$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5074b455-daae-37c1-ba58-05f44a21ae52.roa File: 5074b455-daae-37c1-ba58-05f44a21ae52.roa (raw, json) Hash identifier: hGSH8oFbfiu6iRjnnAR72gx/pSCNZ2Pi7QCA1jAnyqQ= Subject key identifier: F8:50:EA:B3:17:94:E9:0C:DA:13:5B:6D:D0:DF:43:26:4D:09:AA:48 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7A4A9957ACECA2FA7A740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5074b455-daae-37c1-ba58-05f44a21ae52.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 192.33.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a4:a9:95:7a:ce:ca:2f:a7:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=46802da1-a7d1-4ede-9f5b-a459c0b6c0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:48:14:b5:36:86:6d:3b:55:18:16:1b:2d:a0: 4b:d0:b7:fd:9e:36:d4:be:d7:7f:e8:f8:da:4a:6e: 75:22:28:27:b6:ec:2b:04:9f:2b:0b:4c:8d:c0:d1: 39:94:06:b4:cc:39:e0:3a:aa:6e:26:e2:b6:99:5b: f5:92:bb:f9:84:4e:e9:d6:97:c7:a9:63:b2:78:85: 7c:e8:42:27:1b:e6:70:26:74:15:ad:d1:c2:27:c0: dc:d6:71:df:a2:42:4b:18:a5:33:ff:71:8f:ac:f8: 8f:17:20:45:4c:89:e0:65:bb:60:3d:eb:c1:3f:9e: da:2e:30:11:ce:c0:5a:7c:59:49:ed:e5:c9:81:8d: 18:de:49:66:a1:62:32:f6:05:4c:4c:83:5a:d3:85: 51:f0:a6:ee:7a:1b:c0:37:31:70:5d:57:ef:6a:e2: c9:17:59:be:d9:bd:ca:84:d7:9d:ba:1e:60:66:6a: 23:97:79:31:83:37:2e:8e:d2:c5:95:e9:24:d6:a0: 5a:18:3d:da:11:53:ea:52:ab:95:cd:97:e8:36:3e: 6b:89:95:7e:a3:1b:db:ec:1d:9c:d8:5d:18:a9:ed: 6a:f6:39:2f:fa:a9:34:6a:e5:50:01:e2:ca:88:61: 71:76:52:2c:a4:b2:8d:c6:ee:fd:94:91:05:09:0e: 8e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:50:EA:B3:17:94:E9:0C:DA:13:5B:6D:D0:DF:43:26:4D:09:AA:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5074b455-daae-37c1-ba58-05f44a21ae52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fd:43:f4:34:66:ac:36:73:1f:55:9e:89:9e:af:3c:7b:6e: 57:ee:99:3d:ac:a3:31:61:49:12:ce:80:42:cf:05:96:bd:e3: 24:b6:c4:3a:57:54:02:65:34:c2:d8:da:5e:5b:c3:b5:ea:ac: 51:c7:ba:71:43:30:63:66:45:78:8c:ec:6c:8b:71:b2:5b:6d: 15:86:a2:e4:2f:46:e2:09:e4:73:fe:7e:81:fc:e7:c6:fe:51: 89:0b:85:70:19:a6:fa:e9:d2:18:d6:e2:b1:4b:74:12:0b:69: b3:6b:46:53:69:91:d7:bc:4d:cd:0c:f7:32:82:68:22:86:6f: 52:b3:c1:a7:40:81:ae:2c:29:c4:eb:4a:94:e3:76:7f:4d:04: e5:60:c3:11:b0:bb:51:33:96:52:f2:84:80:3f:4c:84:10:98: 6d:86:27:99:33:22:7d:d1:52:b9:60:fb:81:0a:9f:a1:60:d8: 11:0f:ba:28:43:5d:56:93:3a:0a:f6:b2:94:8a:27:67:43:b5: 5a:6a:57:41:7d:5c:a4:4e:b5:9a:ee:cb:76:1d:00:68:46:42: 93:82:8a:08:f9:7e:b8:75:5e:fb:e3:f1:e7:7e:a9:65:1b:6a: 4f:47:e5:fe:16:85:c4:4b:80:5a:99:24:a2:59:12:7b:0f:65: 85:dc:c1:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96SplXrOyi+np0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDY4MDJkYTEtYTdkMS00ZWRlLTlmNWItYTQ1OWMwYjZjMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EgUtTaGbTtVGBYbLaBL0Lf9njbUvtd/6Pja Sm51IigntuwrBJ8rC0yNwNE5lAa0zDngOqpuJuK2mVv1krv5hE7p1pfHqWOyeIV8 6EInG+ZwJnQVrdHCJ8Dc1nHfokJLGKUz/3GPrPiPFyBFTIngZbtgPevBP57aLjAR zsBafFlJ7eXJgY0Y3klmoWIy9gVMTINa04VR8KbuehvANzFwXVfvauLJF1m+2b3K hNeduh5gZmojl3kxgzcujtLFlekk1qBaGD3aEVPqUquVzZfoNj5riZV+oxvb7B2c 2F0Yqe1q9jkv+qk0auVQAeLKiGFxdlIspLKNxu79lJEFCQ6OOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhQ6rMXlOkM2hNbbdDfQyZNCapIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTA3NGI0NTUtZGFhZS0z N2MxLWJhNTgtMDVmNDRhMjFhZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz9Q/Q0Zqw2cx9Vnomerzx7blfumT2sozFhSRLOgELPBZa94yS2xDpX VAJlNMLY2l5bw7XqrFHHunFDMGNmRXiM7GyLcbJbbRWGouQvRuIJ5HP+foH858b+ UYkLhXAZpvrp0hjW4rFLdBILabNrRlNpkde8Tc0M9zKCaCKGb1KzwadAga4sKcTr SpTjdn9NBOVgwxGwu1EzllLyhIA/TIQQmG2GJ5kzIn3RUrlg+4EKn6Fg2BEPuihD XVaTOgr2spSKJ2dDtVpqV0F9XKROtZruy3YdAGhGQpOCigj5frh1Xvvj8ed+qWUb ak9H5f4WhcRLgFqZJKJZEnsPZYXcwTE= -----END CERTIFICATE-----Generated at Fri Sep 25 18:25:00 2026 by rpki-client