$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb021a40-225a-3f0b-8108-44ea3a3750d2.roa File: fb021a40-225a-3f0b-8108-44ea3a3750d2.roa (raw, json) Hash identifier: 7ceZ3YJJYqucRZT+n8ixDaDZfbQkH6yFT5SK++OVOic= Subject key identifier: 1C:9A:07:92:DD:28:BD:08:26:D1:2B:C1:A1:07:1E:64:B3:A0:3D:AE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F03A770482F88173E62A57280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb021a40-225a-3f0b-8108-44ea3a3750d2.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 396545 IP address blocks: 192.33.14.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:70:48:2f:88:17:3e:62:a5:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=3b82af30-30b2-405d-a6ec-46eb0d20a2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:73:b9:1a:3e:f4:74:31:ea:25:be:3d:22: 84:cc:ad:7f:eb:7a:97:5f:fa:b0:3d:75:27:8a:67: a1:56:aa:35:69:09:73:5e:25:9f:ac:07:12:aa:18: 88:ba:64:f5:cd:eb:10:b1:d1:77:ab:c1:96:61:f8: b4:0d:6d:2d:1c:9b:b6:1b:dd:da:71:19:81:03:63: 51:80:4b:3d:3b:18:f4:9a:90:59:95:35:2c:5f:9f: e3:e3:a1:75:89:86:6c:44:95:a3:a6:94:21:b0:46: 1e:14:1a:4b:30:12:c4:22:82:bc:a9:b9:3d:8d:f0: 8c:a4:ac:a6:66:e5:a2:08:98:c9:ee:f3:b8:45:95: 21:7b:e4:47:7d:f3:07:6f:d8:37:05:f5:6a:8c:c0: 64:71:63:cb:a9:b3:eb:f5:fd:a0:96:fe:68:52:f1: 8e:79:07:69:60:44:4e:55:69:3f:d3:b4:7e:24:0e: da:c4:63:40:da:5f:e8:f8:6f:f0:4e:d1:73:3f:01: 23:78:cd:5e:77:b6:ae:0f:d9:30:0c:1c:23:e9:2d: af:6f:cf:c6:9c:a6:d3:fe:0a:9c:c3:f4:36:25:c6: cb:eb:a2:55:4f:9f:3d:d4:66:ff:95:0a:45:9a:bf: 23:bc:67:8b:59:59:fb:14:e6:a1:fb:dd:22:70:0f: 79:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9A:07:92:DD:28:BD:08:26:D1:2B:C1:A1:07:1E:64:B3:A0:3D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb021a40-225a-3f0b-8108-44ea3a3750d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:72:51:73:43:14:e6:7d:38:e8:1a:be:92:67:30:b4:11:52: 46:f2:8f:03:98:d5:71:67:a0:4d:0a:18:cf:a9:fe:92:67:0f: 2c:01:56:be:e1:ea:d1:b1:23:ce:a2:b9:11:85:ff:ac:71:9a: b1:76:5b:90:9b:7a:e0:ce:05:10:51:47:96:a6:40:a6:51:fd: a6:0e:3f:82:9f:a3:88:1c:80:a4:bc:b7:01:36:a1:43:72:99: 63:67:e0:36:b9:4c:80:b5:52:41:1c:cb:99:f4:ec:50:ff:ab: f1:a0:eb:73:1f:40:5f:62:ae:15:e8:ed:c8:a4:d6:d9:79:67: 31:6a:02:bd:a4:6b:d1:df:7b:31:af:6e:51:a3:a7:d9:60:c6: 74:dd:12:c3:b9:86:6b:a5:5e:18:50:66:ef:1f:e6:2b:16:08: 05:b9:20:4d:35:9b:35:06:db:ed:af:86:a8:51:7c:29:64:d6: e5:1a:d7:3e:23:82:68:9d:76:06:ef:fa:8f:50:d5:7f:04:49: e5:26:c3:d7:32:fe:7e:54:6c:54:0c:1d:33:e1:74:0a:24:9a: bc:87:44:c8:9a:b1:f0:8b:00:a7:00:8e:90:0c:0e:67:9b:4c: 5e:f5:2c:63:3d:a8:45:9a:70:fc:d3:cf:2b:4d:af:58:3d:7b: 45:d8:74:d4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Dp3BIL4gXPmKlcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk M2I4MmFmMzAtMzBiMi00MDVkLWE2ZWMtNDZlYjBkMjBhMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWlzuRo+9HQx6iW+PSKEzK1/63qXX/qwPXUn imehVqo1aQlzXiWfrAcSqhiIumT1zesQsdF3q8GWYfi0DW0tHJu2G93acRmBA2NR gEs9Oxj0mpBZlTUsX5/j46F1iYZsRJWjppQhsEYeFBpLMBLEIoK8qbk9jfCMpKym ZuWiCJjJ7vO4RZUhe+RHffMHb9g3BfVqjMBkcWPLqbPr9f2glv5oUvGOeQdpYERO VWk/07R+JA7axGNA2l/o+G/wTtFzPwEjeM1ed7auD9kwDBwj6S2vb8/GnKbT/gqc w/Q2JcbL66JVT5891Gb/lQpFmr8jvGeLWVn7FOah+90icA95MQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFByaB5LdKL0IJtErwaEHHmSzoD2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmIwMjFhNDAtMjI1YS0z ZjBiLTgxMDgtNDRlYTNhMzc1MGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCEOHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTclFzQxTmfTjoGr6SZzC0EVJG8o8DmNVxZ6BNChjPqf6SZw8sAVa+ 4erRsSPOorkRhf+scZqxdluQm3rgzgUQUUeWpkCmUf2mDj+Cn6OIHICkvLcBNqFD cpljZ+A2uUyAtVJBHMuZ9OxQ/6vxoOtzH0BfYq4V6O3IpNbZeWcxagK9pGvR33sx r25Ro6fZYMZ03RLDuYZrpV4YUGbvH+YrFggFuSBNNZs1Btvtr4aoUXwpZNblGtc+ I4JonXYG7/qPUNV/BEnlJsPXMv5+VGxUDB0z4XQKJJq8h0TImrHwiwCnAI6QDA5n m0xe9SxjPahFmnD8088rTa9YPXtF2HTU -----END CERTIFICATE-----Generated at Tue Sep 22 12:39:24 2026 by rpki-client