$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f01717b-3abf-305a-b92c-9cb44dad8ab3.roa File: 3f01717b-3abf-305a-b92c-9cb44dad8ab3.roa (raw, json) Hash identifier: /Ue94rGh6xEZS1S5hzJ35nYzn25Z+gzAQpwTkaky9mI= Subject key identifier: D0:2A:D5:32:81:4D:00:04:42:8F:61:0F:07:40:31:02:95:29:29:33 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A7789EFBC8A8D326E0A400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f01717b-3abf-305a-b92c-9cb44dad8ab3.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 396590 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:78:9e:fb:c8:a8:d3:26:e0:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=64ff9d2f-57ca-4b8c-9b84-8c08c83fd58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a7:28:ea:f0:df:35:83:cc:26:7b:78:97:c7: 01:fc:1f:4c:6d:f2:74:fd:70:08:a0:68:ff:14:f8: 47:3e:cc:a5:f8:20:b2:f2:6d:77:4c:10:68:da:ad: a4:7f:a3:24:06:f7:0d:9d:76:7a:ee:b4:e0:6a:b3: 5e:1a:4a:10:88:97:ce:59:33:c1:81:a2:9b:6a:10: 92:b8:f7:2f:76:ad:18:6d:49:31:6a:05:f8:b3:16: 93:37:7b:c1:f8:08:4d:b7:33:14:ea:a0:52:c6:4b: 2d:44:1d:19:66:e6:8f:74:ff:49:b0:34:91:be:e8: 8d:aa:0f:f5:1f:d4:d4:3d:c0:56:bb:95:e7:e8:3c: 31:e2:d9:fe:5f:a8:83:fe:69:9d:c2:c8:e0:de:d8: c9:5c:08:0f:f8:07:45:80:56:c3:c0:c3:56:19:e6: f3:67:b6:c9:1c:12:88:88:66:04:6e:33:02:0e:1b: 92:60:d9:7e:eb:33:fd:b1:56:fd:80:ea:cb:9d:db: cb:39:76:bf:df:e4:95:00:2e:5e:93:21:0e:f9:66: 7e:6c:03:ad:ba:d2:1c:f7:fb:3f:c4:e4:07:50:10: 9b:09:8e:69:1c:b9:3d:1b:28:1e:d0:03:6a:32:d8: 2d:16:bb:ad:26:e3:a4:8a:8d:0c:ac:f8:52:47:57: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2A:D5:32:81:4D:00:04:42:8F:61:0F:07:40:31:02:95:29:29:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f01717b-3abf-305a-b92c-9cb44dad8ab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:39:36:7f:ca:51:4e:28:03:e7:9b:c2:09:7d:53:13:27:4a: 11:ff:18:82:5a:6f:a8:43:74:64:d0:54:bb:c8:a7:50:c8:f7: 14:00:c7:36:55:8d:0a:f5:2e:92:98:04:c7:3c:b1:0c:45:d2: c5:cb:a1:81:fb:da:e2:59:46:96:7f:2a:2b:bb:cf:40:66:6c: 76:0a:4e:24:0a:af:0b:41:1a:3e:d3:ec:84:c4:31:1b:d1:e0: 56:6c:3c:f8:84:02:4e:56:af:7d:9a:64:2d:ab:99:8b:31:df: 59:6f:dc:eb:be:e4:ec:1c:87:b3:9b:b9:ab:2b:d4:43:b1:c1: c5:9d:b9:ad:d3:b6:d6:22:fa:b9:90:20:70:f9:d9:94:08:58: e4:e5:80:92:b1:f3:eb:68:73:15:f3:35:03:5b:48:3e:db:2d: ba:11:da:40:c8:56:f5:68:17:09:65:5a:4d:40:e3:67:18:aa: 81:4f:7e:ab:1c:d3:c7:bb:0e:2f:e5:3e:29:36:4e:55:8b:b6: 24:a9:3a:4b:39:fa:fa:68:82:4f:29:d2:2d:78:87:5b:b3:3f: 5d:d3:6c:76:19:fd:a7:c3:1c:e7:53:e5:eb:ce:de:b2:3f:9d: ca:89:a6:9f:6c:fa:0a:93:c8:cc:27:09:f6:e9:81:13:c2:f2: 34:6a:90:1a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp3ie+8io0ybgpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk NjRmZjlkMmYtNTdjYS00YjhjLTliODQtOGMwOGM4M2ZkNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qco6vDfNYPMJnt4l8cB/B9MbfJ0/XAIoGj/ FPhHPsyl+CCy8m13TBBo2q2kf6MkBvcNnXZ67rTgarNeGkoQiJfOWTPBgaKbahCS uPcvdq0YbUkxagX4sxaTN3vB+AhNtzMU6qBSxkstRB0ZZuaPdP9JsDSRvuiNqg/1 H9TUPcBWu5Xn6Dwx4tn+X6iD/mmdwsjg3tjJXAgP+AdFgFbDwMNWGebzZ7bJHBKI iGYEbjMCDhuSYNl+6zP9sVb9gOrLndvLOXa/3+SVAC5ekyEO+WZ+bAOtutIc9/s/ xOQHUBCbCY5pHLk9Gyge0ANqMtgtFrutJuOkio0MrPhSR1ddXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNAq1TKBTQAEQo9hDwdAMQKVKSkzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2YwMTcxN2ItM2FiZi0z MDVhLWI5MmMtOWNiNDRkYWQ4YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC5OTZ/ylFOKAPnm8IJfVMTJ0oR/xiCWm+oQ3Rk0FS7yKdQyPcUAMc2 VY0K9S6SmATHPLEMRdLFy6GB+9riWUaWfyoru89AZmx2Ck4kCq8LQRo+0+yExDEb 0eBWbDz4hAJOVq99mmQtq5mLMd9Zb9zrvuTsHIezm7mrK9RDscHFnbmt07bWIvq5 kCBw+dmUCFjk5YCSsfPraHMV8zUDW0g+2y26EdpAyFb1aBcJZVpNQONnGKqBT36r HNPHuw4v5T4pNk5Vi7YkqTpLOfr6aIJPKdIteIdbsz9d02x2Gf2nwxznU+Xrzt6y P53KiaafbPoKk8jMJwn26YETwvI0apAa -----END CERTIFICATE-----Generated at Tue Sep 22 21:11:52 2026 by rpki-client