$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb957a7-e567-34cf-a930-6f5f1aab7fac.roa File: bfb957a7-e567-34cf-a930-6f5f1aab7fac.roa (raw, json) Hash identifier: bc18HYT6cAUTwPkjjlxMeYESGC+n+OE9ZRRYN7oQuu4= Subject key identifier: 45:98:FD:D4:65:7F:A3:F6:85:FB:F8:45:F9:C3:4F:BB:CF:55:FB:38 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8128626A88B4CC0F4B826300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb957a7-e567-34cf-a930-6f5f1aab7fac.roa Signing time: Tue 14 Apr 2026 14:22:13 +0000 ROA not before: Tue 14 Apr 2026 14:22:13 +0000 ROA not after: Mon 13 Jul 2026 14:22:13 +0000 asID: 396595 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:62:6a:88:b4:cc:0f:4b:82:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:13 2026 GMT Not After : Jul 13 14:22:13 2026 GMT Subject: CN=21125955-bc5f-413a-bd15-d6b6be1564d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:71:cc:5f:d2:c6:38:e8:74:58:fb:48:23:29: b9:d8:50:f1:a9:48:ae:f0:50:cb:d4:30:93:7c:01: dd:24:08:9b:ae:c4:93:7e:d0:ac:4c:b3:22:ff:91: ae:88:a5:88:27:55:42:65:80:45:8a:da:07:77:d4: 73:12:a9:7a:a2:5e:be:88:6a:04:20:61:91:0a:00: fe:ab:f9:7b:58:8f:4c:98:b9:16:2b:af:e0:71:7e: 9d:1c:d5:e0:32:95:fc:59:91:80:f6:f9:33:f4:04: 48:58:1c:60:c3:1e:7d:30:43:04:65:95:bf:1e:c1: a3:16:0b:f1:99:80:30:d9:e6:e0:9f:63:28:1d:9a: e5:03:21:0c:55:6d:0b:29:80:bf:e9:28:50:0b:47: 99:15:27:3a:f2:92:a6:f7:d7:e6:2e:ad:82:a1:c0: 56:0f:90:bd:0e:60:c6:57:94:72:55:67:df:9d:8c: b7:94:b7:cd:40:cc:2a:06:09:e5:65:a5:2b:67:d3: 62:d0:a2:3a:86:76:01:b6:40:ec:a1:7b:83:63:2e: 09:3b:e3:08:11:64:20:22:ce:d2:ca:8f:a2:7f:7c: 2c:eb:9d:4c:fd:f4:9d:9a:d0:71:af:05:32:90:58: 13:2f:91:16:d9:18:f4:ca:60:c1:78:43:e7:6e:de: f2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:98:FD:D4:65:7F:A3:F6:85:FB:F8:45:F9:C3:4F:BB:CF:55:FB:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb957a7-e567-34cf-a930-6f5f1aab7fac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:53:4d:b7:cc:0e:74:e4:a6:1e:61:46:19:e0:28:5c:fb:19: 26:60:09:6c:6b:77:8e:84:1a:a1:6a:c9:93:bb:8b:97:69:fe: 07:db:7a:d6:3b:1a:5d:9f:92:04:53:2a:29:a8:4e:ed:7f:03: 38:75:42:89:6c:a0:48:7a:95:89:27:c3:52:e6:38:1b:5e:bf: fe:a8:5f:41:e0:2f:70:fc:07:59:bc:0d:f9:00:c8:47:9c:06: 2d:c3:99:79:7c:59:98:4e:20:1d:6e:96:ed:3d:2e:27:99:84: d5:f3:96:2d:31:e4:09:d9:95:53:bf:8b:12:4e:b1:87:15:17: 69:ca:2f:24:58:1d:f3:d9:35:b8:ec:f2:06:f1:c4:28:a8:03: 4d:55:2c:f1:a2:c8:88:d8:da:92:6e:17:6c:9a:b4:cc:51:58: c2:d3:fc:61:72:79:47:33:ff:06:3d:3a:a2:80:bf:95:56:c6: 32:da:b1:e1:3b:6b:d2:c6:82:26:ec:89:da:b0:b8:70:64:11: 0d:f8:4d:47:fd:1d:c5:e7:83:b9:57:23:2d:64:0e:12:0e:08: ea:b6:47:e6:e4:64:ef:b9:25:eb:e5:dd:dc:d7:0c:15:dc:6d: d4:2d:de:0c:33:79:ad:a3:17:93:fc:ef:9b:eb:89:88:0f:90: ac:fa:ad:c3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BKGJqiLTMD0uCYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIxM1oXDTI2MDcxMzE0MjIxM1owLzEtMCsGA1UEAxMk MjExMjU5NTUtYmM1Zi00MTNhLWJkMTUtZDZiNmJlMTU2NGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXHMX9LGOOh0WPtIIym52FDxqUiu8FDL1DCT fAHdJAibrsSTftCsTLMi/5GuiKWIJ1VCZYBFitoHd9RzEql6ol6+iGoEIGGRCgD+ q/l7WI9MmLkWK6/gcX6dHNXgMpX8WZGA9vkz9ARIWBxgwx59MEMEZZW/HsGjFgvx mYAw2ebgn2MoHZrlAyEMVW0LKYC/6ShQC0eZFSc68pKm99fmLq2CocBWD5C9DmDG V5RyVWffnYy3lLfNQMwqBgnlZaUrZ9Ni0KI6hnYBtkDsoXuDYy4JO+MIEWQgIs7S yo+if3ws651M/fSdmtBxrwUykFgTL5EW2Rj0ymDBeEPnbt7y4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEWY/dRlf6P2hfv4RfnDT7vPVfs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZiOTU3YTctZTU2Ny0z NGNmLWE5MzAtNmY1ZjFhYWI3ZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdU023zA505KYeYUYZ4Chc+xkmYAlsa3eOhBqhasmTu4uXaf4H23rW Oxpdn5IEUyopqE7tfwM4dUKJbKBIepWJJ8NS5jgbXr/+qF9B4C9w/AdZvA35AMhH nAYtw5l5fFmYTiAdbpbtPS4nmYTV85YtMeQJ2ZVTv4sSTrGHFRdpyi8kWB3z2TW4 7PIG8cQoqANNVSzxosiI2NqSbhdsmrTMUVjC0/xhcnlHM/8GPTqigL+VVsYy2rHh O2vSxoIm7InasLhwZBEN+E1H/R3F54O5VyMtZA4SDgjqtkfm5GTvuSXr5d3c1wwV 3G3ULd4MM3mtoxeT/O+b64mID5Cs+q3D -----END CERTIFICATE-----Generated at Fri Apr 17 01:19:47 2026 by rpki-client