$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/def5fc1f-dd87-38f6-9246-8227fba55b1b.roa File: def5fc1f-dd87-38f6-9246-8227fba55b1b.roa (raw, json) Hash identifier: Jaye+HYvg/ig9ZgajhziebTWW6F5jjPjEJD6v2AOYzk= Subject key identifier: 12:8D:32:E7:F4:88:0A:35:81:83:6E:F0:75:98:31:D7:0E:84:CC:22 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D81285D0F8A6D7F9384EB2C40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/def5fc1f-dd87-38f6-9246-8227fba55b1b.roa Signing time: Tue 14 Apr 2026 14:22:11 +0000 ROA not before: Tue 14 Apr 2026 14:22:11 +0000 ROA not after: Mon 13 Jul 2026 14:22:11 +0000 asID: 40647 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:5d:0f:8a:6d:7f:93:84:eb:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:11 2026 GMT Not After : Jul 13 14:22:11 2026 GMT Subject: CN=cc5cac60-e1e4-4d52-913a-b565f9a00a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f4:71:4c:6f:a7:2f:c2:2b:42:f7:4f:db:11: f4:c6:b6:9a:97:c4:6b:3d:d8:2a:b2:b8:d1:20:43: dc:16:a8:f3:9b:70:9a:06:79:cf:14:c6:bb:8e:26: 35:57:56:96:55:f0:02:1c:e0:35:70:a1:fa:6f:b3: ee:5d:6b:85:0d:06:3c:1d:5b:d9:a5:36:4c:75:64: 91:30:24:60:48:29:68:dc:36:80:25:8e:d7:8e:6c: 7a:7a:15:3f:52:7c:a5:d1:85:ab:4e:3e:ef:98:ce: b5:02:f0:6f:43:38:9e:54:be:18:1a:50:a4:94:1f: b4:ce:ee:6d:82:2c:dc:0a:4f:e9:f2:48:09:01:67: 3b:d2:5e:04:51:9a:c9:5a:ba:48:b8:42:0e:a0:d7: b8:f2:fe:5c:05:57:e5:58:85:6e:3c:83:cc:c0:2b: 2c:db:75:aa:02:ee:6d:d8:71:65:85:5c:d4:9c:c4: fa:91:2d:e2:13:e3:77:14:7c:a1:f7:3b:bc:3f:f9: 51:d3:70:7e:32:4a:d6:02:39:ba:db:5e:37:97:35: 2b:4b:17:c0:9a:e5:f3:22:56:ca:c7:cb:0e:de:ac: 65:a1:ae:f0:cf:16:bb:3d:bc:44:d8:4e:72:56:88: 9e:7a:fe:5f:a8:98:8b:14:69:b5:c5:5b:fd:9d:27: 37:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8D:32:E7:F4:88:0A:35:81:83:6E:F0:75:98:31:D7:0E:84:CC:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/def5fc1f-dd87-38f6-9246-8227fba55b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:24:87:f7:28:39:41:33:97:47:5d:f6:6f:f3:69:44:85:ae: b3:93:25:d1:d6:be:09:36:e3:cc:da:7e:10:22:50:27:de:3d: 67:56:52:0c:75:f3:03:e6:ab:9b:d0:23:27:81:6f:56:8f:bd: e4:2f:09:86:27:52:e8:a8:c2:d8:d1:76:41:43:22:80:59:4b: 90:e6:b0:aa:76:e3:95:7b:65:ff:24:66:55:84:ae:53:7e:57: 79:56:8b:53:6e:cf:b3:c8:61:91:13:f1:52:7f:5e:14:32:f8: 1b:dc:c4:40:cc:97:41:25:45:17:75:18:d7:00:4a:6e:d3:55: d2:c7:d6:40:88:5b:d5:49:bf:f6:c8:0d:4e:2d:26:72:09:da: 16:89:5a:a4:4d:a2:04:3b:30:48:52:65:b8:bb:e9:70:42:2c: 95:fd:af:ca:55:56:2e:c9:de:27:02:59:92:6c:eb:25:6f:c7: d6:de:4f:32:10:22:e6:c0:ab:e7:07:85:ff:46:a3:e3:17:a8: d4:a1:49:75:21:f1:df:6f:f0:78:03:37:62:ba:36:96:58:af: 07:56:5c:e7:1c:e8:34:5c:3e:55:bc:60:33:d6:9e:e1:da:08: 2e:d8:33:b4:38:f3:b3:7b:f9:9c:c1:8c:83:bb:a3:72:74:18: fe:dc:07:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BKF0Pim1/k4TrLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIxMVoXDTI2MDcxMzE0MjIxMVowLzEtMCsGA1UEAxMk Y2M1Y2FjNjAtZTFlNC00ZDUyLTkxM2EtYjU2NWY5YTAwYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivRxTG+nL8IrQvdP2xH0xraal8RrPdgqsrjR IEPcFqjzm3CaBnnPFMa7jiY1V1aWVfACHOA1cKH6b7PuXWuFDQY8HVvZpTZMdWSR MCRgSClo3DaAJY7Xjmx6ehU/Unyl0YWrTj7vmM61AvBvQzieVL4YGlCklB+0zu5t gizcCk/p8kgJAWc70l4EUZrJWrpIuEIOoNe48v5cBVflWIVuPIPMwCss23WqAu5t 2HFlhVzUnMT6kS3iE+N3FHyh9zu8P/lR03B+MkrWAjm62143lzUrSxfAmuXzIlbK x8sO3qxloa7wzxa7PbxE2E5yVoieev5fqJiLFGm1xVv9nSc3ywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBKNMuf0iAo1gYNu8HWYMdcOhMwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGVmNWZjMWYtZGQ4Ny0z OGY2LTkyNDYtODIyN2ZiYTU1YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDJIf3KDlBM5dHXfZv82lEha6zkyXR1r4JNuPM2n4QIlAn3j1nVlIM dfMD5qub0CMngW9Wj73kLwmGJ1LoqMLY0XZBQyKAWUuQ5rCqduOVe2X/JGZVhK5T fld5VotTbs+zyGGRE/FSf14UMvgb3MRAzJdBJUUXdRjXAEpu01XSx9ZAiFvVSb/2 yA1OLSZyCdoWiVqkTaIEOzBIUmW4u+lwQiyV/a/KVVYuyd4nAlmSbOslb8fW3k8y ECLmwKvnB4X/RqPjF6jUoUl1IfHfb/B4AzdiujaWWK8HVlznHOg0XD5VvGAz1p7h 2ggu2DO0OPOze/mcwYyDu6NydBj+3Ade -----END CERTIFICATE-----Generated at Fri Apr 17 01:36:21 2026 by rpki-client