$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60f8a09d-5ad4-3e83-9593-6765b0605c9e.roa File: 60f8a09d-5ad4-3e83-9593-6765b0605c9e.roa (raw, json) Hash identifier: u+L0MOCvLrsI4nCRk502b05y25XKN9QwAunAAQGT4qA= Subject key identifier: B9:B9:D3:C5:E0:21:30:8D:33:F0:5F:4C:BE:1E:53:36:C0:0B:CE:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D812874258DAAE937D90D6600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60f8a09d-5ad4-3e83-9593-6765b0605c9e.roa Signing time: Tue 14 Apr 2026 14:22:22 +0000 ROA not before: Tue 14 Apr 2026 14:22:22 +0000 ROA not after: Mon 13 Jul 2026 14:22:22 +0000 asID: 397205 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:74:25:8d:aa:e9:37:d9:0d:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:22 2026 GMT Not After : Jul 13 14:22:22 2026 GMT Subject: CN=8a23b6ed-2793-4733-9a18-1bc46bfde234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7c:8f:49:e8:d6:b9:d1:cc:1d:90:9c:ea:8f: 6b:d6:f5:d7:1a:a7:ee:cf:c2:3a:f7:df:5a:f6:3a: 62:88:3d:39:d9:6f:90:0b:ae:20:50:7f:d2:75:71: 07:8c:44:63:e9:81:00:e3:f6:2b:5a:08:60:8a:21: d8:66:d4:5d:5e:8d:df:1e:58:1c:46:bc:7b:e7:56: 52:40:9e:24:8b:91:5f:bc:05:f1:28:0e:50:ef:03: ce:3e:bb:98:07:d7:0b:83:a7:f9:2e:a3:f0:c2:b6: 1a:39:da:ef:23:78:e6:e5:31:35:d4:9a:ad:74:d3: 2b:05:97:b1:64:31:a8:42:51:86:f7:21:35:86:3c: e5:0f:5b:50:2a:1e:8f:7c:f7:45:17:8d:12:ed:5d: 77:a3:17:ac:11:4a:f1:7c:85:2c:9c:da:c8:41:15: cf:4c:f3:5f:56:3b:d6:9e:15:c3:00:d2:e6:15:35: 4b:55:55:81:59:03:a6:35:80:ac:82:47:08:6f:b3: 73:c4:bc:db:f3:35:a5:ea:33:0d:54:32:55:84:64: a0:ee:9a:43:51:78:88:ab:ec:33:3e:ea:88:5a:b4: 9f:3d:81:4b:99:7c:11:0d:49:be:36:00:f6:b7:f6: 82:1b:b4:36:7a:93:69:b7:a5:88:9b:5c:89:7f:43: 0e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B9:D3:C5:E0:21:30:8D:33:F0:5F:4C:BE:1E:53:36:C0:0B:CE:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60f8a09d-5ad4-3e83-9593-6765b0605c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:91:37:20:45:52:07:f0:d2:1c:74:7b:91:b8:08:c1:9f:9f: 2a:1e:06:ad:0c:db:dd:98:2b:29:11:03:96:91:53:f0:e0:c6: 77:b5:76:a8:de:5d:92:a9:36:9b:b8:c0:fa:2d:ee:5e:d2:58: a0:49:fc:dc:35:fa:a9:be:6e:4b:ad:fa:0f:d8:6c:81:52:7d: d0:c9:b5:96:ac:6e:98:a7:c1:47:d3:16:da:4b:d5:7b:40:9d: 9a:69:82:b9:d3:bc:58:80:06:d8:82:79:38:83:5f:1f:5e:02: ec:ef:cb:df:69:7d:c7:26:55:7f:c3:1c:b9:c8:94:1c:7a:a3: c6:28:73:f9:62:de:25:fa:81:0a:14:95:2b:64:e5:90:d1:d4: b9:fa:d5:62:e2:45:d2:b7:d8:0e:34:f0:50:17:60:b5:dd:ee: 74:cd:8a:61:0f:49:de:23:91:07:8e:75:bb:59:09:49:36:52: 0d:5d:6e:7e:2f:43:76:12:c1:29:b8:aa:78:c3:c8:a4:eb:6d: 2d:d6:ab:a7:c4:9a:b9:e9:f3:72:2d:da:fb:cb:ec:77:78:1d: 11:f3:e3:18:2c:17:be:5a:5c:e6:0d:e8:99:47:95:77:59:fc: 68:5c:98:09:7e:da:01:68:b4:31:c5:a1:a5:23:75:54:44:07: 6e:69:50:ab -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BKHQljarpN9kNZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIyMloXDTI2MDcxMzE0MjIyMlowLzEtMCsGA1UEAxMk OGEyM2I2ZWQtMjc5My00NzMzLTlhMTgtMWJjNDZiZmRlMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnyPSejWudHMHZCc6o9r1vXXGqfuz8I6999a 9jpiiD052W+QC64gUH/SdXEHjERj6YEA4/YrWghgiiHYZtRdXo3fHlgcRrx751ZS QJ4ki5FfvAXxKA5Q7wPOPruYB9cLg6f5LqPwwrYaOdrvI3jm5TE11JqtdNMrBZex ZDGoQlGG9yE1hjzlD1tQKh6PfPdFF40S7V13oxesEUrxfIUsnNrIQRXPTPNfVjvW nhXDANLmFTVLVVWBWQOmNYCsgkcIb7NzxLzb8zWl6jMNVDJVhGSg7ppDUXiIq+wz PuqIWrSfPYFLmXwRDUm+NgD2t/aCG7Q2epNpt6WIm1yJf0MO8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLm508XgITCNM/BfTL4eUzbAC85lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjBmOGEwOWQtNWFkNC0z ZTgzLTk1OTMtNjc2NWIwNjA1YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABkTcgRVIH8NIcdHuRuAjBn58qHgatDNvdmCspEQOWkVPw4MZ3tXao 3l2SqTabuMD6Le5e0ligSfzcNfqpvm5LrfoP2GyBUn3QybWWrG6Yp8FH0xbaS9V7 QJ2aaYK507xYgAbYgnk4g18fXgLs78vfaX3HJlV/wxy5yJQceqPGKHP5Yt4l+oEK FJUrZOWQ0dS5+tVi4kXSt9gONPBQF2C13e50zYphD0neI5EHjnW7WQlJNlINXW5+ L0N2EsEpuKp4w8ik620t1qunxJq56fNyLdr7y+x3eB0R8+MYLBe+WlzmDeiZR5V3 WfxoXJgJftoBaLQxxaGlI3VURAduaVCr -----END CERTIFICATE-----Generated at Fri Apr 17 14:52:36 2026 by rpki-client