$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee0b3c2b-46f1-3e12-b9fe-00cae2949dcc.roa File: ee0b3c2b-46f1-3e12-b9fe-00cae2949dcc.roa (raw, json) Hash identifier: 2W1pTvEGKi7amTPcQm1u6vo6wiUyepOFg5b7DRzpmEY= Subject key identifier: 64:5B:FC:03:67:E8:7E:3B:5D:26:5D:23:68:F6:8C:85:D9:4A:89:43 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A7854C91F1886CEB3FF280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee0b3c2b-46f1-3e12-b9fe-00cae2949dcc.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 21313 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:85:4c:91:f1:88:6c:eb:3f:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=2a0fe809-9323-4055-beb1-ae2c5490b470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3e:f2:b0:ff:46:90:19:60:4a:38:55:64:37: e5:05:df:21:1d:66:64:ea:39:27:c5:1c:4c:d2:c1: b8:13:b3:e4:ca:42:b0:6e:60:2d:45:78:10:45:91: c2:a8:15:44:2a:ca:ac:2a:7a:37:41:ab:20:f2:96: 00:c8:6f:b9:fa:ae:2c:6a:ed:3c:c6:c1:62:cd:34: 58:90:34:97:fa:ef:79:9d:75:e4:b8:33:80:14:2c: d6:d1:36:e4:29:f6:1d:90:19:24:f2:b5:73:37:78: 1f:46:46:6a:e1:28:0b:a5:85:e0:e3:5e:59:57:c5: 4e:bf:ed:5b:71:7e:21:1a:e2:37:c6:04:4d:8d:1a: d6:25:2c:ac:88:d3:f7:35:da:5f:12:2c:7f:4a:d3: 4e:2a:9e:1b:b5:e7:4c:d0:96:46:b4:f6:9a:09:8d: d7:c5:a4:f1:e7:ed:9b:f1:7d:a2:52:68:16:ca:7a: 33:9f:f8:11:04:aa:9d:2b:eb:b1:06:ef:21:a6:0c: 43:e3:be:1a:54:da:2d:32:3f:c0:ef:5f:ed:d6:5f: 01:23:55:eb:a5:a0:41:9e:86:f4:36:20:49:0f:2f: ed:13:84:c7:fb:14:61:c2:fa:8d:ed:de:59:9e:49: 3b:58:7f:d7:74:13:88:63:07:e6:45:b1:d4:70:3f: 66:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5B:FC:03:67:E8:7E:3B:5D:26:5D:23:68:F6:8C:85:D9:4A:89:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee0b3c2b-46f1-3e12-b9fe-00cae2949dcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:95:8b:22:8f:70:e9:bb:a3:0a:b4:58:b3:33:78:84:f7:15: 17:44:00:ee:9b:6e:16:bc:d2:c1:bc:75:74:b6:fc:94:26:ef: 24:ce:80:76:ad:45:c5:60:85:3e:3f:b2:b3:c8:99:be:51:3a: 3e:75:2a:00:27:ec:ba:71:ed:f4:7d:af:64:f4:0d:be:ef:b3: 48:7a:e9:12:67:ec:64:ea:62:8e:f9:e4:9c:cd:99:f7:02:6e: cd:4c:03:fb:8b:92:9a:ac:7d:65:ea:15:21:c4:71:4a:dc:9a: 9e:d4:18:e1:a4:61:55:84:85:78:24:3e:f5:79:39:d9:6b:33: 71:9a:d2:ba:98:55:e0:3b:c2:6d:00:fd:2f:8c:45:22:71:e0: 7f:00:11:b6:26:1e:0a:d7:86:e2:05:c2:eb:00:80:c0:09:4d: 5d:dc:d8:da:18:26:6b:23:70:e7:94:a1:9f:0e:cd:d5:b4:90: cc:00:7f:11:8a:46:bb:5e:4e:85:5f:34:b6:83:b9:10:3c:c1: 19:bb:30:a3:d5:ff:e3:e7:6d:7b:35:d5:39:8f:8a:9d:37:83: 01:65:c7:ea:06:8b:0e:d8:4d:dc:ff:6e:12:98:43:b6:46:5c: 1e:74:07:29:eb:f7:e6:f1:eb:7e:1a:85:fe:4a:38:9b:fb:8d: 87:74:c4:d6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp4VMkfGIbOs/8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MmEwZmU4MDktOTMyMy00MDU1LWJlYjEtYWUyYzU0OTBiNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD7ysP9GkBlgSjhVZDflBd8hHWZk6jknxRxM 0sG4E7PkykKwbmAtRXgQRZHCqBVEKsqsKno3Qasg8pYAyG+5+q4sau08xsFizTRY kDSX+u95nXXkuDOAFCzW0TbkKfYdkBkk8rVzN3gfRkZq4SgLpYXg415ZV8VOv+1b cX4hGuI3xgRNjRrWJSysiNP3NdpfEix/StNOKp4btedM0JZGtPaaCY3XxaTx5+2b 8X2iUmgWynozn/gRBKqdK+uxBu8hpgxD474aVNotMj/A71/t1l8BI1XrpaBBnob0 NiBJDy/tE4TH+xRhwvqN7d5Znkk7WH/XdBOIYwfmRbHUcD9m1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGRb/ANn6H47XSZdI2j2jIXZSolDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWUwYjNjMmItNDZmMS0z ZTEyLWI5ZmUtMDBjYWUyOTQ5ZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCTlYsij3Dpu6MKtFizM3iE9xUXRADum24WvNLBvHV0tvyUJu8kzoB2 rUXFYIU+P7KzyJm+UTo+dSoAJ+y6ce30fa9k9A2+77NIeukSZ+xk6mKO+eSczZn3 Am7NTAP7i5KarH1l6hUhxHFK3Jqe1BjhpGFVhIV4JD71eTnZazNxmtK6mFXgO8Jt AP0vjEUiceB/ABG2Jh4K14biBcLrAIDACU1d3NjaGCZrI3DnlKGfDs3VtJDMAH8R ika7Xk6FXzS2g7kQPMEZuzCj1f/j5217NdU5j4qdN4MBZcfqBosO2E3c/24SmEO2 RlwedAcp6/fm8et+GoX+Sjib+42HdMTW -----END CERTIFICATE-----Generated at Mon Sep 21 09:42:50 2026 by rpki-client