$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e21fe20-be74-3d03-a6bf-7c3eb893e833.roa File: 1e21fe20-be74-3d03-a6bf-7c3eb893e833.roa (raw, json) Hash identifier: 4vjZJynAuDk34EQNeCHFhL6zI0d4pEBaVCSBGhhz5tc= Subject key identifier: F9:02:59:D9:D4:D0:FB:EA:83:D7:23:70:26:A2:40:CA:2F:DE:64:A1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D81285AB779A4EA8CC00BE300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e21fe20-be74-3d03-a6bf-7c3eb893e833.roa Signing time: Tue 14 Apr 2026 14:22:10 +0000 ROA not before: Tue 14 Apr 2026 14:22:10 +0000 ROA not after: Mon 13 Jul 2026 14:22:10 +0000 asID: 36630 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:5a:b7:79:a4:ea:8c:c0:0b:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:10 2026 GMT Not After : Jul 13 14:22:10 2026 GMT Subject: CN=17bb7c9a-ac53-4858-96e0-3b2c7066ca91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:67:1b:8a:a2:40:e5:14:75:b0:11:b8:d6: 42:37:d8:30:fc:d3:24:ad:27:23:9e:0b:7d:15:d9: dd:00:69:a8:ec:e6:d3:81:46:3c:19:0e:3b:91:1b: 46:03:2b:4d:fb:82:77:b4:e3:1c:90:ba:c2:42:3d: 4e:7d:2e:61:0d:b1:fe:ef:ad:62:b0:60:c0:a9:f9: 9d:62:4d:46:50:b7:27:71:ab:79:25:69:16:91:bb: 5c:83:41:a5:14:6d:c6:95:21:b0:90:ef:bb:78:aa: ec:52:7b:8f:4f:90:9a:20:a4:7f:70:cc:51:32:c2: fd:a8:b3:45:03:5b:63:e4:3c:ba:1f:67:ee:2d:7b: ed:40:79:74:26:86:8e:a2:6f:25:47:9d:6f:e8:3d: 3d:e2:2e:ca:97:90:88:41:d3:05:25:00:1e:01:bd: a9:78:32:11:88:b0:97:8a:47:45:4d:8c:1f:d6:b0: e4:b9:ec:e7:7b:37:4b:e8:b9:ba:b6:38:fb:2a:5d: 36:a5:64:1d:43:98:43:da:79:9a:45:f6:65:36:aa: 90:a6:20:38:42:bc:bb:ca:db:2a:4f:d8:8f:df:3b: 92:3d:0e:b5:15:2f:3b:83:13:dd:f9:9d:3c:9d:59: 5e:6d:93:96:d5:b0:4e:f7:9c:6d:48:48:4c:53:1a: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:02:59:D9:D4:D0:FB:EA:83:D7:23:70:26:A2:40:CA:2F:DE:64:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e21fe20-be74-3d03-a6bf-7c3eb893e833.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:4f:36:67:1b:06:18:f6:45:ab:84:ae:95:4a:c4:0c:00:29: 36:d2:cc:0e:82:82:73:24:b0:71:09:a0:ef:19:e4:8f:e5:ff: 6e:42:69:55:59:f9:23:de:54:dd:1f:a2:45:7b:b1:c1:f4:32: a2:0f:9f:89:41:14:be:96:d4:68:65:16:ef:52:fc:03:f4:ab: b1:84:98:76:37:f0:09:3c:7d:23:48:0f:2b:10:02:f3:0d:96: 5b:b5:1f:bf:fd:de:88:a2:fb:c1:58:bf:55:a8:0f:b9:c6:cc: 02:0c:cb:1f:28:d6:58:80:05:f4:5b:45:e2:e3:22:ab:0f:8e: cf:1a:5b:08:2c:7f:73:92:16:68:17:dc:c1:e5:45:90:cf:4c: f4:9b:2d:88:bb:e6:99:5f:22:68:cf:46:24:bc:28:9d:df:e3: 50:f5:7f:b1:ef:97:89:f3:b9:12:49:34:72:eb:88:60:78:a1: 87:a8:63:fd:4f:a3:d3:4f:89:65:52:7a:61:a5:39:1e:0c:1e: a7:77:72:81:5d:bd:bc:1b:87:c7:2c:5a:50:38:7f:f2:43:e3: a6:c3:21:45:4e:32:d2:3e:5c:8b:c2:f8:b8:93:78:f8:f2:b3: d8:29:6c:67:6d:2b:ee:e3:23:11:f2:fd:44:6c:88:7b:8a:a5: b7:48:bd:91 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BKFq3eaTqjMAL4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIxMFoXDTI2MDcxMzE0MjIxMFowLzEtMCsGA1UEAxMk MTdiYjdjOWEtYWM1My00ODU4LTk2ZTAtM2IyYzcwNjZjYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhdnG4qiQOUUdbARuNZCN9gw/NMkrScjngt9 FdndAGmo7ObTgUY8GQ47kRtGAytN+4J3tOMckLrCQj1OfS5hDbH+761isGDAqfmd Yk1GULcncat5JWkWkbtcg0GlFG3GlSGwkO+7eKrsUnuPT5CaIKR/cMxRMsL9qLNF A1tj5Dy6H2fuLXvtQHl0JoaOom8lR51v6D094i7Kl5CIQdMFJQAeAb2peDIRiLCX ikdFTYwf1rDkueznezdL6Lm6tjj7Kl02pWQdQ5hD2nmaRfZlNqqQpiA4Qry7ytsq T9iP3zuSPQ61FS87gxPd+Z08nVlebZOW1bBO95xtSEhMUxp2PQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPkCWdnU0Pvqg9cjcCaiQMov3mShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWUyMWZlMjAtYmU3NC0z ZDAzLWE2YmYtN2MzZWI4OTNlODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0TzZnGwYY9kWrhK6VSsQMACk20swOgoJzJLBxCaDvGeSP5f9uQmlV Wfkj3lTdH6JFe7HB9DKiD5+JQRS+ltRoZRbvUvwD9KuxhJh2N/AJPH0jSA8rEALz DZZbtR+//d6IovvBWL9VqA+5xswCDMsfKNZYgAX0W0Xi4yKrD47PGlsILH9zkhZo F9zB5UWQz0z0my2Iu+aZXyJoz0YkvCid3+NQ9X+x75eJ87kSSTRy64hgeKGHqGP9 T6PTT4llUnphpTkeDB6nd3KBXb28G4fHLFpQOH/yQ+OmwyFFTjLSPlyLwvi4k3j4 8rPYKWxnbSvu4yMR8v1EbIh7iqW3SL2R -----END CERTIFICATE-----Generated at Fri Apr 17 10:35:23 2026 by rpki-client