$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c09d78c0-f59c-33d1-82ca-cb8019a99464.roa File: c09d78c0-f59c-33d1-82ca-cb8019a99464.roa (raw, json) Hash identifier: imWz/kjRhPxyiniWURJE6I3RadJkFFncaCVgO9IfPgc= Subject key identifier: 99:94:E7:CD:D9:05:58:63:12:D5:B9:4D:F9:34:17:52:24:17:D3:D1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F68281F549454EA4C8593B5F8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c09d78c0-f59c-33d1-82ca-cb8019a99464.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 36626 IP address blocks: 192.33.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:1f:54:94:54:ea:4c:85:93:b5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=e845cbe9-7b4e-4d89-bb55-11f2a582be6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:ba:6c:32:35:2b:91:78:c5:b0:1c:23:10: c7:ae:cd:7f:f6:ec:6b:4d:74:74:41:7f:51:3f:01: 91:ed:35:1f:7c:d5:36:29:56:57:78:c5:06:20:73: ed:a2:8e:af:0d:1a:51:22:b1:61:4e:1d:cc:a9:d4: 51:b8:8e:87:47:d0:b5:e8:e4:19:ae:3e:57:a1:dd: da:d6:52:e2:be:cd:4e:0f:b4:00:e0:5d:0b:c2:35: 36:fb:5f:57:c5:d6:c0:e4:6d:2c:5c:1f:8f:6f:27: 83:c0:72:c4:9e:ad:5d:52:12:2e:f4:6f:27:9b:eb: 55:43:7e:0d:92:62:71:9f:96:71:28:c2:26:83:f8: 16:7d:5f:22:c2:c1:3a:f7:e7:b8:b7:02:48:63:17: f5:2f:97:9d:d6:52:80:f0:3c:c2:4a:b8:9c:d9:81: 7a:e0:68:fc:52:21:bc:1e:78:d2:ea:d2:44:64:97: a5:44:6f:c4:1e:84:20:73:2d:5e:ba:c3:3f:8f:f2: a9:b1:7a:71:ae:62:96:af:d1:86:42:f3:2e:13:31: 31:b0:07:54:88:43:84:b4:9c:d9:8f:3a:45:ac:14: 57:33:57:74:c5:e9:a4:70:92:72:29:5f:69:57:1c: 4f:42:39:0e:82:89:7f:ee:c7:f5:a5:91:1c:5d:c4: 52:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:94:E7:CD:D9:05:58:63:12:D5:B9:4D:F9:34:17:52:24:17:D3:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c09d78c0-f59c-33d1-82ca-cb8019a99464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:04:9d:8c:09:97:08:64:c5:eb:b8:38:45:f6:cd:58:fa:bb: 92:bf:69:4f:d7:b6:cc:a1:31:09:35:07:78:1c:ec:8b:fe:9a: cf:6d:2f:17:80:9a:62:0d:14:c1:00:6b:3a:e1:7f:9e:53:54: 15:92:a9:66:35:08:c3:e3:ab:20:fa:9f:bf:ab:1e:1d:ae:b2: c6:96:23:da:4a:97:bb:bc:14:13:23:b6:4c:dd:48:0c:af:b7: 04:45:b1:60:06:86:cd:cf:30:c2:5c:d3:34:d8:8c:09:28:3e: e8:3e:18:b8:1c:32:19:bd:71:66:5f:80:7c:1c:3f:1b:8b:36: 88:99:fe:7d:e7:ad:4d:ce:e9:4e:c8:73:71:1d:c8:1d:bc:b2: 46:71:b2:20:01:c3:5e:38:c7:bb:9c:04:a0:6b:20:18:81:38: 5c:dc:97:9e:6b:2f:c7:b5:ef:06:f6:a2:72:e3:07:6c:5d:8a: 8c:c9:91:9c:07:e0:0a:a8:d7:bd:b6:de:e7:95:b9:24:ac:5d: f5:a4:44:4c:98:b0:9e:d0:7c:70:58:bb:6d:5f:34:ac:16:2d: d8:70:a3:40:3c:3e:9f:f3:23:88:19:ba:77:28:16:59:ad:28: 3a:72:28:e4:1e:ff:bd:46:e1:13:f7:4a:a6:85:6d:c1:b5:ed: 62:32:67:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKB9UlFTqTIWTtfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk ZTg0NWNiZTktN2I0ZS00ZDg5LWJiNTUtMTFmMmE1ODJiZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/66bDI1K5F4xbAcIxDHrs1/9uxrTXR0QX9R PwGR7TUffNU2KVZXeMUGIHPtoo6vDRpRIrFhTh3MqdRRuI6HR9C16OQZrj5Xod3a 1lLivs1OD7QA4F0LwjU2+19XxdbA5G0sXB+PbyeDwHLEnq1dUhIu9G8nm+tVQ34N kmJxn5ZxKMImg/gWfV8iwsE69+e4twJIYxf1L5ed1lKA8DzCSric2YF64Gj8UiG8 HnjS6tJEZJelRG/EHoQgcy1eusM/j/KpsXpxrmKWr9GGQvMuEzExsAdUiEOEtJzZ jzpFrBRXM1d0xemkcJJyKV9pVxxPQjkOgol/7sf1pZEcXcRS8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmU583ZBVhjEtW5Tfk0F1IkF9PRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzA5ZDc4YzAtZjU5Yy0z M2QxLTgyY2EtY2I4MDE5YTk5NDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAEnYwJlwhkxeu4OEX2zVj6u5K/aU/XtsyhMQk1B3gc7Iv+ms9tLxeA mmINFMEAazrhf55TVBWSqWY1CMPjqyD6n7+rHh2ussaWI9pKl7u8FBMjtkzdSAyv twRFsWAGhs3PMMJc0zTYjAkoPug+GLgcMhm9cWZfgHwcPxuLNoiZ/n3nrU3O6U7I c3EdyB28skZxsiABw144x7ucBKBrIBiBOFzcl55rL8e17wb2onLjB2xdiozJkZwH 4Aqo17223ueVuSSsXfWkREyYsJ7QfHBYu21fNKwWLdhwo0A8Pp/zI4gZuncoFlmt KDpyKOQe/71G4RP3SqaFbcG17WIyZxQ= -----END CERTIFICATE-----Generated at Thu Oct 8 15:39:57 2026 by rpki-client