$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42cb0b15-be63-3174-b87f-6ad8ac9fe788.roa File: 42cb0b15-be63-3174-b87f-6ad8ac9fe788.roa (raw, json) Hash identifier: CEyXY5Bm/1wu/QT0NrlNaV572Dedv842VQjRyv5vSVg= Subject key identifier: 12:4D:74:3E:B9:24:E5:49:F4:15:52:72:A8:C6:40:A9:F9:B3:73:A2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A76E93D03097D06153FC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42cb0b15-be63-3174-b87f-6ad8ac9fe788.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 36629 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:6e:93:d0:30:97:d0:61:53:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=42fa8b29-7c03-4ae1-80a4-6f784d7e5ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:82:92:5c:61:e6:fa:48:85:33:84:a8:03: 63:2f:6b:77:8b:b4:83:db:56:e1:f8:f8:fc:72:96: 6d:fb:90:f1:71:79:53:d2:c0:2a:a4:f3:b5:51:23: 84:c7:26:d5:4d:46:9b:d9:00:52:d0:3e:ec:32:29: 5f:e9:0f:5e:c6:4f:d8:78:13:50:f3:87:02:f5:e6: 2f:83:3f:ec:8b:13:fe:50:7e:8d:c3:26:11:6e:a5: 25:49:8e:10:14:71:61:b8:e0:1d:61:ed:b2:20:47: 7f:28:18:b9:db:73:0d:b4:8a:c8:cb:05:f7:59:e9: 4f:f9:14:25:8c:87:5c:4b:ab:60:7c:2b:e8:52:51: e4:d1:85:03:6f:d3:d0:09:c2:a6:69:b7:bf:6c:36: 6e:c3:79:1a:68:86:5f:dc:d9:f0:17:d4:e3:7c:0c: e0:c0:6f:88:3b:f8:d7:73:72:82:ef:74:a7:00:d7: 16:12:c8:29:88:49:10:65:a7:63:57:05:4a:25:fa: 88:41:20:bb:63:1c:ad:32:0e:76:e3:23:52:f7:32: a1:16:95:12:7f:e9:70:46:a8:9e:e2:42:d6:7a:05: 12:f3:db:a0:f0:27:7d:10:45:7e:c5:20:08:1b:05: 83:eb:de:9d:ee:7e:5a:62:6b:db:8e:b2:eb:c6:77: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4D:74:3E:B9:24:E5:49:F4:15:52:72:A8:C6:40:A9:F9:B3:73:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42cb0b15-be63-3174-b87f-6ad8ac9fe788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:bc:e5:e3:00:2e:20:73:02:0f:01:17:37:79:28:9d:30:b2: 5a:b0:8c:3d:50:46:cf:8e:a0:93:81:15:60:95:80:ea:7b:d1: 68:2a:29:78:3c:fe:f2:7e:a1:36:9f:9d:0e:04:74:53:51:8b: 78:91:ab:90:2c:75:a8:ac:80:fa:2c:48:90:f2:74:84:77:ba: 9b:19:9b:4e:b5:59:66:bf:41:53:a9:c0:97:5b:6e:22:d2:af: 66:3c:8b:6b:2f:a3:0d:b9:82:2a:ee:31:b2:f3:67:2b:68:ff: e4:47:36:7e:d9:ca:66:99:6c:da:99:d4:81:a0:ab:0f:d1:d6: c6:9e:9e:72:ba:e1:04:4d:9a:ad:fe:4a:2a:f8:5c:64:a7:29: c6:17:07:25:04:02:24:81:be:be:8d:9d:e1:dc:2b:80:28:38: d5:5b:4e:f2:53:67:4c:bf:fa:b7:43:23:88:47:82:90:7b:35: 91:b8:9a:03:21:f7:28:04:b2:97:78:2c:43:00:39:05:95:a7: f7:94:c3:31:1e:18:02:69:2c:63:94:a3:9b:fe:d3:b5:de:7c: 14:d9:1a:60:1b:68:fd:55:5f:f9:91:ef:00:36:0d:a4:16:f7: 69:87:db:be:9d:6b:90:53:5c:8e:4b:dd:82:4b:4b:c8:d5:5a: 0c:90:49:67 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp26T0DCX0GFT/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk NDJmYThiMjktN2MwMy00YWUxLTgwYTQtNmY3ODRkN2U1Y2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyveCklxh5vpIhTOEqANjL2t3i7SD21bh+Pj8 cpZt+5DxcXlT0sAqpPO1USOExybVTUab2QBS0D7sMilf6Q9exk/YeBNQ84cC9eYv gz/sixP+UH6NwyYRbqUlSY4QFHFhuOAdYe2yIEd/KBi523MNtIrIywX3WelP+RQl jIdcS6tgfCvoUlHk0YUDb9PQCcKmabe/bDZuw3kaaIZf3NnwF9TjfAzgwG+IO/jX c3KC73SnANcWEsgpiEkQZadjVwVKJfqIQSC7YxytMg524yNS9zKhFpUSf+lwRqie 4kLWegUS89ug8Cd9EEV+xSAIGwWD696d7n5aYmvbjrLrxnf7BwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBJNdD65JOVJ9BVScqjGQKn5s3OiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDJjYjBiMTUtYmU2My0z MTc0LWI4N2YtNmFkOGFjOWZlNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCVvOXjAC4gcwIPARc3eSidMLJasIw9UEbPjqCTgRVglYDqe9FoKil4 PP7yfqE2n50OBHRTUYt4kauQLHWorID6LEiQ8nSEd7qbGZtOtVlmv0FTqcCXW24i 0q9mPItrL6MNuYIq7jGy82craP/kRzZ+2cpmmWzamdSBoKsP0dbGnp5yuuEETZqt /koq+FxkpynGFwclBAIkgb6+jZ3h3CuAKDjVW07yU2dMv/q3QyOIR4KQezWRuJoD IfcoBLKXeCxDADkFlaf3lMMxHhgCaSxjlKOb/tO13nwU2RpgG2j9VV/5ke8ANg2k Fvdph9u+nWuQU1yOS92CS0vI1VoMkEln -----END CERTIFICATE-----Generated at Sun Sep 27 11:05:29 2026 by rpki-client