$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/48a9e343-3956-34bd-9048-412486df0413.roa File: 48a9e343-3956-34bd-9048-412486df0413.roa (raw, json) Hash identifier: 955VsuOGZVZrJh6gTg4fTCiPQ3x45rSnQOaNquJvQpU= Subject key identifier: 17:51:CA:7E:8E:A8:CC:7F:8F:BF:A6:90:BF:EC:A9:FC:F3:A4:AF:35 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7D8403FE557C0DD723E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/48a9e343-3956-34bd-9048-412486df0413.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 144.33.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d8:40:3f:e5:57:c0:dd:72:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=3462428d-0d07-49e4-851b-f49cb332c29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a2:fb:cc:ff:b7:30:7c:c8:31:80:14:28:bd: 67:12:ed:fb:06:22:1b:f8:bc:db:da:1f:c5:d8:90: d0:ef:f7:7e:70:ae:0b:c7:9b:08:c5:0f:78:ed:f8: c9:90:71:96:11:42:f5:f3:26:8a:e1:b4:86:8c:4b: 1e:b0:16:0b:df:cc:3f:5d:f9:4f:3a:8d:d2:f8:2b: 86:88:7a:d1:33:e7:1c:d4:d0:5f:12:49:18:42:aa: e9:1d:b7:f8:b2:f5:9e:f9:e8:8c:40:7c:26:b0:01: ad:ec:ee:4a:f0:f3:c6:80:93:83:27:a6:96:41:74: 5e:3d:f8:3b:11:4b:57:13:08:07:fd:26:b2:a1:3a: 0b:1d:f4:42:8e:2d:6f:c3:c4:5f:5b:44:ab:64:06: 4c:e7:75:13:2b:99:1c:fe:c4:da:f7:9e:01:af:83: 6a:c5:5a:58:4b:f7:d7:e1:24:0c:e5:3b:98:0a:74: 7b:b6:f1:c7:a9:b5:cc:a7:df:3e:c3:c8:b9:a3:8c: 76:f7:84:c7:70:50:ae:a1:af:dd:6d:ec:6c:be:85: 50:d1:41:2e:5a:70:db:87:fd:ac:47:72:9b:9f:c9: f7:b4:4a:84:92:f5:30:b0:a5:10:3d:d0:c9:42:5f: d3:74:6f:bd:7f:dd:16:92:d0:1d:e8:c2:10:82:1f: 22:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:51:CA:7E:8E:A8:CC:7F:8F:BF:A6:90:BF:EC:A9:FC:F3:A4:AF:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/48a9e343-3956-34bd-9048-412486df0413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 144.33.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:50:ed:fa:f0:d7:6d:ca:1e:4c:07:5f:53:a8:d3:6a:3d:c7: cc:20:a4:e1:54:04:5d:4a:9f:79:39:c5:2f:d8:d6:6a:77:46: 99:50:90:c0:51:dd:33:52:4b:e8:5c:50:1e:19:ff:20:1a:68: a9:18:43:e9:21:d7:35:85:2e:28:53:15:3f:a8:5d:34:9d:15: 40:13:60:ed:d2:84:97:e0:fd:ec:7b:51:63:63:82:b3:d0:f5: 5d:ec:78:28:45:a3:96:fa:04:22:c1:ac:44:3d:40:72:b1:d6: 72:78:7a:78:e5:0b:95:3d:72:30:41:d6:97:1f:21:ec:8c:11: 5d:00:4b:f6:12:19:e7:1d:d3:d5:e5:ce:f5:91:d9:e8:3b:7a: c4:5f:58:ab:46:d9:05:13:77:cb:ee:69:9b:be:a1:45:91:eb: 4f:c9:f6:dd:fe:58:4d:de:7b:db:e2:be:c3:c0:db:09:8d:58: 35:b1:83:50:91:61:02:ca:78:ad:01:73:70:84:35:ef:a2:56: 5c:ca:59:d2:42:d6:a2:d2:1a:1a:ad:34:ae:05:d1:4e:c5:98: c5:7d:41:6b:18:19:92:36:99:4f:55:19:81:d5:a0:96:6f:c9: 64:81:91:2b:af:9b:de:53:d7:88:a8:88:eb:00:92:16:4c:ba: 31:e3:6d:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99hAP+VXwN1yPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MzQ2MjQyOGQtMGQwNy00OWU0LTg1MWItZjQ5Y2IzMzJjMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKL7zP+3MHzIMYAUKL1nEu37BiIb+Lzb2h/F 2JDQ7/d+cK4Lx5sIxQ947fjJkHGWEUL18yaK4bSGjEsesBYL38w/XflPOo3S+CuG iHrRM+cc1NBfEkkYQqrpHbf4svWe+eiMQHwmsAGt7O5K8PPGgJODJ6aWQXRePfg7 EUtXEwgH/SayoToLHfRCji1vw8RfW0SrZAZM53UTK5kc/sTa954Br4NqxVpYS/fX 4SQM5TuYCnR7tvHHqbXMp98+w8i5o4x294THcFCuoa/dbexsvoVQ0UEuWnDbh/2s R3Kbn8n3tEqEkvUwsKUQPdDJQl/TdG+9f90WktAd6MIQgh8iMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdRyn6OqMx/j7+mkL/sqfzzpK81MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDhhOWUzNDMtMzk1Ni0z NGJkLTkwNDgtNDEyNDg2ZGYwNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCEqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9Q7frw123KHkwHX1Oo02o9x8wgpOFUBF1Kn3k5xS/Y1mp3RplQkMBR 3TNSS+hcUB4Z/yAaaKkYQ+kh1zWFLihTFT+oXTSdFUATYO3ShJfg/ex7UWNjgrPQ 9V3seChFo5b6BCLBrEQ9QHKx1nJ4enjlC5U9cjBB1pcfIeyMEV0AS/YSGecd09Xl zvWR2eg7esRfWKtG2QUTd8vuaZu+oUWR60/J9t3+WE3ee9vivsPA2wmNWDWxg1CR YQLKeK0Bc3CENe+iVlzKWdJC1qLSGhqtNK4F0U7FmMV9QWsYGZI2mU9VGYHVoJZv yWSBkSuvm95T14ioiOsAkhZMujHjbWg= -----END CERTIFICATE-----Generated at Tue Sep 29 00:56:51 2026 by rpki-client