$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41e04a35-c8f8-3263-9780-abb7b9f38ca2.roa File: 41e04a35-c8f8-3263-9780-abb7b9f38ca2.roa (raw, json) Hash identifier: n052hYDs6vEZYAUaysnkvQsDtEjtTf44NF7DcoXR9vw= Subject key identifier: A2:D2:9E:FA:D5:78:96:54:22:0F:D0:1D:13:D0:77:05:54:E1:A3:4A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7D3BB683B2A0DD581A9C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41e04a35-c8f8-3263-9780-abb7b9f38ca2.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 192.33.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d3:bb:68:3b:2a:0d:d5:81:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=54880fc5-4f80-41fc-814a-ec8e52585140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:cb:51:9d:f5:9b:dd:14:d1:0c:d5:91:80: 0a:93:91:b0:06:f4:9c:81:d0:cf:97:fa:6d:ef:09: a1:7a:02:3e:a0:b2:1e:a7:cc:88:f6:dd:2e:14:3d: 13:e8:d2:24:b5:77:56:f7:47:5a:b2:bf:fc:ec:73: b6:46:75:52:8e:bd:64:e7:56:df:0f:d2:df:d4:9f: 9b:98:39:2b:42:b8:af:de:3f:11:74:27:9c:1d:40: ca:13:fe:55:42:bb:58:3f:bf:e3:75:6f:c6:c4:61: e9:87:4b:8c:92:b4:0a:dc:70:2f:a6:40:84:7a:fa: 7b:98:57:e9:0f:1d:a8:09:39:38:4a:dc:d5:0c:6a: a5:c6:54:b0:ed:8f:b6:40:a5:e6:96:3b:1d:95:85: 08:ea:68:7f:23:fe:f2:ba:73:95:00:3c:82:1b:c6: a2:ec:68:58:81:35:17:2c:10:9e:40:d9:e6:0e:a6: 30:a2:42:ae:8b:81:39:5a:37:4e:1b:d7:29:28:4d: 43:f2:9f:0a:1f:29:1a:7b:80:b3:da:8e:71:c1:15: cc:98:36:a6:5e:2f:3c:ae:b6:7a:57:bb:33:09:e9: 46:11:d6:a1:8a:58:51:37:aa:d1:ca:c1:60:a7:5a: a9:ee:06:10:eb:53:a9:72:f0:a3:9b:3c:d6:c2:8f: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D2:9E:FA:D5:78:96:54:22:0F:D0:1D:13:D0:77:05:54:E1:A3:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41e04a35-c8f8-3263-9780-abb7b9f38ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:60:c0:03:0b:46:b2:f6:a5:5d:01:17:7f:c7:54:67:83:a5: 45:d5:fc:c4:0b:49:d5:e4:64:fc:0e:e5:7d:36:7c:b2:2d:f9: 3c:3a:16:62:30:8f:3c:ef:25:15:73:a6:75:5f:a3:87:36:ca: 0a:88:44:d5:3d:6a:37:71:4f:97:46:cf:32:c7:32:ec:8b:42: c7:88:33:27:0f:8b:da:c4:5b:df:fc:e0:97:fa:19:de:93:8a: e7:ec:e1:a5:86:69:16:14:78:46:53:2b:9e:a1:e2:49:6a:cd: e9:9d:b3:7e:50:bf:71:d9:dd:4a:cb:b6:5f:4e:d3:b8:52:8a: 74:d6:f8:07:91:04:a9:56:f4:7a:05:ff:fc:81:2e:75:a8:4d: 08:fe:3d:2b:d0:1d:da:2a:76:eb:f6:66:21:39:eb:0e:93:df: 62:ab:39:5f:4c:44:4c:d9:50:84:ff:7d:ad:85:6e:15:47:5b: de:ac:dd:9f:80:28:e4:cf:7b:77:a6:82:5a:4b:2c:ee:05:0f: 96:b5:4b:fd:dd:a7:8c:5c:52:ff:97:e7:8c:97:fc:16:f4:b7: 79:d8:80:13:38:ce:ac:d4:9d:b8:6e:3f:9e:43:56:7b:7c:34: f4:f9:76:36:98:0e:8f:08:50:6d:06:00:0e:fd:22:9f:14:ec: d7:71:61:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99O7aDsqDdWBqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTQ4ODBmYzUtNGY4MC00MWZjLTgxNGEtZWM4ZTUyNTg1MTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTzLUZ31m90U0QzVkYAKk5GwBvScgdDPl/pt 7wmhegI+oLIep8yI9t0uFD0T6NIktXdW90dasr/87HO2RnVSjr1k51bfD9Lf1J+b mDkrQriv3j8RdCecHUDKE/5VQrtYP7/jdW/GxGHph0uMkrQK3HAvpkCEevp7mFfp Dx2oCTk4StzVDGqlxlSw7Y+2QKXmljsdlYUI6mh/I/7yunOVADyCG8ai7GhYgTUX LBCeQNnmDqYwokKui4E5WjdOG9cpKE1D8p8KHykae4Cz2o5xwRXMmDamXi88rrZ6 V7szCelGEdahilhRN6rRysFgp1qp7gYQ61OpcvCjmzzWwo8zgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLSnvrVeJZUIg/QHRPQdwVU4aNKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDFlMDRhMzUtYzhmOC0z MjYzLTk3ODAtYWJiN2I5ZjM4Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCHyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVgwAMLRrL2pV0BF3/HVGeDpUXV/MQLSdXkZPwO5X02fLIt+Tw6FmIw jzzvJRVzpnVfo4c2ygqIRNU9ajdxT5dGzzLHMuyLQseIMycPi9rEW9/84Jf6Gd6T iufs4aWGaRYUeEZTK56h4klqzemds35Qv3HZ3UrLtl9O07hSinTW+AeRBKlW9HoF //yBLnWoTQj+PSvQHdoqduv2ZiE56w6T32KrOV9MREzZUIT/fa2FbhVHW96s3Z+A KOTPe3emglpLLO4FD5a1S/3dp4xcUv+X54yX/Bb0t3nYgBM4zqzUnbhuP55DVnt8 NPT5djaYDo8IUG0GAA79Ip8U7NdxYaY= -----END CERTIFICATE-----Generated at Tue Sep 22 14:37:01 2026 by rpki-client