$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0097c3a2-047c-3bd0-9a24-17d4220b95d7.roa File: 0097c3a2-047c-3bd0-9a24-17d4220b95d7.roa (raw, json) Hash identifier: /XWTfuYefWrdHSpXKsilsx0KhHoGafJUEM95e2L6Jw4= Subject key identifier: 22:2A:C7:01:88:BA:A7:D9:E8:68:54:AA:FE:98:07:7B:53:9A:5D:30 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A7880A07479FFF0DC9ADC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0097c3a2-047c-3bd0-9a24-17d4220b95d7.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 396576 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:88:0a:07:47:9f:ff:0d:c9:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=66684c77-4ef2-46bc-b6d6-b1b2184001d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7c:fc:cb:89:0c:2e:d9:80:c3:bd:33:7f:9b: ca:a4:d5:ee:b5:a5:f3:8b:40:ae:fb:86:30:c4:99: af:9c:d2:69:54:d1:61:9c:fe:fa:15:ea:21:59:a8: f9:53:29:b1:70:5f:0e:88:64:52:84:14:bb:73:fb: 31:2b:61:d4:c3:cd:34:d4:84:b1:49:e2:55:04:93: 7b:70:5f:27:ff:31:da:3b:ca:58:49:34:0d:7e:5a: e6:0d:f0:9d:0f:cf:90:81:de:0b:1e:5c:1c:49:5b: a8:8a:7d:4c:63:1a:bb:70:8a:de:41:53:45:ce:04: 2e:23:c8:7d:31:7e:7b:34:7b:72:8a:88:1a:c1:a4: cd:a4:81:e7:e5:cd:b3:de:9d:4d:de:e2:3a:75:73: 5c:ee:dc:84:52:93:fa:60:aa:2d:3a:c5:f8:9e:4a: 5a:73:b0:bf:1d:91:e3:11:35:88:9e:91:08:10:aa: f9:ad:41:b2:45:e5:a2:30:a3:c0:75:62:18:5f:89: 4c:50:1e:cc:76:e6:b5:c0:df:5b:dd:58:6a:25:41: 80:48:06:e2:38:42:7a:e6:33:67:3f:0b:2f:02:30: e6:ac:8b:d2:0f:23:7b:53:a9:28:87:7e:df:03:8a: c1:66:e4:7f:fb:51:d2:fb:20:86:fb:f3:c3:c0:e8: 34:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2A:C7:01:88:BA:A7:D9:E8:68:54:AA:FE:98:07:7B:53:9A:5D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0097c3a2-047c-3bd0-9a24-17d4220b95d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:94:c5:21:8c:61:02:e2:07:d2:62:c1:45:7b:64:9d:17:20: 1b:e1:19:06:57:ad:0c:d8:cb:02:6f:57:43:62:f8:20:58:63: 51:e9:6d:d8:e1:2a:c4:a2:b5:86:a4:18:a6:42:02:44:14:bf: 72:d8:7b:e7:47:1b:b2:5e:d6:2f:d8:eb:78:1a:34:13:7e:3b: 82:a6:fb:d9:8d:f1:a5:d4:86:c7:d5:85:bb:a7:8f:db:a2:22: 49:26:ca:32:91:86:b3:22:47:91:e2:14:d2:94:f1:4c:91:67: ea:47:33:28:d0:17:29:c8:ef:70:dc:8b:2f:bd:87:3f:20:14: db:71:33:4d:0f:87:7b:32:b9:c2:58:99:a5:ba:fb:83:39:cb: fe:9d:d2:69:41:b8:4a:dd:20:44:68:df:db:0b:cb:3c:c3:04: 03:4b:e5:7e:75:be:77:a1:2c:87:db:06:8d:e6:13:34:c5:33: 4f:d9:12:4c:88:3b:b8:b8:69:21:19:db:41:fa:d2:eb:c4:03: 06:7d:1b:e3:6e:c5:17:2c:8e:4b:81:0d:76:2f:33:91:97:60: f5:e3:22:bb:ba:f1:8f:b1:d7:72:8e:fe:a7:97:82:8b:37:ec: 1e:65:a8:27:65:b2:49:82:f7:b8:4a:1c:45:cf:da:10:41:00: c0:3e:47:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp4gKB0ef/w3JrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk NjY2ODRjNzctNGVmMi00NmJjLWI2ZDYtYjFiMjE4NDAwMWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXz8y4kMLtmAw70zf5vKpNXutaXzi0Cu+4Yw xJmvnNJpVNFhnP76FeohWaj5UymxcF8OiGRShBS7c/sxK2HUw8001ISxSeJVBJN7 cF8n/zHaO8pYSTQNflrmDfCdD8+Qgd4LHlwcSVuoin1MYxq7cIreQVNFzgQuI8h9 MX57NHtyiogawaTNpIHn5c2z3p1N3uI6dXNc7tyEUpP6YKotOsX4nkpac7C/HZHj ETWInpEIEKr5rUGyReWiMKPAdWIYX4lMUB7Mdua1wN9b3VhqJUGASAbiOEJ65jNn PwsvAjDmrIvSDyN7U6koh37fA4rBZuR/+1HS+yCG+/PDwOg0dwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCIqxwGIuqfZ6GhUqv6YB3tTml0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDA5N2MzYTItMDQ3Yy0z YmQwLTlhMjQtMTdkNDIyMGI5NWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCtlMUhjGEC4gfSYsFFe2SdFyAb4RkGV60M2MsCb1dDYvggWGNR6W3Y 4SrEorWGpBimQgJEFL9y2HvnRxuyXtYv2Ot4GjQTfjuCpvvZjfGl1IbH1YW7p4/b oiJJJsoykYazIkeR4hTSlPFMkWfqRzMo0BcpyO9w3IsvvYc/IBTbcTNND4d7MrnC WJmluvuDOcv+ndJpQbhK3SBEaN/bC8s8wwQDS+V+db53oSyH2waN5hM0xTNP2RJM iDu4uGkhGdtB+tLrxAMGfRvjbsUXLI5LgQ12LzORl2D14yK7uvGPsddyjv6nl4KL N+weZagnZbJJgve4ShxFz9oQQQDAPkeV -----END CERTIFICATE-----Generated at Wed Sep 30 19:44:47 2026 by rpki-client