$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a8d93ef-7af4-3ddc-b5db-eb345aebf05e.roa File: 4a8d93ef-7af4-3ddc-b5db-eb345aebf05e.roa (raw, json) Hash identifier: ppewJTw8SjnROVceAEuBMHrYzS4WVL2NWFs8p5NYuDU= Subject key identifier: 9A:93:5A:DA:B5:DE:26:2B:A7:CD:90:6D:BA:9E:99:24:B1:BA:AC:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E614566A15F1B8275A1417000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a8d93ef-7af4-3ddc-b5db-eb345aebf05e.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 396565 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:66:a1:5f:1b:82:75:a1:41:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=046a4e7a-9acf-4420-bc7e-9e990cb02736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:fd:70:34:ac:f3:5f:c8:53:1f:e1:6b:ea: 8e:58:da:95:2d:fd:fc:44:0b:9b:69:27:ce:db:d5: 4e:dc:7e:46:c1:06:e6:35:3a:cf:cf:ca:7d:cf:df: 7c:dd:75:6c:c5:1d:d1:00:84:90:3b:78:04:18:8f: 8c:e2:6f:f7:57:31:d0:b5:7f:59:22:ce:c1:7d:ce: 79:07:02:6b:69:d7:fa:cc:ec:d5:c1:29:b9:12:8f: 0a:52:f8:29:d3:4b:90:ee:c6:9d:74:8c:c0:89:1d: 57:a6:08:0d:9c:1b:fa:d5:a4:29:78:b2:60:5c:3a: a7:57:2f:23:b8:c6:9e:bb:08:9a:5e:50:79:db:83: f8:50:fc:5f:b7:49:93:f2:7a:6b:95:1e:9c:42:c0: 1c:58:0a:2a:ed:95:7d:d8:b6:50:35:f7:cb:0e:b6: 5b:cc:84:af:b7:28:30:fb:1a:ec:5b:55:75:12:4a: e9:13:50:94:af:a6:d0:1c:5b:2d:db:78:94:40:c7: a0:5f:ee:9c:ff:7c:2b:cf:d9:c5:c4:b9:82:bb:47: 50:8f:63:25:f8:95:a5:da:f0:68:22:4a:5e:ad:4f: 4c:d4:ba:49:7b:2a:a2:01:e4:e8:b3:57:da:13:60: 36:cc:1e:34:b9:10:49:19:c2:47:ad:17:44:99:9f: 84:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:93:5A:DA:B5:DE:26:2B:A7:CD:90:6D:BA:9E:99:24:B1:BA:AC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a8d93ef-7af4-3ddc-b5db-eb345aebf05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0d:ce:db:a4:17:a2:bc:96:dd:49:0e:74:63:23:a0:1b:26: 8f:b9:ee:7a:ae:f5:43:70:ff:71:67:83:91:3a:47:12:21:c2: 4f:ef:4c:69:75:bd:25:a1:88:d5:e5:54:6b:43:13:f1:87:46: 44:e2:6a:46:51:c5:ba:a7:11:e7:13:6d:b0:78:c5:3c:f1:e8: 9f:bf:00:33:27:06:11:40:5b:fd:ac:b8:9c:06:dc:ea:58:a5: 09:23:26:fc:96:d4:45:b2:ff:cf:9d:4d:63:62:14:d1:42:2f: 2f:b9:6d:17:bb:ce:3e:a1:90:21:cd:06:22:05:58:d3:5a:01: fc:5d:ff:ee:94:3c:97:9a:98:49:76:74:21:25:48:5c:53:51: da:83:e9:af:0c:28:87:40:f1:d7:bb:b9:b6:be:e4:bd:a7:e4: 78:3a:b0:27:a8:86:df:13:29:6f:32:2b:e9:6d:f5:c2:c5:fe: f0:69:f1:05:14:c2:79:b4:6e:c1:75:86:b7:aa:d2:ab:a8:09: 31:88:17:22:2b:6d:4a:25:84:b7:fd:cc:0a:7a:e1:20:d1:46: 43:c8:6f:dd:ab:87:b3:6b:bb:42:5b:9c:0a:a1:67:74:d3:0b: 6f:d7:cb:aa:80:77:d3:db:0f:d2:ee:d4:7d:65:82:6c:97:07: 98:69:a5:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5hRWahXxuCdaFBcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk MDQ2YTRlN2EtOWFjZi00NDIwLWJjN2UtOWU5OTBjYjAyNzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtob9cDSs81/IUx/ha+qOWNqVLf38RAubaSfO 29VO3H5GwQbmNTrPz8p9z9983XVsxR3RAISQO3gEGI+M4m/3VzHQtX9ZIs7Bfc55 BwJradf6zOzVwSm5Eo8KUvgp00uQ7saddIzAiR1XpggNnBv61aQpeLJgXDqnVy8j uMaeuwiaXlB524P4UPxft0mT8nprlR6cQsAcWAoq7ZV92LZQNffLDrZbzISvtygw +xrsW1V1EkrpE1CUr6bQHFst23iUQMegX+6c/3wrz9nFxLmCu0dQj2Ml+JWl2vBo IkperU9M1LpJeyqiAeTos1faE2A2zB40uRBJGcJHrRdEmZ+EAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJqTWtq13iYrp82QbbqemSSxuqzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGE4ZDkzZWYtN2FmNC0z ZGRjLWI1ZGItZWIzNDVhZWJmMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjDc7bpBeivJbdSQ50YyOgGyaPue56rvVDcP9xZ4OROkcSIcJP70xp db0loYjV5VRrQxPxh0ZE4mpGUcW6pxHnE22weMU88eifvwAzJwYRQFv9rLicBtzq WKUJIyb8ltRFsv/PnU1jYhTRQi8vuW0Xu84+oZAhzQYiBVjTWgH8Xf/ulDyXmphJ dnQhJUhcU1Hag+mvDCiHQPHXu7m2vuS9p+R4OrAnqIbfEylvMivpbfXCxf7wafEF FMJ5tG7BdYa3qtKrqAkxiBciK21KJYS3/cwKeuEg0UZDyG/dq4eza7tCW5wKoWd0 0wtv18uqgHfT2w/S7tR9ZYJslweYaaVb -----END CERTIFICATE-----Generated at Fri Jul 24 08:57:01 2026 by rpki-client