$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2af5e70c-574a-349c-b628-4fbc160494da.roa File: 2af5e70c-574a-349c-b628-4fbc160494da.roa (raw, json) Hash identifier: beftxhCgUk3DQNCsfJpqRB8kAEI/Aqe2NefuWUU708I= Subject key identifier: BD:76:57:F6:E3:EA:8C:0D:4B:03:20:11:ED:B2:97:06:C5:AB:8C:B0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A7784FDE8FD4491874D000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2af5e70c-574a-349c-b628-4fbc160494da.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 36623 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:78:4f:de:8f:d4:49:18:74:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=bc89369e-b045-4737-bba7-ef051a244892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:53:5b:4e:7e:da:f6:09:88:f8:90:61:ac:db: 60:12:33:f7:eb:74:04:d5:8f:62:eb:d0:b5:70:25: c9:3e:98:6e:b5:22:11:3a:78:18:41:16:4e:ab:64: 6e:18:38:91:98:67:3a:73:f6:b5:4c:1b:01:4a:a9: 13:92:d2:32:5e:9b:b4:5b:2f:d8:15:e4:3f:30:83: 85:6e:63:b8:9b:e0:1b:7d:d2:72:d1:d0:8e:17:19: aa:2c:82:15:4c:4e:58:70:32:47:ad:06:c4:83:78: fb:e2:39:f3:d0:5d:71:73:c5:a8:17:21:21:4b:e2: fb:5c:07:56:1c:1b:a9:0b:96:92:a9:75:d2:4c:34: 5d:ab:74:ec:76:34:78:f1:b6:6e:49:bb:df:d7:50: d0:bf:92:32:8e:06:df:24:d9:ee:b7:90:ed:b1:a9: a6:53:ae:64:d0:63:bb:fc:ed:62:4e:0a:45:a3:64: 80:c7:3c:6b:0a:19:83:53:97:d3:d6:09:df:be:08: 9e:53:d8:e8:51:65:85:33:a1:fc:e9:ba:dd:bb:67: b6:a7:43:e2:67:5d:05:14:3f:4c:c4:4e:14:be:24: 3d:20:b8:87:b0:f1:00:01:42:cf:6f:ab:fa:29:35: 17:31:f7:f0:da:a2:2e:a9:96:99:54:2e:48:ee:9a: 95:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:76:57:F6:E3:EA:8C:0D:4B:03:20:11:ED:B2:97:06:C5:AB:8C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2af5e70c-574a-349c-b628-4fbc160494da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:49:26:67:69:22:70:7a:2e:76:05:e8:11:6a:0a:2a:d3:f1: 5c:ba:af:c4:75:8a:3b:cd:89:55:e9:83:21:10:b8:eb:72:29: 79:90:e9:08:1f:cb:2a:5d:bf:bd:05:8f:6b:6f:99:3f:0c:40: c5:95:8a:70:68:9a:6d:a3:fb:b0:a1:9a:83:f6:14:5e:d4:c0: fa:4f:7e:64:ee:0e:dd:74:da:5d:d1:a2:6c:cf:98:f7:f9:d8: f1:fb:82:ef:f7:cf:65:b8:14:9f:00:38:35:71:1a:9d:86:be: e9:00:15:88:1f:be:09:90:55:f1:ca:69:f9:cd:8e:48:35:3a: 2d:59:2c:43:b6:c7:d0:a7:c8:24:4e:8a:92:d0:1d:98:45:94: 6a:e8:1f:d0:92:e1:3e:e8:d0:3e:ec:31:84:60:54:c5:05:b4: cc:ed:b8:91:2c:5e:aa:1b:92:5a:02:bb:1f:70:1d:40:da:34: 7d:4e:94:1d:87:aa:71:6e:9e:3a:61:8f:29:9e:db:76:8c:19: 79:95:3b:29:d1:7b:ee:f2:ad:3b:e5:3d:b5:66:86:d6:ec:05: 30:ff:09:7d:9e:4a:e9:3b:91:af:20:45:c7:43:02:39:36:14: 70:d2:9a:13:b1:af:1b:12:40:f8:2f:aa:8c:fb:aa:01:1d:a4: 89:66:d5:45 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp3hP3o/USRh00AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk YmM4OTM2OWUtYjA0NS00NzM3LWJiYTctZWYwNTFhMjQ0ODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFNbTn7a9gmI+JBhrNtgEjP363QE1Y9i69C1 cCXJPphutSIROngYQRZOq2RuGDiRmGc6c/a1TBsBSqkTktIyXpu0Wy/YFeQ/MIOF bmO4m+AbfdJy0dCOFxmqLIIVTE5YcDJHrQbEg3j74jnz0F1xc8WoFyEhS+L7XAdW HBupC5aSqXXSTDRdq3TsdjR48bZuSbvf11DQv5IyjgbfJNnut5DtsammU65k0GO7 /O1iTgpFo2SAxzxrChmDU5fT1gnfvgieU9joUWWFM6H86brdu2e2p0PiZ10FFD9M xE4UviQ9ILiHsPEAAULPb6v6KTUXMffw2qIuqZaZVC5I7pqVnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL12V/bj6owNSwMgEe2ylwbFq4ywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmFmNWU3MGMtNTc0YS0z NDljLWI2MjgtNGZiYzE2MDQ5NGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9SSZnaSJwei52BegRagoq0/Fcuq/EdYo7zYlV6YMhELjrcil5kOkI H8sqXb+9BY9rb5k/DEDFlYpwaJpto/uwoZqD9hRe1MD6T35k7g7ddNpd0aJsz5j3 +djx+4Lv989luBSfADg1cRqdhr7pABWIH74JkFXxymn5zY5INTotWSxDtsfQp8gk ToqS0B2YRZRq6B/QkuE+6NA+7DGEYFTFBbTM7biRLF6qG5JaArsfcB1A2jR9TpQd h6pxbp46YY8pntt2jBl5lTsp0Xvu8q075T21ZobW7AUw/wl9nkrpO5GvIEXHQwI5 NhRw0poTsa8bEkD4L6qM+6oBHaSJZtVF -----END CERTIFICATE-----Generated at Sun Sep 27 07:54:44 2026 by rpki-client