcUDCZhfMegq X18Q+fjB5BJxs+sQaHFLhQCLSnaVdA== -----END CERTIFICATE-----Generated at Wed Jul 29 10:37:36 2026 by rpki-client