$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba8cb3ad-ca21-396d-a9c8-a8953df3e00e.roa File: ba8cb3ad-ca21-396d-a9c8-a8953df3e00e.roa (raw, json) Hash identifier: rDQVz5pAe2DGdiHCGU0ldl4N1gAs4C9ksvFwr91gxPg= Subject key identifier: F0:1F:58:8A:C6:92:95:61:FF:2E:D1:BD:E0:E4:8E:AE:82:AD:F3:72 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E23138492B0EA95AC6D232380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba8cb3ad-ca21-396d-a9c8-a8953df3e00e.roa Signing time: Thu 11 Jun 2026 14:21:08 +0000 ROA not before: Thu 11 Jun 2026 14:21:08 +0000 ROA not after: Wed 09 Sep 2026 14:21:08 +0000 asID: 396561 IP address blocks: 192.33.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:23:13:84:92:b0:ea:95:ac:6d:23:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 11 14:21:08 2026 GMT Not After : Sep 9 14:21:08 2026 GMT Subject: CN=0ae02e5e-cbf9-453a-9243-6bd813d6c943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:02:15:7c:45:ce:48:3f:52:b0:0f:e8:1b:23: db:4e:8a:a9:85:37:c9:91:57:13:6e:e5:5c:01:1f: 9f:49:b9:b2:db:0a:72:62:2b:5f:4b:99:ff:19:10: 04:b1:a2:ba:e6:97:48:15:2b:81:31:bd:37:12:df: db:96:d2:aa:4f:9e:6d:6e:dd:19:d7:e7:43:8e:dc: 4c:f4:e4:fa:42:ce:3f:ba:6a:75:e2:7a:f6:34:70: c9:3f:10:e4:86:d0:02:b2:63:63:94:8a:00:8b:a8: 92:fd:ed:e6:29:df:03:32:3a:bd:a7:97:21:cd:f6: 27:a2:35:72:e6:7b:d4:92:a7:ae:d4:0a:ad:94:41: 09:0e:6e:f8:69:13:23:09:19:c8:15:b9:ea:ec:60: 8d:8d:c7:49:f2:cc:24:18:ca:55:e9:a1:a1:cf:f9: f3:62:fa:ba:50:9b:c4:eb:6c:2f:c4:25:1e:b7:26: e4:f4:73:35:c3:8b:36:f1:53:29:ea:12:d4:ce:23: 6b:5c:b3:a1:9e:62:84:9e:57:57:95:9e:17:f2:c2: 64:4d:dd:21:4a:26:02:89:5b:1e:c3:d7:e3:38:3a: d2:47:47:33:53:20:7a:d4:67:e4:96:3d:9e:69:ca: 0a:0e:af:c7:02:4d:12:fc:9d:3f:81:99:49:b2:5f: 3a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1F:58:8A:C6:92:95:61:FF:2E:D1:BD:E0:E4:8E:AE:82:AD:F3:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba8cb3ad-ca21-396d-a9c8-a8953df3e00e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b9:9f:af:83:41:70:39:9e:b2:ae:bb:a0:48:d6:09:80:f6: 03:4a:2b:30:8c:a4:81:cf:a3:65:65:d4:ae:52:ac:42:18:38: 93:4c:19:17:98:1c:58:5e:c2:1b:64:ff:74:a1:84:f7:9b:86: 7c:23:b5:b3:6e:cf:95:c6:66:73:ac:f9:30:29:c7:69:18:0e: e0:f2:91:68:42:4c:f7:ad:76:b7:13:15:2f:72:df:a0:99:3e: 72:66:77:38:e1:18:12:1f:cd:27:c8:91:97:35:d1:ab:87:c0: 02:37:e0:e2:cd:95:30:c5:ae:08:2e:d3:f8:6f:72:61:93:d8: 16:6a:1f:8d:02:5c:ee:33:5a:86:33:aa:9c:d1:2d:32:bf:ed: 1c:c4:6c:27:27:2a:6f:bf:b2:cb:b9:d1:48:28:ba:ca:cf:60: 76:76:b9:c8:1b:60:47:89:77:08:e9:a8:09:57:d0:39:82:60: 01:f7:45:af:58:8e:4b:f5:a6:cd:62:c4:ff:7b:f2:12:8b:b2: 39:3a:18:0d:1c:77:54:ee:4a:da:25:9d:16:de:7c:ee:ea:19: 62:01:02:75:68:b1:0f:ef:a5:89:b0:34:29:b7:86:39:55:dd: e7:d9:a4:91:c5:5a:b1:48:da:87:97:9a:1e:db:ba:f0:1d:15: 8a:9a:da:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4jE4SSsOqVrG0jI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYxMTE0MjEwOFoXDTI2MDkwOTE0MjEwOFowLzEtMCsGA1UEAxMk MGFlMDJlNWUtY2JmOS00NTNhLTkyNDMtNmJkODEzZDZjOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwIVfEXOSD9SsA/oGyPbToqphTfJkVcTbuVc AR+fSbmy2wpyYitfS5n/GRAEsaK65pdIFSuBMb03Et/bltKqT55tbt0Z1+dDjtxM 9OT6Qs4/ump14nr2NHDJPxDkhtACsmNjlIoAi6iS/e3mKd8DMjq9p5chzfYnojVy 5nvUkqeu1AqtlEEJDm74aRMjCRnIFbnq7GCNjcdJ8swkGMpV6aGhz/nzYvq6UJvE 62wvxCUetybk9HM1w4s28VMp6hLUziNrXLOhnmKEnldXlZ4X8sJkTd0hSiYCiVse w9fjODrSR0czUyB61Gfklj2eacoKDq/HAk0S/J0/gZlJsl862wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAfWIrGkpVh/y7RveDkjq6CrfNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmE4Y2IzYWQtY2EyMS0z OTZkLWE5YzgtYTg5NTNkZjNlMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW5n6+DQXA5nrKuu6BI1gmA9gNKKzCMpIHPo2Vl1K5SrEIYOJNMGReY HFhewhtk/3ShhPebhnwjtbNuz5XGZnOs+TApx2kYDuDykWhCTPetdrcTFS9y36CZ PnJmdzjhGBIfzSfIkZc10auHwAI34OLNlTDFrggu0/hvcmGT2BZqH40CXO4zWoYz qpzRLTK/7RzEbCcnKm+/ssu50UgousrPYHZ2ucgbYEeJdwjpqAlX0DmCYAH3Ra9Y jkv1ps1ixP978hKLsjk6GA0cd1TuStolnRbefO7qGWIBAnVosQ/vpYmwNCm3hjlV 3efZpJHFWrFI2oeXmh7buvAdFYqa2g0= -----END CERTIFICATE-----Generated at Sat Jun 13 15:41:25 2026 by rpki-client