$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a9b2164-c967-394b-a678-5a049a7130e0.roa File: 7a9b2164-c967-394b-a678-5a049a7130e0.roa (raw, json) Hash identifier: tEbFkaxy14CTf3mnVCL5oo0ZX/7kZW7vqwg1ACN9aYY= Subject key identifier: 70:86:09:E7:17:C0:BD:F7:8E:DD:0D:3C:03:DA:97:8E:43:90:87:71 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A784A9E6AF91B2AC681380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a9b2164-c967-394b-a678-5a049a7130e0.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 396561 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:84:a9:e6:af:91:b2:ac:68:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=c0bdb64c-4f50-45fd-93c3-9a7258005410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:51:65:79:08:8a:3a:ea:08:9e:22:df:2a:68: 73:d3:f5:08:73:cb:0c:73:40:a6:a8:c2:0e:64:cc: 25:6e:66:2c:10:fe:6c:a4:c3:17:c2:03:d1:ea:36: a7:17:ab:e7:f5:e6:b8:2d:1b:26:26:94:01:d5:bc: 0e:4b:d8:65:96:43:88:80:55:87:55:93:5d:57:e4: dd:77:dc:18:2c:64:4c:04:ce:89:a6:3f:52:e1:a1: 4f:1e:14:14:0c:1e:99:15:fa:50:56:18:d9:06:d1: 74:b9:9e:00:46:ef:93:d2:b7:74:c6:18:93:a3:f5: 4a:81:ba:90:ed:6d:c7:f3:ca:4b:4b:ea:c8:4c:30: 28:1b:b1:6a:74:1a:0e:c5:f4:7b:26:26:38:7f:15: 0a:c6:4e:39:d7:6c:8a:5a:80:d2:bd:4f:65:bc:29: 60:4a:2d:9e:6f:47:1d:d1:78:e6:2a:8a:8c:7b:53: af:ba:ad:e3:20:43:87:7f:5b:3f:0f:a5:c7:c4:8b: 5e:83:15:b4:c5:01:e8:21:6c:52:6f:93:5b:82:dd: 38:bf:fc:fe:1a:19:78:de:73:c2:98:73:ed:36:7c: 8a:1f:1a:f4:12:62:b3:24:c9:fa:f6:c6:92:f5:10: 69:3d:64:63:3e:e5:04:fe:74:8b:c9:b4:e3:3e:87: 3e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:86:09:E7:17:C0:BD:F7:8E:DD:0D:3C:03:DA:97:8E:43:90:87:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a9b2164-c967-394b-a678-5a049a7130e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:84:a6:1b:31:f2:ad:07:e2:68:05:3e:b6:d6:f1:40:0d:6f: 31:a4:f5:7c:04:a9:5a:7c:c4:42:96:63:f0:c8:b4:ca:0f:8b: b4:ab:63:63:33:81:2d:af:52:d8:d5:c1:34:56:06:b9:ab:ce: 18:b2:b8:34:ba:a2:99:0f:d7:0e:78:dd:8b:c0:08:22:d7:48: b2:b3:c6:72:10:93:5b:64:c7:27:62:10:9c:84:76:a9:3a:43: 83:45:d6:02:29:4a:49:4d:d2:f0:bd:00:1b:cb:a7:50:eb:96: eb:b9:b7:17:f9:5e:50:8e:78:5f:fa:82:1a:8d:02:f1:ad:1d: 0c:49:02:28:93:a3:c4:1e:43:ce:80:c4:0b:80:8d:bb:82:bf: 9a:81:eb:ab:0b:89:84:4d:2c:53:75:f2:8c:03:44:d7:47:ba: 55:3b:ce:97:80:5c:eb:52:65:00:d6:f4:03:f6:0b:e6:7f:6e: aa:8f:3f:b6:a2:e5:d9:6c:dc:94:81:1c:8c:05:bd:4c:86:e4: d9:c1:8f:64:ca:78:d9:5f:ea:2c:b7:13:94:be:c5:67:f7:cb: 47:68:7a:36:b5:23:96:5b:2b:d2:c5:b6:08:fa:e1:8f:e3:c0: a7:d5:33:f6:b8:eb:69:66:48:a6:28:63:96:98:aa:87:60:03: 8b:db:db:c4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp4Sp5q+RsqxoE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk YzBiZGI2NGMtNGY1MC00NWZkLTkzYzMtOWE3MjU4MDA1NDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklFleQiKOuoIniLfKmhz0/UIc8sMc0CmqMIO ZMwlbmYsEP5spMMXwgPR6janF6vn9ea4LRsmJpQB1bwOS9hllkOIgFWHVZNdV+Td d9wYLGRMBM6Jpj9S4aFPHhQUDB6ZFfpQVhjZBtF0uZ4ARu+T0rd0xhiTo/VKgbqQ 7W3H88pLS+rITDAoG7FqdBoOxfR7JiY4fxUKxk4512yKWoDSvU9lvClgSi2eb0cd 0XjmKoqMe1Ovuq3jIEOHf1s/D6XHxItegxW0xQHoIWxSb5Nbgt04v/z+Ghl43nPC mHPtNnyKHxr0EmKzJMn69saS9RBpPWRjPuUE/nSLybTjPoc+VQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHCGCecXwL33jt0NPAPal45DkIdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2E5YjIxNjQtYzk2Ny0z OTRiLWE2NzgtNWEwNDlhNzEzMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/hKYbMfKtB+JoBT621vFADW8xpPV8BKlafMRClmPwyLTKD4u0q2Nj M4Etr1LY1cE0Vga5q84Ysrg0uqKZD9cOeN2LwAgi10iys8ZyEJNbZMcnYhCchHap OkODRdYCKUpJTdLwvQAby6dQ65brubcX+V5Qjnhf+oIajQLxrR0MSQIok6PEHkPO gMQLgI27gr+ageurC4mETSxTdfKMA0TXR7pVO86XgFzrUmUA1vQD9gvmf26qjz+2 ouXZbNyUgRyMBb1MhuTZwY9kynjZX+ostxOUvsVn98tHaHo2tSOWWyvSxbYI+uGP 48Cn1TP2uOtpZkimKGOWmKqHYAOL29vE -----END CERTIFICATE-----Generated at Tue Sep 29 01:50:53 2026 by rpki-client