$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5db083ff-5829-33f8-a1d3-15542573223c.roa File: 5db083ff-5829-33f8-a1d3-15542573223c.roa (raw, json) Hash identifier: 2cMp5c3L3AHTn3cddQGu5AdFAM6C21/4+Qdz2wsJVHE= Subject key identifier: 2A:9A:C8:4E:DC:DE:FF:5A:8C:F0:D9:49:48:57:1D:19:98:C7:46:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A789D4A7B02C387981C200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5db083ff-5829-33f8-a1d3-15542573223c.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 396613 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:89:d4:a7:b0:2c:38:79:81:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=7ca857d0-5d66-4446-a360-c9366d0c0787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:eb:79:9a:b6:e4:03:d7:43:8e:53:fb:ff:a3: c7:93:88:65:77:2b:89:1c:2d:76:0f:5b:47:68:6b: 66:d9:78:d5:11:7e:aa:b1:1e:07:c0:99:ac:4e:9b: 1d:23:b4:c7:8b:3b:f8:7b:a8:7d:9f:fc:aa:14:c3: 45:77:d1:37:e5:e4:c8:ca:81:24:96:6d:d6:97:f9: 8a:f0:f7:50:b3:e9:69:3b:02:9f:9c:7f:0f:24:00: d8:b5:be:48:cb:18:0c:b2:cf:dd:2a:70:1b:8b:c0: 09:5e:3a:01:b8:c4:58:cf:18:b2:b8:5a:7b:6b:8f: 3e:dd:e3:f6:e2:82:eb:45:9b:a0:68:02:92:21:8f: ca:27:ef:97:1b:5d:28:7a:2a:30:f4:02:c7:2d:80: d6:05:b6:0b:8d:04:46:4b:b4:33:53:9d:c0:89:ec: fd:69:e4:1a:9c:f2:21:9e:8c:5d:e0:26:33:07:85: 7c:4f:76:a9:22:d5:c7:ef:0a:a7:9e:f3:3b:d4:f4: fd:b7:bb:48:3f:3a:54:60:62:24:87:6e:11:6e:d8: a3:bd:ae:8e:3f:2a:dd:d8:40:6e:04:fa:0f:26:50: 39:8b:bd:42:1f:8a:bd:05:37:7c:01:89:ba:35:3d: 8c:34:93:00:f5:40:d9:bc:ca:aa:68:8c:9b:6d:cf: 04:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9A:C8:4E:DC:DE:FF:5A:8C:F0:D9:49:48:57:1D:19:98:C7:46:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5db083ff-5829-33f8-a1d3-15542573223c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:2d:9e:2f:19:37:82:68:a4:a0:0b:90:bf:cf:b0:4d:46:13: 8e:d2:28:d0:8b:12:b4:ed:a6:e2:d3:b4:cd:57:3e:50:a5:ff: 4d:36:c4:d7:02:f2:03:77:2b:7f:96:32:bf:45:01:84:cd:5a: dc:17:95:d3:71:48:44:19:90:18:0e:ef:50:6f:25:6f:30:9f: 54:22:7b:ce:e9:ca:12:ca:f2:00:7c:e4:97:f8:9d:e4:e7:ea: 71:2b:0a:1f:42:cd:6e:c6:e8:1d:7c:9e:9d:a1:60:01:d3:da: 9d:29:6e:79:3a:58:81:0f:9e:63:7d:8c:43:ae:72:3e:6d:5d: c6:cd:1e:30:d9:a5:4e:06:16:31:d9:95:cf:fb:df:d5:31:a3: 55:38:ef:ae:7a:1c:1c:f6:11:23:26:d4:f2:c3:53:ef:94:c8: 90:2d:b2:1f:b2:00:ac:ba:16:7b:5e:85:d7:26:8f:9c:31:90: b2:aa:ca:48:5d:4a:d2:12:d3:6e:24:fc:73:f0:aa:c7:95:b8: da:c0:e0:fd:92:ce:25:93:f7:c3:da:ff:bc:d1:ca:4d:e5:33: 18:56:41:43:ee:3a:a1:c4:47:01:93:e9:5d:e8:50:54:42:c4: ae:97:11:d0:2c:d0:ab:d8:60:58:7a:37:68:41:0f:69:47:81: b6:7e:65:4e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp4nUp7AsOHmBwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk N2NhODU3ZDAtNWQ2Ni00NDQ2LWEzNjAtYzkzNjZkMGMwNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+t5mrbkA9dDjlP7/6PHk4hldyuJHC12D1tH aGtm2XjVEX6qsR4HwJmsTpsdI7THizv4e6h9n/yqFMNFd9E35eTIyoEklm3Wl/mK 8PdQs+lpOwKfnH8PJADYtb5IyxgMss/dKnAbi8AJXjoBuMRYzxiyuFp7a48+3eP2 4oLrRZugaAKSIY/KJ++XG10oeiow9ALHLYDWBbYLjQRGS7QzU53Aiez9aeQanPIh noxd4CYzB4V8T3apItXH7wqnnvM71PT9t7tIPzpUYGIkh24Rbtijva6OPyrd2EBu BPoPJlA5i71CH4q9BTd8AYm6NT2MNJMA9UDZvMqqaIybbc8EVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCqayE7c3v9ajPDZSUhXHRmYx0ZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWRiMDgzZmYtNTgyOS0z M2Y4LWExZDMtMTU1NDI1NzMyMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC1LZ4vGTeCaKSgC5C/z7BNRhOO0ijQixK07abi07TNVz5Qpf9NNsTX AvIDdyt/ljK/RQGEzVrcF5XTcUhEGZAYDu9QbyVvMJ9UInvO6coSyvIAfOSX+J3k 5+pxKwofQs1uxugdfJ6doWAB09qdKW55OliBD55jfYxDrnI+bV3GzR4w2aVOBhYx 2ZXP+9/VMaNVOO+uehwc9hEjJtTyw1PvlMiQLbIfsgCsuhZ7XoXXJo+cMZCyqspI XUrSEtNuJPxz8KrHlbjawOD9ks4lk/fD2v+80cpN5TMYVkFD7jqhxEcBk+ld6FBU QsSulxHQLNCr2GBYejdoQQ9pR4G2fmVO -----END CERTIFICATE-----Generated at Mon Sep 28 14:45:35 2026 by rpki-client