$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/672de68b-3758-3108-8364-e4ab9f5773e6.roa File: 672de68b-3758-3108-8364-e4ab9f5773e6.roa (raw, json) Hash identifier: 25rq5lEVP9iPHsAaxZ7ci2fEX+O3A0TrYVZdjxAFdWU= Subject key identifier: 4E:CB:50:F5:D1:4D:D9:75:E5:4A:30:8E:D4:35:05:17:ED:8F:68:0B Certificate issuer: /CN=803514f9-05ca-4865-b58e-7e1188184f19 Certificate serial: 010D0C9F4328584CB6B70E2499258E95649EC460 Authority key identifier: 8A:AB:1A:FF:A2:37:47:C3:08:C6:65:DB:56:61:CF:A3:04:6B:7F:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/672de68b-3758-3108-8364-e4ab9f5773e6.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 23042 IP address blocks: 162.33.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/803514f9-05ca-4865-b58e-7e1188184f19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/803514f9-05ca-4865-b58e-7e1188184f19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:0e:24:99:25:8e:95:64:9e:c4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803514f9-05ca-4865-b58e-7e1188184f19 Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=cdd0f538-6696-4c57-b121-28f93081a9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:89:5d:d2:e9:e6:1e:a0:c5:c9:fe:09:d8:a8: 98:15:d0:b4:95:55:ba:13:e3:e8:ea:25:e2:72:7e: b9:d4:9d:ff:44:2e:2e:91:96:9c:8d:2a:12:66:40: af:81:63:25:4c:a0:5a:99:c1:e3:1b:93:96:0d:43: fb:f0:f1:d1:36:e8:56:e6:5e:da:58:d7:04:b1:a0: af:cc:49:fc:43:f7:46:e5:61:2d:eb:c6:0d:e3:6d: d8:4a:5c:19:9a:1d:ed:62:09:28:f5:cb:02:4a:b3: 7c:75:4b:cf:35:b6:8e:06:ef:d5:8b:12:6d:91:3a: d7:29:00:2e:81:4e:d2:4d:05:6b:49:9e:2c:c8:7a: 66:0d:b7:71:08:67:5e:0f:2a:9c:07:8a:0b:10:11: c6:ca:ec:4b:eb:37:4b:7e:fb:38:16:8b:84:e4:19: b6:92:79:6e:cd:79:e4:c4:d2:61:5b:72:06:8a:ae: d9:b4:b1:45:81:23:17:8a:c8:3e:58:e5:16:9c:13: e3:80:89:d3:4d:a7:d9:65:7b:63:3a:d9:c9:42:2d: 8c:5b:3c:58:68:b3:88:0f:ca:8d:25:f1:8a:cd:25: 12:dc:48:39:7c:43:07:34:77:50:49:c3:cc:40:09: 6a:3d:7d:de:93:db:03:f5:17:62:3d:5b:b4:f9:78: 8b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CB:50:F5:D1:4D:D9:75:E5:4A:30:8E:D4:35:05:17:ED:8F:68:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/672de68b-3758-3108-8364-e4ab9f5773e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/803514f9-05ca-4865-b58e-7e1188184f19.crl X509v3 Authority Key Identifier: keyid:8A:AB:1A:FF:A2:37:47:C3:08:C6:65:DB:56:61:CF:A3:04:6B:7F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19.cer sbgp-ipAddrBlock: critical IPv4: 162.33.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:8c:f7:99:98:2b:8c:9f:3b:70:9a:3f:bd:c0:26:07:78:88: 72:3c:86:05:06:85:a0:dd:76:29:75:13:09:db:36:f2:fc:f4: a2:da:85:e8:b9:c6:21:a9:86:47:84:9c:09:46:4a:8c:28:6f: 7e:33:d1:5f:c2:44:53:17:c3:0a:b5:99:1b:61:8e:e6:38:a9: 1b:4c:66:a0:fe:d6:60:13:0f:c5:cb:e0:1c:71:d3:c4:6c:cd: 9e:fc:db:da:75:4b:24:85:5d:bd:47:43:38:e4:39:5a:21:cb: b7:46:76:cc:d8:30:c7:7e:d8:ad:42:d2:59:46:b9:e1:b6:45: ee:47:23:3b:8b:b9:f1:fc:74:f0:83:5c:a5:87:b4:12:a7:48: a6:9d:60:29:0e:5c:89:1f:9e:9d:30:6d:80:5e:60:48:c7:12: 98:fd:b3:0e:6a:d5:3c:fe:b0:75:ea:a1:d3:30:2b:a9:9f:c9: 78:fd:04:45:b0:60:d8:ec:92:f7:9f:1d:02:a4:f5:ca:78:67: 18:29:2f:0e:53:6f:f7:1b:4b:a4:b4:c8:6e:4b:88:48:5e:0d: 6a:85:50:3f:28:cd:43:28:3b:e0:f6:31:5b:45:fb:67:33:b4: 5a:0f:bd:94:19:c9:e8:71:33:7b:62:67:e1:e6:00:a3:01:ec: 94:3e:e7:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tw4kmSWOlWSexGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzNTE0ZjktMDVjYS00ODY1LWI1OGUtN2UxMTg4MTg0 ZjE5MB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk Y2RkMGY1MzgtNjY5Ni00YzU3LWIxMjEtMjhmOTMwODFhOWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhold0unmHqDFyf4J2KiYFdC0lVW6E+Po6iXi cn651J3/RC4ukZacjSoSZkCvgWMlTKBamcHjG5OWDUP78PHRNuhW5l7aWNcEsaCv zEn8Q/dG5WEt68YN423YSlwZmh3tYgko9csCSrN8dUvPNbaOBu/VixJtkTrXKQAu gU7STQVrSZ4syHpmDbdxCGdeDyqcB4oLEBHGyuxL6zdLfvs4FouE5Bm2knluzXnk xNJhW3IGiq7ZtLFFgSMXisg+WOUWnBPjgInTTafZZXtjOtnJQi2MWzxYaLOID8qN JfGKzSUS3Eg5fEMHNHdQScPMQAlqPX3ek9sD9RdiPVu0+XiLKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7LUPXRTdl15UowjtQ1BRftj2gLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84MDM1 MTRmOS0wNWNhLTQ4NjUtYjU4ZS03ZTExODgxODRmMTkvNjcyZGU2OGItMzc1OC0z MTA4LTgzNjQtZTRhYjlmNTc3M2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODAzNTE0ZjktMDVjYS00ODY1LWI1 OGUtN2UxMTg4MTg0ZjE5LzgwMzUxNGY5LTA1Y2EtNDg2NS1iNThlLTdlMTE4ODE4 NGYxOS5jcmwwHwYDVR0jBBgwFoAUiqsa/6I3R8MIxmXbVmHPowRrf6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84MDM1MTRmOS0wNWNhLTQ4NjUtYjU4ZS03ZTEx ODgxODRmMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmM95mYK4yfO3CaP73AJgd4iHI8hgUGhaDddil1EwnbNvL89KLahei5 xiGphkeEnAlGSowob34z0V/CRFMXwwq1mRthjuY4qRtMZqD+1mATD8XL4Bxx08Rs zZ7829p1SySFXb1HQzjkOVohy7dGdszYMMd+2K1C0llGueG2Re5HIzuLufH8dPCD XKWHtBKnSKadYCkOXIkfnp0wbYBeYEjHEpj9sw5q1Tz+sHXqodMwK6mfyXj9BEWw YNjskvefHQKk9cp4ZxgpLw5Tb/cbS6S0yG5LiEheDWqFUD8ozUMoO+D2MVtF+2cz tFoPvZQZyehxM3tiZ+HmAKMB7JQ+54w= -----END CERTIFICATE-----Generated at Mon Mar 2 21:55:37 2026 by rpki-client