$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a055d26-5c7d-331e-a5f3-5896fb407685.roa File: 3a055d26-5c7d-331e-a5f3-5896fb407685.roa (raw, json) Hash identifier: mxVigJbQbdD0KZvpjn4+ULmAETp1tCkFptIH3zk0eBE= Subject key identifier: 7D:30:AA:54:90:4C:2F:E5:3A:FB:C0:40:74:24:94:F8:5F:80:39:73 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D81285C8667C83E571ECFE600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a055d26-5c7d-331e-a5f3-5896fb407685.roa Signing time: Tue 14 Apr 2026 14:22:11 +0000 ROA not before: Tue 14 Apr 2026 14:22:11 +0000 ROA not after: Mon 13 Jul 2026 14:22:11 +0000 asID: 396550 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:5c:86:67:c8:3e:57:1e:cf:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:11 2026 GMT Not After : Jul 13 14:22:11 2026 GMT Subject: CN=b9b785f7-5515-4d5b-91f7-599b0542d74f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:a6:40:8f:7f:8c:a0:00:6c:1c:e2:21:64: c8:0e:3c:6b:fe:0e:ae:58:aa:70:31:86:2a:9f:e9: d3:79:6d:79:ed:09:92:06:b0:08:c8:1e:de:77:4d: 53:f9:ea:83:8f:88:bb:52:d6:59:9c:bd:de:82:fd: 89:44:dd:ed:f1:d9:01:ed:83:9d:ec:21:90:12:9c: 0e:46:4e:38:de:cb:78:e1:fa:71:86:a0:fd:48:ef: 9d:c4:81:c6:3f:37:c6:61:2a:75:3e:e5:78:ac:83: d6:b8:b3:7b:dd:b7:f5:a8:a4:c0:06:ef:4f:d8:15: d7:94:ab:bc:52:4b:85:22:47:db:4d:30:20:0a:24: 2c:ff:79:90:29:55:d8:29:17:84:14:3e:a6:4e:1c: ff:3e:5e:93:72:93:a2:03:d0:63:2a:8c:d3:12:03: a4:63:d2:fb:d5:9b:10:df:d5:3e:05:eb:5a:8b:8e: 8a:dc:ab:3b:46:4c:be:ad:b1:b6:8c:68:3f:c8:62: 7f:4a:df:a0:9d:bc:c3:47:a6:5d:9c:a6:84:c4:15: 07:c1:e9:72:81:71:39:4e:99:81:3f:26:62:b8:4e: 47:ec:d4:9e:f2:9f:68:a3:4a:59:5b:27:48:81:73: ef:10:ee:f1:e7:82:c8:ba:48:46:2b:83:bd:26:21: ce:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:30:AA:54:90:4C:2F:E5:3A:FB:C0:40:74:24:94:F8:5F:80:39:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a055d26-5c7d-331e-a5f3-5896fb407685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:4b:67:8d:1e:e1:3b:f8:43:79:2e:60:59:37:36:3d:d3:83: 96:4c:58:2a:a1:15:a1:47:b3:a4:60:33:a4:ed:08:7a:b5:63: 2f:0a:ec:01:de:38:42:ab:4e:6f:35:44:07:70:6c:f5:c3:4e: 52:c2:75:56:d2:7f:47:d6:a0:69:23:4b:ff:b8:76:a3:c3:1e: 10:9a:30:48:07:23:71:f4:7a:11:0c:00:e7:98:7f:e7:cb:ec: 55:3c:ff:56:ad:10:ba:b0:79:5f:fa:cc:0f:46:b7:ad:49:34: a4:e9:e4:44:0a:95:64:5b:a2:1d:fb:71:f3:0c:ff:1c:e4:1c: 19:0a:36:04:24:19:6e:c1:78:fb:4f:2c:82:71:50:ae:3b:44: 8a:42:30:dd:60:e4:88:81:db:1c:a9:fc:22:dc:4a:80:8c:59: e1:c1:36:2e:fa:36:46:8c:49:65:f0:8e:27:4a:77:de:31:16: 52:18:30:3b:34:95:1d:4b:26:00:38:03:4f:9e:74:72:b0:0c: e8:cb:a4:59:ed:71:5b:59:f6:d3:1a:73:5a:c9:3d:a4:a5:b5: 17:f0:80:43:cc:a1:51:41:1d:68:2d:07:d8:32:8c:ee:98:a1: 2b:e3:c3:d8:83:6f:5f:c8:d3:69:f1:8a:3b:e6:88:d5:67:75: 45:af:28:00 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BKFyGZ8g+Vx7P5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIxMVoXDTI2MDcxMzE0MjIxMVowLzEtMCsGA1UEAxMk YjliNzg1ZjctNTUxNS00ZDViLTkxZjctNTk5YjA1NDJkNzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7amQI9/jKAAbBziIWTIDjxr/g6uWKpwMYYq n+nTeW157QmSBrAIyB7ed01T+eqDj4i7UtZZnL3egv2JRN3t8dkB7YOd7CGQEpwO Rk443st44fpxhqD9SO+dxIHGPzfGYSp1PuV4rIPWuLN73bf1qKTABu9P2BXXlKu8 UkuFIkfbTTAgCiQs/3mQKVXYKReEFD6mThz/Pl6TcpOiA9BjKozTEgOkY9L71ZsQ 39U+Betai46K3Ks7Rky+rbG2jGg/yGJ/St+gnbzDR6ZdnKaExBUHwelygXE5TpmB PyZiuE5H7NSe8p9oo0pZWydIgXPvEO7x54LIukhGK4O9JiHO/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH0wqlSQTC/lOvvAQHQklPhfgDlzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2EwNTVkMjYtNWM3ZC0z MzFlLWE1ZjMtNTg5NmZiNDA3Njg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAqS2eNHuE7+EN5LmBZNzY904OWTFgqoRWhR7OkYDOk7Qh6tWMvCuwB 3jhCq05vNUQHcGz1w05SwnVW0n9H1qBpI0v/uHajwx4QmjBIByNx9HoRDADnmH/n y+xVPP9WrRC6sHlf+swPRretSTSk6eRECpVkW6Id+3HzDP8c5BwZCjYEJBluwXj7 TyyCcVCuO0SKQjDdYOSIgdscqfwi3EqAjFnhwTYu+jZGjEll8I4nSnfeMRZSGDA7 NJUdSyYAOANPnnRysAzoy6RZ7XFbWfbTGnNayT2kpbUX8IBDzKFRQR1oLQfYMozu mKEr48PYg29fyNNp8Yo75ojVZ3VFrygA -----END CERTIFICATE-----Generated at Fri Apr 17 11:25:52 2026 by rpki-client