$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a521d914-604a-32f4-82a5-6f40ff6835a1.roa File: a521d914-604a-32f4-82a5-6f40ff6835a1.roa (raw, json) Hash identifier: f5e3RDxobzQPUOpFbJUIugMvcrvidgR3V+pCU2eihn8= Subject key identifier: F6:41:D6:AF:10:2F:65:8C:33:F4:67:2F:7A:76:B0:3D:0B:57:9C:85 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7A52EED72BCA737ADCF20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a521d914-604a-32f4-82a5-6f40ff6835a1.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 192.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a5:2e:ed:72:bc:a7:37:ad:cf:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=f4766453-2d45-4a83-aa53-888b825f2123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:04:7f:5c:c3:f9:61:d6:09:bf:aa:a9:24:75: db:06:36:d0:af:54:fc:08:87:c2:63:7f:69:70:9d: f7:39:d0:39:16:f5:ef:5a:a6:bc:23:30:59:17:35: 57:e8:49:c5:41:d1:fc:22:9a:06:33:3c:13:3e:f6: aa:13:cd:f2:ec:ca:2b:c9:bd:94:4a:5e:5d:5f:1b: 77:2e:25:a7:a5:40:b5:7f:8a:6b:dc:f8:5b:51:c9: c8:d3:82:1a:88:72:2f:6c:13:49:3c:58:d0:be:c1: a2:98:8e:2a:e5:f3:66:d5:82:fe:65:cf:87:99:6b: fc:92:eb:37:37:e8:e9:0a:ed:79:a4:4b:06:73:64: 89:c6:e5:01:7e:cd:96:7f:a9:29:37:d6:3e:76:d1: ae:4b:50:f8:bc:67:7a:8d:5b:48:0b:a3:98:86:87: 06:05:80:b6:ca:bc:8d:8b:35:95:85:a0:df:57:92: 35:46:4a:e8:ed:ae:d8:ce:bd:1f:d1:50:a4:3e:6d: 25:bd:cf:c5:fb:06:65:8b:c6:80:bb:b0:6b:6b:97: e5:43:81:9a:9e:5a:9c:7a:ab:8c:8d:1d:e3:31:1a: b5:9e:9d:8c:e9:25:74:85:95:eb:36:03:a3:5e:06: c6:7c:c4:e9:7e:9a:05:60:99:23:2a:9c:82:78:93: f6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:41:D6:AF:10:2F:65:8C:33:F4:67:2F:7A:76:B0:3D:0B:57:9C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a521d914-604a-32f4-82a5-6f40ff6835a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ef:8b:fe:7c:c8:8d:9c:4b:47:55:37:e8:0a:3c:a0:67:49: b2:51:15:05:fa:51:1d:2e:53:44:7b:7a:f5:5f:9d:43:1e:2e: 7d:45:7b:07:97:e7:31:b0:3d:59:41:66:3b:4f:74:99:3d:28: b4:c9:12:59:02:3c:ac:93:96:9b:44:20:77:39:c4:95:b4:92: 92:c5:42:eb:ab:13:79:0d:a1:f0:3e:ee:d8:f6:85:be:1f:24: a9:67:d2:61:f1:af:d1:e0:01:5e:da:2f:f0:4f:2e:55:49:f0: a5:2e:7f:a9:50:5c:5b:62:52:ae:aa:cb:e9:8a:d7:82:bb:e9: 4d:80:d4:4f:61:dc:d1:c4:7d:9a:e6:c2:54:04:9c:ea:86:5b: 49:a4:8f:03:30:9a:fb:ce:d4:30:ff:30:20:0f:c5:9b:19:05: 5b:d1:6d:83:c1:6f:95:a7:2e:6f:bb:9d:3a:9b:72:bf:40:0a: f0:67:01:1a:f0:a6:f5:73:f8:2c:a2:7c:0e:81:5b:ce:b8:bd: b4:3e:b0:eb:6f:38:53:5c:de:c6:79:35:d3:46:c3:6a:ab:68: 78:48:57:0c:94:18:3b:86:a2:30:47:c0:aa:3e:b3:68:0f:69: 25:f2:a8:4a:be:73:e6:4e:fb:08:b6:10:67:12:82:5f:e2:96: 9d:5f:a9:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96Uu7XK8pzetzyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjQ3NjY0NTMtMmQ0NS00YTgzLWFhNTMtODg4YjgyNWYyMTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAR/XMP5YdYJv6qpJHXbBjbQr1T8CIfCY39p cJ33OdA5FvXvWqa8IzBZFzVX6EnFQdH8IpoGMzwTPvaqE83y7Moryb2USl5dXxt3 LiWnpUC1f4pr3PhbUcnI04IaiHIvbBNJPFjQvsGimI4q5fNm1YL+Zc+HmWv8kus3 N+jpCu15pEsGc2SJxuUBfs2Wf6kpN9Y+dtGuS1D4vGd6jVtIC6OYhocGBYC2yryN izWVhaDfV5I1Rkro7a7Yzr0f0VCkPm0lvc/F+wZli8aAu7Bra5flQ4GanlqcequM jR3jMRq1np2M6SV0hZXrNgOjXgbGfMTpfpoFYJkjKpyCeJP2HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZB1q8QL2WMM/RnL3p2sD0LV5yFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTUyMWQ5MTQtNjA0YS0z MmY0LTgyYTUtNmY0MGZmNjgzNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjvi/58yI2cS0dVN+gKPKBnSbJRFQX6UR0uU0R7evVfnUMeLn1FeweX 5zGwPVlBZjtPdJk9KLTJElkCPKyTlptEIHc5xJW0kpLFQuurE3kNofA+7tj2hb4f JKln0mHxr9HgAV7aL/BPLlVJ8KUuf6lQXFtiUq6qy+mK14K76U2A1E9h3NHEfZrm wlQEnOqGW0mkjwMwmvvO1DD/MCAPxZsZBVvRbYPBb5WnLm+7nTqbcr9ACvBnARrw pvVz+CyifA6BW864vbQ+sOtvOFNc3sZ5NdNGw2qraHhIVwyUGDuGojBHwKo+s2gP aSXyqEq+c+ZO+wi2EGcSgl/ilp1fqSw= -----END CERTIFICATE-----Generated at Tue Sep 22 22:06:44 2026 by rpki-client