$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/58d7d3e7-900c-398c-8a5d-4d499aaa3433.roa File: 58d7d3e7-900c-398c-8a5d-4d499aaa3433.roa (raw, json) Hash identifier: hfSTsBaLNksdy4NEKGeVKVFGsb7vFO6Ib+508tTx5pY= Subject key identifier: 45:E1:C0:1C:A0:49:DC:31:6F:54:ED:3D:0E:FD:5E:35:3C:A6:2C:E7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7A1E2DFA64E8EDFA181F0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/58d7d3e7-900c-398c-8a5d-4d499aaa3433.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 192.33.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a1:e2:df:a6:4e:8e:df:a1:81:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=e08691ed-2682-4cae-ab7a-d2f5761516e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:aa:10:26:91:dd:cb:0a:a0:51:ed:49:e3:a9: b9:8d:f5:40:71:47:ce:a1:de:c1:24:e2:76:f4:88: 77:e2:20:80:00:d8:9c:0c:a2:69:9f:f4:85:2e:a3: 24:08:c1:2d:d7:d0:0e:77:fb:94:77:45:cc:67:19: 9c:79:a2:00:4c:47:5d:c4:fa:50:1f:7e:80:67:b1: d2:0c:f5:f4:fc:06:cd:8c:c2:be:29:1a:1b:8d:e8: d5:33:bd:3a:00:c7:21:fa:ac:91:14:bb:f1:65:c4: 19:0b:19:b8:77:df:16:ad:d8:90:c0:1b:a6:3a:68: b6:74:47:8a:eb:b1:b0:b7:6c:06:af:b6:71:3a:b4: 1b:70:1e:b5:ac:88:99:d8:d6:33:83:f5:68:7c:34: 70:56:41:b3:43:55:3b:a4:b9:2a:06:ae:40:b3:70: b5:49:5d:b7:1c:9b:45:d3:c2:4f:9b:5d:4d:74:27: 30:a9:1e:43:29:15:f3:8b:58:41:e9:55:e1:f6:94: 50:32:e3:17:6c:8e:96:16:2f:32:41:08:17:b1:73: 92:f1:9b:7d:20:5c:63:e0:d0:7a:d3:4d:ef:0b:07: 7f:07:7a:45:7a:2e:ac:2d:df:ee:ab:5a:d6:15:a7: 16:9f:49:95:50:fc:6c:46:f8:61:0e:a8:ee:42:ce: 66:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E1:C0:1C:A0:49:DC:31:6F:54:ED:3D:0E:FD:5E:35:3C:A6:2C:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/58d7d3e7-900c-398c-8a5d-4d499aaa3433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c7:9e:a6:a1:40:31:b7:f9:d0:45:e6:dc:8b:e1:ab:f7:18: 9d:36:23:76:e7:33:85:6a:69:57:4f:88:cc:b0:c6:1d:eb:e8: e8:49:53:9e:9e:50:2a:da:b6:c7:1b:bc:dc:b4:8c:2e:cc:37: 40:e3:f1:1b:c2:0f:d3:ec:5f:1d:69:6d:45:d1:23:b0:1a:f9: 99:0f:7e:5f:47:c8:8f:ec:dc:89:94:7b:d8:d9:f1:94:69:9f: 20:d3:2c:f8:0c:ab:44:8e:d6:b6:28:ee:86:1b:91:ba:fd:42: e2:e5:01:ca:06:20:f2:67:b2:8f:1d:7a:cd:a2:fc:bb:96:4a: 00:71:dd:50:31:09:14:c6:d2:45:11:fe:f2:14:eb:6f:3f:1f: 37:f9:a7:2e:2e:fa:8d:0e:7a:97:0f:93:8d:88:7b:86:6c:bf: 1b:e0:db:3f:6c:79:e8:a0:a4:23:c8:25:df:c9:e3:6d:4a:90: e6:fd:b1:f9:f4:7d:67:75:9c:dc:40:e1:23:1b:f2:a3:36:bc: 27:24:6b:9b:a9:ee:97:87:32:05:84:f9:53:d1:49:1b:d7:09: 11:ad:bc:d8:c6:70:d7:d8:e3:d7:90:1f:0a:db:6c:99:d4:8a: 3d:7e:ed:c4:64:9a:9c:b2:d5:ec:cb:53:2a:91:e9:cb:5c:df: 62:01:5c:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96Hi36ZOjt+hgfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTA4NjkxZWQtMjY4Mi00Y2FlLWFiN2EtZDJmNTc2MTUxNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKoQJpHdywqgUe1J46m5jfVAcUfOod7BJOJ2 9Ih34iCAANicDKJpn/SFLqMkCMEt19AOd/uUd0XMZxmceaIATEddxPpQH36AZ7HS DPX0/AbNjMK+KRobjejVM706AMch+qyRFLvxZcQZCxm4d98WrdiQwBumOmi2dEeK 67Gwt2wGr7ZxOrQbcB61rIiZ2NYzg/VofDRwVkGzQ1U7pLkqBq5As3C1SV23HJtF 08JPm11NdCcwqR5DKRXzi1hB6VXh9pRQMuMXbI6WFi8yQQgXsXOS8Zt9IFxj4NB6 003vCwd/B3pFei6sLd/uq1rWFacWn0mVUPxsRvhhDqjuQs5moQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXhwBygSdwxb1TtPQ79XjU8piznMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNThkN2QzZTctOTAwYy0z OThjLThhNWQtNGQ0OTlhYWEzNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/HnqahQDG3+dBF5tyL4av3GJ02I3bnM4VqaVdPiMywxh3r6OhJU56e UCratscbvNy0jC7MN0Dj8RvCD9PsXx1pbUXRI7Aa+ZkPfl9HyI/s3ImUe9jZ8ZRp nyDTLPgMq0SO1rYo7oYbkbr9QuLlAcoGIPJnso8des2i/LuWSgBx3VAxCRTG0kUR /vIU628/Hzf5py4u+o0OepcPk42Ie4Zsvxvg2z9seeigpCPIJd/J421KkOb9sfn0 fWd1nNxA4SMb8qM2vCcka5up7peHMgWE+VPRSRvXCRGtvNjGcNfY49eQHwrbbJnU ij1+7cRkmpyy1ezLUyqR6ctc32IBXB0= -----END CERTIFICATE-----Generated at Tue Sep 22 14:46:30 2026 by rpki-client