$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ace4e00b-4b16-33de-a555-9907850f3625.roa File: ace4e00b-4b16-33de-a555-9907850f3625.roa (raw, json) Hash identifier: osBVXGsOpWCvB39kjDWN8vbIwTJCArfVJ6w4nkPWpYI= Subject key identifier: 42:64:7F:8A:55:B1:4E:3B:57:FD:22:40:0C:D0:30:AD:53:90:AE:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D81286D2D7AEEA0BE2C6E5A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ace4e00b-4b16-33de-a555-9907850f3625.roa Signing time: Tue 14 Apr 2026 14:22:18 +0000 ROA not before: Tue 14 Apr 2026 14:22:18 +0000 ROA not after: Mon 13 Jul 2026 14:22:18 +0000 asID: 397197 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:6d:2d:7a:ee:a0:be:2c:6e:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:18 2026 GMT Not After : Jul 13 14:22:18 2026 GMT Subject: CN=b723922c-bbcb-4ea5-ab07-8cde8e03556f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:94:7a:4c:bd:e0:20:e7:78:c3:6b:0d:f0:6c: c5:39:da:4d:49:45:e3:f1:e6:81:54:96:54:7d:86: 80:06:29:b2:f0:af:c6:cd:19:a6:b9:1e:bc:4d:e2: 5c:4d:9d:f8:b8:51:86:56:93:79:50:5a:52:db:da: fa:5f:5d:30:f1:d0:61:a3:69:c2:3b:a9:d8:f0:8f: 7b:ce:76:69:9a:4c:d9:9b:60:8d:a9:8f:21:42:02: 29:a4:2b:28:f8:0c:cf:c5:7e:d8:fe:62:2d:98:31: 71:a9:86:da:36:5a:f5:b4:4f:a3:fb:63:5f:21:fd: 74:4b:a4:37:83:ab:a2:3a:5b:26:85:1d:5e:65:ec: 07:b8:8f:04:32:c8:42:fc:b3:a1:1c:e9:bc:e5:6b: d7:66:39:73:4e:04:f2:2a:9a:f6:2e:73:73:d4:a3: a9:d6:68:96:ac:55:d2:0b:f7:32:1e:b2:b4:e6:e3: 52:62:26:80:fc:0d:58:12:fe:c6:15:91:c4:7b:45: 04:84:32:aa:db:85:3a:54:01:db:b7:a1:ce:04:78: 18:56:a9:ce:b3:01:ca:b3:50:5f:40:6c:d0:25:5f: 33:bb:fa:dc:7a:8b:af:e2:dc:79:1f:6a:8d:d7:18: 98:de:32:e9:3b:e9:96:4b:85:36:49:6b:c7:76:81: 48:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:64:7F:8A:55:B1:4E:3B:57:FD:22:40:0C:D0:30:AD:53:90:AE:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ace4e00b-4b16-33de-a555-9907850f3625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e3:42:47:1c:27:94:0d:22:6a:8a:dc:57:d0:de:22:cf:a6: a9:c4:7a:3e:de:06:7d:10:dd:b4:bb:4c:6a:d8:8a:7f:09:b0: dc:03:13:2c:9e:46:7d:d9:8a:31:a7:e6:13:5a:dd:9d:32:81: 04:2d:86:47:fc:ca:51:72:a3:95:b1:f6:6c:3e:97:f3:b7:c6: 3b:a1:c9:d4:17:71:af:a5:3e:4d:a5:d9:87:0e:fe:ce:a7:4f: fe:db:07:ec:e0:19:2d:1d:75:0d:c2:39:82:bc:98:25:ba:7c: 44:3e:7b:de:2e:80:9b:32:e4:b4:f2:b8:22:42:55:1a:0f:5b: f4:1e:af:3d:d3:db:ef:b8:17:27:28:01:2c:4d:54:48:b9:26: 24:b4:a1:18:6f:33:dd:9f:5b:cb:85:63:d7:ec:70:e9:1f:28: ae:80:8f:75:61:94:d7:94:ec:6d:82:ff:ed:bd:81:45:ab:2c: fc:73:62:c5:65:bb:fc:77:a5:e2:99:df:6a:8a:6b:6e:d4:fa: 28:33:04:6f:fa:dd:ea:d7:fc:09:af:f7:78:02:d6:94:59:b4: 3e:d2:99:52:ae:a9:dc:18:4c:1a:7a:a6:20:8e:fe:dd:e8:60: 7e:f3:40:5a:3b:f0:cf:40:c2:5a:ea:ae:e8:1e:7d:6b:11:4e: 5d:17:92:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BKG0teu6gvixuWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIxOFoXDTI2MDcxMzE0MjIxOFowLzEtMCsGA1UEAxMk YjcyMzkyMmMtYmJjYi00ZWE1LWFiMDctOGNkZThlMDM1NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25R6TL3gIOd4w2sN8GzFOdpNSUXj8eaBVJZU fYaABimy8K/GzRmmuR68TeJcTZ34uFGGVpN5UFpS29r6X10w8dBho2nCO6nY8I97 znZpmkzZm2CNqY8hQgIppCso+AzPxX7Y/mItmDFxqYbaNlr1tE+j+2NfIf10S6Q3 g6uiOlsmhR1eZewHuI8EMshC/LOhHOm85WvXZjlzTgTyKpr2LnNz1KOp1miWrFXS C/cyHrK05uNSYiaA/A1YEv7GFZHEe0UEhDKq24U6VAHbt6HOBHgYVqnOswHKs1Bf QGzQJV8zu/rceouv4tx5H2qN1xiY3jLpO+mWS4U2SWvHdoFITQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEJkf4pVsU47V/0iQAzQMK1TkK7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWNlNGUwMGItNGIxNi0z M2RlLWE1NTUtOTkwNzg1MGYzNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAE40JHHCeUDSJqitxX0N4iz6apxHo+3gZ9EN20u0xq2Ip/CbDcAxMs nkZ92Yoxp+YTWt2dMoEELYZH/MpRcqOVsfZsPpfzt8Y7ocnUF3GvpT5NpdmHDv7O p0/+2wfs4BktHXUNwjmCvJglunxEPnveLoCbMuS08rgiQlUaD1v0Hq8909vvuBcn KAEsTVRIuSYktKEYbzPdn1vLhWPX7HDpHyiugI91YZTXlOxtgv/tvYFFqyz8c2LF Zbv8d6Ximd9qimtu1PooMwRv+t3q1/wJr/d4AtaUWbQ+0plSrqncGEwaeqYgjv7d 6GB+80BaO/DPQMJa6q7oHn1rEU5dF5JY -----END CERTIFICATE-----Generated at Fri Apr 17 12:52:41 2026 by rpki-client