$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33edb7fe-ee6c-3abe-a533-55f83d947717.roa File: 33edb7fe-ee6c-3abe-a533-55f83d947717.roa (raw, json) Hash identifier: CfKkHDSP1Q2NLnyJ43TBK3uCRKME+ABAFL6dShgZWGE= Subject key identifier: 33:AA:73:C6:75:E6:0F:82:46:DE:11:13:EE:42:3B:CE:F4:58:8F:48 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093CE35DF6B877AEB5800F40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33edb7fe-ee6c-3abe-a533-55f83d947717.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 396594 IP address blocks: 192.42.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e3:5d:f6:b8:77:ae:b5:80:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=e84bee54-c469-47a6-8d5c-57578c0863bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:3b:54:08:ce:3d:ed:2d:c4:81:58:f9:83: f9:98:9d:6c:70:08:26:a5:3b:09:ea:ff:4d:c1:f0: fd:72:b2:09:ca:05:07:3e:18:a1:c2:6b:7f:37:6f: 65:d0:83:23:a8:82:8b:19:a0:ad:0d:f7:94:50:fc: 5d:0d:f6:4a:7c:35:e1:1c:6a:3f:b7:82:fa:7c:c4: d9:14:88:9c:8c:dc:7b:b5:f5:98:76:41:20:5b:7a: db:d8:d3:cc:88:26:36:75:5b:f7:7f:1c:87:3e:1b: 0e:a5:37:d0:36:48:99:88:72:6d:56:0e:d2:b0:00: 1e:6d:a1:a5:f6:2b:b3:18:72:63:75:be:0a:88:5c: 21:bb:70:97:8c:fd:45:f6:b6:1c:75:4a:4f:25:96: 00:76:8a:8b:c5:4d:35:be:f6:36:11:b3:f0:a8:25: 35:40:04:5d:33:f1:6a:88:2e:f8:b4:39:3d:d7:d3: c5:27:65:c8:5f:24:72:44:9f:3c:72:62:ba:ac:33: b3:e3:12:6c:dd:a4:84:0e:ca:a6:10:49:3d:43:8e: d0:fc:1e:3a:03:30:72:31:a1:0d:38:22:ea:51:dd: 0f:61:9c:79:34:d2:4b:da:d9:79:72:7d:3b:17:22: fb:d0:f2:6b:98:8e:f6:1f:7a:ca:45:93:11:f8:4e: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AA:73:C6:75:E6:0F:82:46:DE:11:13:EE:42:3B:CE:F4:58:8F:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33edb7fe-ee6c-3abe-a533-55f83d947717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:da:6e:31:89:27:9a:54:00:fa:03:a9:c7:a6:42:f0:7d:47: d0:19:a7:96:3a:8f:d5:b9:72:54:8b:93:4c:9e:d1:b0:a9:8a: c0:4e:68:f9:07:71:08:34:0b:fc:bc:56:90:d5:a2:85:c2:6e: 2d:ad:df:d6:25:d3:97:71:8e:43:b7:23:0a:2b:1b:82:9c:35: e1:9a:71:d9:9f:78:ac:b7:6e:d9:d2:6c:00:dc:ce:f7:5f:3b: fb:06:47:89:45:a7:29:55:ff:86:51:fe:8e:cd:4e:96:6b:b3: dc:c3:f9:61:25:27:d6:17:cf:6e:dd:a6:45:c7:0e:4b:97:43: b1:30:e7:66:37:ef:2f:2d:2d:53:50:02:61:c4:aa:53:cd:3e: d1:54:83:7f:5a:a1:3b:38:34:73:f4:32:b4:5a:5f:37:5b:48: 21:c4:c9:00:af:40:58:f9:cd:3d:bf:d8:50:f1:c4:b9:8b:db: 55:bb:ec:b7:37:81:60:94:a8:e4:fa:61:6c:8d:32:e3:9c:c6: 76:c0:f9:3c:36:37:79:d1:9d:5b:9b:65:a2:6f:0f:7e:0d:d0: b0:fe:bf:52:c5:94:6e:23:88:02:ae:b4:af:8e:02:fd:c4:0a: cb:ad:3f:d0:00:30:53:db:2f:99:cd:3c:1e:90:dd:d6:de:9b: 09:17:91:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPONd9rh3rrWAD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZTg0YmVlNTQtYzQ2OS00N2E2LThkNWMtNTc1NzhjMDg2M2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVc7VAjOPe0txIFY+YP5mJ1scAgmpTsJ6v9N wfD9crIJygUHPhihwmt/N29l0IMjqIKLGaCtDfeUUPxdDfZKfDXhHGo/t4L6fMTZ FIicjNx7tfWYdkEgW3rb2NPMiCY2dVv3fxyHPhsOpTfQNkiZiHJtVg7SsAAebaGl 9iuzGHJjdb4KiFwhu3CXjP1F9rYcdUpPJZYAdoqLxU01vvY2EbPwqCU1QARdM/Fq iC74tDk919PFJ2XIXyRyRJ88cmK6rDOz4xJs3aSEDsqmEEk9Q47Q/B46AzByMaEN OCLqUd0PYZx5NNJL2tl5cn07FyL70PJrmI72H3rKRZMR+E5HiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOqc8Z15g+CRt4RE+5CO870WI9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzNlZGI3ZmUtZWU2Yy0z YWJlLWE1MzMtNTVmODNkOTQ3NzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrabjGJJ5pUAPoDqcemQvB9R9AZp5Y6j9W5clSLk0ye0bCpisBOaPkH cQg0C/y8VpDVooXCbi2t39Yl05dxjkO3IworG4KcNeGacdmfeKy3btnSbADczvdf O/sGR4lFpylV/4ZR/o7NTpZrs9zD+WElJ9YXz27dpkXHDkuXQ7Ew52Y37y8tLVNQ AmHEqlPNPtFUg39aoTs4NHP0MrRaXzdbSCHEyQCvQFj5zT2/2FDxxLmL21W77Lc3 gWCUqOT6YWyNMuOcxnbA+Tw2N3nRnVubZaJvD34N0LD+v1LFlG4jiAKutK+OAv3E CsutP9AAMFPbL5nNPB6Q3dbemwkXkQ4= -----END CERTIFICATE-----Generated at Tue Sep 22 17:02:18 2026 by rpki-client