$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/381340d3-4d65-3093-9630-6d2c34537be7.roa File: 381340d3-4d65-3093-9630-6d2c34537be7.roa (raw, json) Hash identifier: QD5zJTTlgttD800eWruX2dUknPK2EeOp35O2z4h6/1s= Subject key identifier: 5B:97:0B:77:A6:23:10:5D:5B:27:11:17:A1:15:05:71:58:82:4E:E2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7D14B6E5A7AC8F1498208 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/381340d3-4d65-3093-9630-6d2c34537be7.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 192.33.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d1:4b:6e:5a:7a:c8:f1:49:82:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=1b56b93a-ca79-425e-b590-c7ece29fd23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b1:a3:49:dc:a5:40:a7:90:e6:c0:95:54:6a: 0a:ec:b4:a9:29:b3:43:35:39:b5:40:34:79:eb:db: 46:ea:a8:26:a3:b2:c5:91:45:ce:6f:b0:4f:65:a9: c4:8f:ca:0a:fe:81:03:89:b2:38:a6:a6:26:68:b2: a6:00:05:6a:0e:72:10:f6:44:22:8d:fc:ac:d5:76: cf:04:49:ce:54:c1:a5:ce:9b:bc:3e:15:90:6f:4d: b6:73:a3:44:64:5f:45:43:91:5a:d1:9f:24:80:6f: 7a:22:5c:1c:06:35:84:cb:10:e8:05:8f:6b:79:da: 3b:c0:8b:5b:25:1f:5a:f5:95:f8:f3:f7:19:c4:7f: 5b:75:77:a6:23:50:91:42:d7:a9:05:63:d7:35:ca: 46:c9:c9:6d:ee:85:f9:c7:55:36:95:56:ee:14:9b: eb:b6:70:29:b6:35:09:c4:90:d7:84:26:d1:56:3f: 0d:22:ac:12:b1:57:32:5d:1b:4e:80:9d:9d:14:4c: 35:b6:ed:cb:ec:e1:48:ab:dd:91:09:a3:2a:a8:b3: 0d:ac:fd:81:f7:e0:0b:38:0e:c0:46:3e:96:5b:d9: 1a:af:7a:ac:ba:2d:57:4e:2f:24:d7:14:05:79:e8: 01:09:fc:36:22:b9:5b:67:d7:e6:38:10:10:de:1b: b1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:97:0B:77:A6:23:10:5D:5B:27:11:17:A1:15:05:71:58:82:4E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/381340d3-4d65-3093-9630-6d2c34537be7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:86:be:6a:dc:7a:39:9c:16:52:4e:61:7a:81:e1:b1:91:18: 3f:2f:7c:5b:4d:34:71:f7:29:80:23:d2:ef:26:0c:7f:17:75: a3:2d:3a:42:ab:cd:8c:97:47:0b:55:de:81:e0:70:a2:15:95: 37:ba:3d:09:ad:b6:5a:4a:54:62:37:79:d8:96:21:4d:50:0c: 57:1f:67:9c:a4:c6:8f:ce:51:18:1d:2f:a5:59:a8:2e:2f:3d: 9f:f5:d4:e2:f0:4c:02:10:09:1f:cd:97:4e:6b:44:52:b8:fa: 38:2c:c1:5a:c1:96:63:1a:eb:e0:73:26:f2:3a:cb:38:f3:70: 42:81:ba:4b:b5:31:05:2a:fb:ba:1b:90:cf:27:92:5b:be:5a: 05:8f:64:6b:6d:93:6a:7d:83:e9:ae:b1:1a:9f:82:f2:1c:88: b5:c2:60:96:42:f5:95:ac:da:90:c1:d0:14:1f:30:2b:be:49: fe:33:a9:71:66:97:28:79:5e:e2:67:0c:2d:23:cf:61:aa:8c: 48:6e:0b:99:37:3a:d2:6e:d8:31:25:c2:ec:a3:7e:1b:bf:a4: d8:67:fe:65:7d:7d:fc:a3:10:0b:f6:d8:d1:fa:92:5d:b0:3b: 6b:4a:d0:58:03:37:2a:44:6a:11:d7:2e:0b:d6:d1:fb:fb:b3: a6:dd:cf:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99FLblp6yPFJgggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MWI1NmI5M2EtY2E3OS00MjVlLWI1OTAtYzdlY2UyOWZkMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLGjSdylQKeQ5sCVVGoK7LSpKbNDNTm1QDR5 69tG6qgmo7LFkUXOb7BPZanEj8oK/oEDibI4pqYmaLKmAAVqDnIQ9kQijfys1XbP BEnOVMGlzpu8PhWQb022c6NEZF9FQ5Fa0Z8kgG96IlwcBjWEyxDoBY9redo7wItb JR9a9ZX48/cZxH9bdXemI1CRQtepBWPXNcpGyclt7oX5x1U2lVbuFJvrtnAptjUJ xJDXhCbRVj8NIqwSsVcyXRtOgJ2dFEw1tu3L7OFIq92RCaMqqLMNrP2B9+ALOA7A Rj6WW9kar3qsui1XTi8k1xQFeegBCfw2IrlbZ9fmOBAQ3hux8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuXC3emIxBdWycRF6EVBXFYgk7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzgxMzQwZDMtNGQ2NS0z MDkzLTk2MzAtNmQyYzM0NTM3YmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuGvmrcejmcFlJOYXqB4bGRGD8vfFtNNHH3KYAj0u8mDH8XdaMtOkKr zYyXRwtV3oHgcKIVlTe6PQmttlpKVGI3ediWIU1QDFcfZ5ykxo/OURgdL6VZqC4v PZ/11OLwTAIQCR/Nl05rRFK4+jgswVrBlmMa6+BzJvI6yzjzcEKBuku1MQUq+7ob kM8nklu+WgWPZGttk2p9g+musRqfgvIciLXCYJZC9ZWs2pDB0BQfMCu+Sf4zqXFm lyh5XuJnDC0jz2GqjEhuC5k3OtJu2DElwuyjfhu/pNhn/mV9ffyjEAv22NH6kl2w O2tK0FgDNypEahHXLgvW0fv7s6bdz8k= -----END CERTIFICATE-----Generated at Mon Sep 21 17:21:11 2026 by rpki-client