$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa File: 9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa (raw, json) Hash identifier: WmADiLinKh4E95A2cPB6hc+ch2uV9p2NNjTlgPanGGc= Subject key identifier: 65:A0:6A:41:5A:47:89:E5:AD:24:0E:1D:60:90:CE:57:2E:76:55:E9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7CE8C5548F23BEE9113E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 192.33.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ce:8c:55:48:f2:3b:ee:91:13:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=17cf7a06-2f88-4ebf-9425-d8514abbd8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:7b:71:c6:12:20:a1:87:23:e6:19:49:0b: 03:0b:ed:99:04:7b:b9:d5:94:82:ef:52:9c:e6:72: 69:91:08:2c:fc:e6:f6:a7:c5:21:a3:d5:95:73:ee: c9:e4:68:42:cd:bb:aa:a5:34:7a:07:ee:47:c7:a7: 4c:56:8b:a8:31:b8:23:95:57:f4:d6:ca:94:ad:11: b7:54:26:c4:1e:97:2d:33:97:d6:6b:b9:d5:56:88: 3a:d9:39:be:ce:8d:b0:af:c6:2a:25:09:41:90:66: f9:de:17:9b:ee:e9:b7:9b:dc:0e:e9:df:98:d1:0f: 00:47:fb:d2:79:67:77:04:ae:ca:dd:de:be:4f:b2: 11:94:7b:53:12:4a:f9:f6:0f:4f:70:5a:01:24:34: 22:06:6b:0b:6f:ec:75:5a:d9:3a:19:99:bc:f4:20: 96:3f:39:bd:79:87:48:e0:c7:0d:fc:c5:cb:ed:bd: 07:ce:05:59:d3:d8:23:bf:9f:87:fb:d7:71:b4:6c: 27:c2:ff:65:8c:37:91:71:53:35:e1:b7:6c:1a:0a: 60:44:1f:c1:85:f5:1d:71:c2:17:f4:61:df:3a:fa: e6:d9:50:b8:a4:aa:2e:28:ff:78:d7:7e:44:48:64: 70:0b:09:58:d4:d4:26:cc:c2:e4:99:10:3a:cb:6b: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A0:6A:41:5A:47:89:E5:AD:24:0E:1D:60:90:CE:57:2E:76:55:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:39:3c:e1:a9:0f:fc:f3:65:98:e4:9c:0e:92:5e:29:d2:76: 42:34:99:b9:3f:c1:09:c4:6d:72:3d:b3:02:64:7d:94:92:a3: 54:ac:3b:43:25:1b:68:88:a1:5d:81:34:5a:91:e4:e3:3d:e4: c5:c5:dd:73:5c:46:02:e8:af:14:da:84:86:12:71:54:09:99: 47:b3:ca:9d:31:d8:69:5d:91:ba:37:5a:9a:41:08:4e:ab:c0: 58:da:71:03:64:87:e2:27:3c:bd:12:3c:2d:73:a5:70:f2:09: 75:4a:40:c1:0e:6d:3b:e1:d0:dc:42:d8:89:4f:2c:ec:24:8d: 62:06:4e:79:b5:df:47:d4:d1:6d:b6:e0:c5:98:c5:af:ba:c1: 6c:82:cf:a9:2e:f8:68:5c:80:bf:0d:61:c2:98:86:e3:ab:a6: f4:3e:e3:68:38:04:93:d9:77:4f:4d:73:4f:d9:a9:26:3f:86: ec:73:44:b3:f4:5e:08:52:a3:99:a4:69:db:3f:d4:95:0b:06: 5b:13:08:41:c5:8a:7a:b9:53:85:36:80:87:9d:dc:ed:d5:87: 96:a7:fc:d0:ae:95:27:bb:b6:fd:5c:e0:cd:68:48:5c:6c:e7: 5c:46:fc:16:d0:8f:e8:83:75:f4:ce:17:f5:43:50:12:2f:c4: 8b:34:2b:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g986MVUjyO+6RE+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MTdjZjdhMDYtMmY4OC00ZWJmLTk0MjUtZDg1MTRhYmJkOGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLt7ccYSIKGHI+YZSQsDC+2ZBHu51ZSC71Kc 5nJpkQgs/Ob2p8Uho9WVc+7J5GhCzbuqpTR6B+5Hx6dMVouoMbgjlVf01sqUrRG3 VCbEHpctM5fWa7nVVog62Tm+zo2wr8YqJQlBkGb53heb7um3m9wO6d+Y0Q8AR/vS eWd3BK7K3d6+T7IRlHtTEkr59g9PcFoBJDQiBmsLb+x1Wtk6GZm89CCWPzm9eYdI 4McN/MXL7b0HzgVZ09gjv5+H+9dxtGwnwv9ljDeRcVM14bdsGgpgRB/BhfUdccIX 9GHfOvrm2VC4pKouKP94135ESGRwCwlY1NQmzMLkmRA6y2vmkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWgakFaR4nlrSQOHWCQzlcudlXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTg1MGYxMmQtZWI3Ni0z Y2RiLTg5OWItNGFkN2VhMGI1YjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU5POGpD/zzZZjknA6SXinSdkI0mbk/wQnEbXI9swJkfZSSo1SsO0Ml G2iIoV2BNFqR5OM95MXF3XNcRgLorxTahIYScVQJmUezyp0x2Gldkbo3WppBCE6r wFjacQNkh+InPL0SPC1zpXDyCXVKQMEObTvh0NxC2IlPLOwkjWIGTnm130fU0W22 4MWYxa+6wWyCz6ku+GhcgL8NYcKYhuOrpvQ+42g4BJPZd09Nc0/ZqSY/huxzRLP0 XghSo5mkads/1JULBlsTCEHFinq5U4U2gIed3O3Vh5an/NCulSe7tv1c4M1oSFxs 51xG/BbQj+iDdfTOF/VDUBIvxIs0Kwo= -----END CERTIFICATE-----Generated at Wed Sep 23 00:11:46 2026 by rpki-client