$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f12a17d4-2acd-34b8-a98f-8a7571d244a2.roa File: f12a17d4-2acd-34b8-a98f-8a7571d244a2.roa (raw, json) Hash identifier: 3cOm6/LULUA3e6eqQC8TDS1L2FEklz4cVMeSaEOwZbA= Subject key identifier: 51:0A:0D:2A:82:4F:9F:14:52:93:BA:6A:AC:71:8E:C5:DC:D5:31:32 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D81285DC276753860A44EAA00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f12a17d4-2acd-34b8-a98f-8a7571d244a2.roa Signing time: Tue 14 Apr 2026 14:22:11 +0000 ROA not before: Tue 14 Apr 2026 14:22:11 +0000 ROA not after: Mon 13 Jul 2026 14:22:11 +0000 asID: 36627 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:28:5d:c2:76:75:38:60:a4:4e:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 14 14:22:11 2026 GMT Not After : Jul 13 14:22:11 2026 GMT Subject: CN=5735f6f8-a6be-475e-bfa4-e6d0b2aa8a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:d0:77:84:a2:f5:f1:86:4d:95:8e:5f:e2: dc:6d:f2:73:6a:c1:48:74:0e:f2:90:4a:6a:83:4f: cb:1c:bc:21:50:4c:55:5e:9f:7c:99:36:43:b3:62: c4:74:e1:c7:39:98:78:64:e0:0f:dc:12:9b:f8:38: a2:f9:42:60:0d:8c:6b:86:27:cc:16:03:d7:52:3f: 72:ba:44:ff:c5:6d:06:65:6b:ff:00:f4:55:6b:aa: 5d:5e:9e:7e:2d:61:8c:3e:b7:6b:a3:76:d6:ec:50: 12:bc:04:81:17:de:4d:31:4c:44:50:26:96:f5:48: 40:b8:2b:08:f1:61:31:3b:69:13:b8:c2:b3:83:75: 1c:0d:9e:89:5a:3b:15:78:5f:39:45:4e:bc:99:3e: c0:43:9f:e5:27:be:64:f8:4b:23:21:4c:80:00:52: d8:b9:f3:39:7f:96:c1:21:28:7c:d8:d3:d5:2f:88: 7c:ad:9b:a7:40:24:27:36:8f:3b:ca:a7:b8:04:44: 52:53:81:21:11:f0:7a:23:03:64:d6:f0:91:ba:41: d9:06:c8:ce:54:cf:ba:fb:8f:03:b1:25:be:3b:d4: bd:ca:2e:e4:63:d1:f5:e2:8d:bd:ed:2d:93:31:7c: 2e:01:95:2a:3e:da:40:c9:90:61:78:d1:da:ae:9e: f8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0A:0D:2A:82:4F:9F:14:52:93:BA:6A:AC:71:8E:C5:DC:D5:31:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f12a17d4-2acd-34b8-a98f-8a7571d244a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:9f:5e:dc:94:c5:ca:bb:a3:a9:8c:b1:f3:75:ff:9e:aa:87: 27:79:e5:02:7f:df:95:3e:95:8d:25:b3:90:69:65:b1:d2:00: 12:47:e9:01:41:7b:5e:7c:30:29:08:79:58:2c:56:22:8a:93: c7:50:17:83:19:fc:e3:9e:0e:19:77:63:b4:82:02:98:12:bc: a5:64:06:11:51:70:80:3d:4f:ac:b6:bd:e0:8f:e5:74:27:d9: 4d:dd:17:8a:e8:74:0c:60:c0:90:1c:aa:87:d6:fe:8a:a4:d4: 29:28:d4:79:93:1f:7d:99:0e:77:ab:8d:77:c1:1b:74:a2:6f: 3d:3d:a5:41:e8:cd:d7:5f:ba:5f:59:6b:f3:87:a3:8f:1e:8a: 68:49:91:64:86:df:ac:6d:72:31:da:ea:f9:15:ba:4a:b5:2b: a1:b4:d1:38:95:40:40:a1:ff:97:8a:1b:f9:5f:b6:b4:b4:c9: a2:c5:04:59:ca:35:66:6b:ab:70:f4:2a:11:bb:1b:20:61:b5: a0:62:09:8f:4c:93:00:d5:6d:e8:a8:17:be:3f:d3:53:e4:1d: bc:e6:0c:e9:1a:39:cc:40:e1:03:bd:5f:79:4f:09:41:49:f4: 95:44:a7:e0:4c:58:66:8b:5c:cc:8d:9a:78:84:2f:28:15:5d: 43:af:af:23 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BKF3CdnU4YKROqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNDE0MjIxMVoXDTI2MDcxMzE0MjIxMVowLzEtMCsGA1UEAxMk NTczNWY2ZjgtYTZiZS00NzVlLWJmYTQtZTZkMGIyYWE4YTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfrQd4Si9fGGTZWOX+LcbfJzasFIdA7ykEpq g0/LHLwhUExVXp98mTZDs2LEdOHHOZh4ZOAP3BKb+Dii+UJgDYxrhifMFgPXUj9y ukT/xW0GZWv/APRVa6pdXp5+LWGMPrdro3bW7FASvASBF95NMUxEUCaW9UhAuCsI 8WExO2kTuMKzg3UcDZ6JWjsVeF85RU68mT7AQ5/lJ75k+EsjIUyAAFLYufM5f5bB ISh82NPVL4h8rZunQCQnNo87yqe4BERSU4EhEfB6IwNk1vCRukHZBsjOVM+6+48D sSW+O9S9yi7kY9H14o297S2TMXwuAZUqPtpAyZBheNHarp741QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFEKDSqCT58UUpO6aqxxjsXc1TEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjEyYTE3ZDQtMmFjZC0z NGI4LWE5OGYtOGE3NTcxZDI0NGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWn17clMXKu6OpjLHzdf+eqocneeUCf9+VPpWNJbOQaWWx0gASR+kB QXtefDApCHlYLFYiipPHUBeDGfzjng4Zd2O0ggKYErylZAYRUXCAPU+str3gj+V0 J9lN3ReK6HQMYMCQHKqH1v6KpNQpKNR5kx99mQ53q413wRt0om89PaVB6M3XX7pf WWvzh6OPHopoSZFkht+sbXIx2ur5FbpKtSuhtNE4lUBAof+Xihv5X7a0tMmixQRZ yjVma6tw9CoRuxsgYbWgYgmPTJMA1W3oqBe+P9NT5B285gzpGjnMQOEDvV95TwlB SfSVRKfgTFhmi1zMjZp4hC8oFV1Dr68j -----END CERTIFICATE-----Generated at Fri Apr 17 05:26:06 2026 by rpki-client