$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/674ced9e-945f-309a-b39c-b31a4a6f9078.roa File: 674ced9e-945f-309a-b39c-b31a4a6f9078.roa (raw, json) Hash identifier: usZ7moJwkxLOvsPbC1Q5jpFQlBi8ZS6KsbJ/KiCXFx4= Subject key identifier: BF:06:2D:AF:2F:79:A3:58:26:00:74:9D:EF:B0:E0:CA:5C:8F:06:1D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F68281DFD74795DE22C11BD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/674ced9e-945f-309a-b39c-b31a4a6f9078.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 396683 IP address blocks: 192.33.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:1d:fd:74:79:5d:e2:2c:11:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=3cec7049-3f2d-466d-80b7-975dcf3650e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:69:54:7e:dc:b5:56:78:05:19:a0:61:c3:9b: 8f:d8:09:3a:d2:a6:10:54:ff:aa:38:6e:ea:57:44: 7d:75:45:cc:df:12:3e:e8:fc:fd:88:c8:80:87:8c: 29:f7:86:52:39:38:c4:73:ec:e3:55:7e:eb:31:99: d3:e6:33:bc:19:f4:5a:65:d7:25:6a:af:9a:90:7a: f2:d3:c1:9b:3b:e8:8e:0c:83:2a:88:39:3e:c8:a8: 91:d8:9d:e7:d2:1c:7e:9e:fa:bf:7b:9d:2c:ec:c9: d5:44:e2:7d:2a:0c:70:aa:13:06:c6:8e:2d:59:f7: ff:32:10:19:1e:dc:df:77:bb:f2:ef:fd:4c:a9:ab: 45:83:1e:e3:16:00:f9:33:05:66:5b:67:6e:4d:e9: d3:1a:a1:2f:44:98:ec:4c:8e:c0:aa:cf:ba:d8:13: 46:07:d3:e6:2f:4b:30:dd:03:2a:1b:79:e9:bc:d2: 1e:94:23:10:03:62:4a:a2:7e:b0:12:93:40:98:9b: 2d:32:45:a7:53:2a:c6:9b:09:19:4e:2b:f2:5c:71: a6:0a:5e:c7:ec:34:38:55:01:f6:3e:01:46:3c:29: 68:bd:cf:c5:de:27:c1:ef:23:c8:78:bc:9b:13:3a: 30:30:a8:5d:3d:75:c4:bb:e4:8f:fc:b2:d1:33:b4: 39:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:06:2D:AF:2F:79:A3:58:26:00:74:9D:EF:B0:E0:CA:5C:8F:06:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/674ced9e-945f-309a-b39c-b31a4a6f9078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:e4:68:2f:7e:f0:d2:90:f0:59:11:54:f2:b2:4f:e2:ed:58: 5b:6e:60:64:a2:c4:ec:89:6e:5c:e0:38:cc:59:de:e1:86:e0: 65:50:3d:91:a6:07:ae:43:ce:23:b1:f9:ec:5c:d1:e8:05:f3: 83:52:a7:29:33:eb:6a:17:68:15:b3:6b:60:f8:b8:b3:56:b3: fb:6e:ef:e6:a2:ef:10:cd:31:6a:5f:2c:15:04:a1:22:ba:32: 65:92:19:f0:db:50:4a:13:ed:26:64:ae:eb:e2:11:8a:f4:62: 01:8c:5f:94:5e:17:4a:cc:a2:d0:77:26:79:70:a1:3a:1a:62: 92:1e:8b:ee:63:61:9b:66:bb:5c:c9:19:cd:e1:16:07:72:54: 0c:26:a5:cb:95:16:54:6a:3f:5c:0c:a9:0a:bf:1b:93:83:60: 8b:e8:34:16:2c:72:23:b4:40:8a:56:a8:c9:d3:05:d8:a4:43: 32:80:9d:7f:b1:ee:1b:9d:fc:fe:66:4c:eb:36:71:68:e6:75: 5a:77:27:bb:e3:50:d1:31:b5:2f:a9:e3:71:21:44:49:53:c1: da:d6:55:ab:0c:65:cb:56:47:6f:63:cf:3d:ad:c5:07:78:50: 83:2d:cc:ef:cd:f4:41:87:cd:54:8a:66:57:8a:0f:e3:52:22: bf:f5:79:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKB39dHld4iwRvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk M2NlYzcwNDktM2YyZC00NjZkLTgwYjctOTc1ZGNmMzY1MGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGlUfty1VngFGaBhw5uP2Ak60qYQVP+qOG7q V0R9dUXM3xI+6Pz9iMiAh4wp94ZSOTjEc+zjVX7rMZnT5jO8GfRaZdclaq+akHry 08GbO+iODIMqiDk+yKiR2J3n0hx+nvq/e50s7MnVROJ9KgxwqhMGxo4tWff/MhAZ Htzfd7vy7/1MqatFgx7jFgD5MwVmW2duTenTGqEvRJjsTI7Aqs+62BNGB9PmL0sw 3QMqG3npvNIelCMQA2JKon6wEpNAmJstMkWnUyrGmwkZTivyXHGmCl7H7DQ4VQH2 PgFGPClovc/F3ifB7yPIeLybEzowMKhdPXXEu+SP/LLRM7Q5CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8GLa8veaNYJgB0ne+w4MpcjwYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjc0Y2VkOWUtOTQ1Zi0z MDlhLWIzOWMtYjMxYTRhNmY5MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPkaC9+8NKQ8FkRVPKyT+LtWFtuYGSixOyJblzgOMxZ3uGG4GVQPZGm B65DziOx+exc0egF84NSpykz62oXaBWza2D4uLNWs/tu7+ai7xDNMWpfLBUEoSK6 MmWSGfDbUEoT7SZkruviEYr0YgGMX5ReF0rMotB3JnlwoToaYpIei+5jYZtmu1zJ Gc3hFgdyVAwmpcuVFlRqP1wMqQq/G5ODYIvoNBYsciO0QIpWqMnTBdikQzKAnX+x 7hud/P5mTOs2cWjmdVp3J7vjUNExtS+p43EhRElTwdrWVasMZctWR29jzz2txQd4 UIMtzO/N9EGHzVSKZleKD+NSIr/1eRs= -----END CERTIFICATE-----Generated at Fri Oct 9 20:19:44 2026 by rpki-client