$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2967498-f5ce-3274-9066-a17c8e03a782.roa File: c2967498-f5ce-3274-9066-a17c8e03a782.roa (raw, json) Hash identifier: 57SRYnKKHuqQ2ryA4e2J54XEsA2O/gbN16tGeO9HsL8= Subject key identifier: 42:7A:F1:F5:CE:D1:88:5A:D9:10:B0:7E:B3:23:9C:B6:FE:F6:EB:10 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ED431DB80D6ACF6DC88CD9B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2967498-f5ce-3274-9066-a17c8e03a782.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 21313 IP address blocks: 192.82.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:db:80:d6:ac:f6:dc:88:cd:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=22d0d017-ba88-447e-a67c-fb223d73ecc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e0:e8:8a:da:71:f4:08:69:44:6e:b8:9e:5f: 50:11:ee:d9:30:ac:d8:e0:70:b1:8d:06:32:1d:d3: 6e:e6:79:71:cc:aa:0e:29:81:83:46:8a:31:7e:70: 4a:d1:46:b2:f1:c3:e5:e1:cf:6d:5a:4f:56:c3:8d: 9c:14:90:46:b2:5f:fa:cd:6c:0c:97:ec:19:74:38: dd:9c:58:e2:e4:59:60:73:7b:a4:f0:1f:71:c7:58: 6f:8e:c2:ae:3a:6e:6e:65:3b:21:f9:38:0b:4c:0a: 21:47:28:af:a0:8e:aa:c1:fd:1f:07:5a:3c:59:fa: 88:cd:63:73:58:aa:17:7e:c8:c4:45:85:72:79:15: 96:48:d0:72:11:20:3e:86:d9:d8:ce:f2:81:4f:90: 42:19:ce:d3:b9:3c:2b:8a:3f:41:b3:17:fa:c8:40: cb:70:8f:a6:8e:60:f6:10:e3:61:4f:62:c1:ce:a6: 6b:5b:10:5c:c1:aa:a3:4e:cb:aa:94:f3:3e:f1:24: 84:b8:9b:3b:52:b9:70:aa:1f:7f:06:f9:03:f8:d0: 53:26:b9:99:74:fe:cb:c6:3f:ee:73:97:2c:e0:70: 92:ce:9e:9d:61:a2:c7:29:ae:66:a3:b8:88:10:3f: 9a:9d:66:56:08:4b:b9:e5:ec:33:e0:0d:ab:5f:1e: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7A:F1:F5:CE:D1:88:5A:D9:10:B0:7E:B3:23:9C:B6:FE:F6:EB:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2967498-f5ce-3274-9066-a17c8e03a782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:70:0a:8c:b2:10:42:d8:5b:a7:f1:11:67:3c:98:69:4f:27: a8:18:e3:e6:80:d9:7f:91:87:21:21:23:2c:91:8b:86:2e:3b: d4:65:1b:e5:20:52:07:80:50:49:a3:25:67:f0:cd:23:b7:cf: 9b:ee:e9:86:0d:72:36:0b:14:a8:5a:30:94:36:b6:83:84:4c: f5:1c:3a:c7:0f:1c:69:bd:fe:92:bb:1e:a8:9f:db:9f:49:4c: 17:b7:ed:29:de:d8:0d:61:93:43:30:82:d9:d2:f7:53:7e:bc: 8a:13:8d:be:dd:1f:25:42:0f:3d:0c:14:2e:db:01:e1:01:5b: 5e:bd:a5:b1:43:3a:ca:6f:b7:70:ae:4d:58:3f:81:11:a1:2e: b8:bc:60:e6:71:83:7c:29:e3:8b:ce:74:20:ca:2f:c6:84:70: de:8c:ee:34:39:94:bf:1e:75:8d:b6:05:bc:43:85:d9:3f:7d: 01:b8:7a:f1:d3:a8:18:32:cf:eb:a3:97:59:63:ea:26:d2:72: e5:a8:2e:6a:e9:90:15:51:7f:2b:3b:60:dc:50:b3:85:72:17: 57:30:9d:32:f3:38:0d:5e:7e:05:26:34:46:a5:39:a4:1d:a5: d8:85:89:8f:6c:df:0b:af:09:e0:ca:94:ba:9c:bd:5d:3f:04: 13:73:fa:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMduA1qz23IjNm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk MjJkMGQwMTctYmE4OC00NDdlLWE2N2MtZmIyMjNkNzNlY2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguDoitpx9AhpRG64nl9QEe7ZMKzY4HCxjQYy HdNu5nlxzKoOKYGDRooxfnBK0Uay8cPl4c9tWk9Ww42cFJBGsl/6zWwMl+wZdDjd nFji5Flgc3uk8B9xx1hvjsKuOm5uZTsh+TgLTAohRyivoI6qwf0fB1o8WfqIzWNz WKoXfsjERYVyeRWWSNByESA+htnYzvKBT5BCGc7TuTwrij9Bsxf6yEDLcI+mjmD2 EONhT2LBzqZrWxBcwaqjTsuqlPM+8SSEuJs7Urlwqh9/BvkD+NBTJrmZdP7Lxj/u c5cs4HCSzp6dYaLHKa5mo7iIED+anWZWCEu55ewz4A2rXx5C9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ68fXO0Yha2RCwfrMjnLb+9usQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzI5Njc0OTgtZjVjZS0z Mjc0LTkwNjYtYTE3YzhlMDNhNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtwCoyyEELYW6fxEWc8mGlPJ6gY4+aA2X+RhyEhIyyRi4YuO9RlG+Ug UgeAUEmjJWfwzSO3z5vu6YYNcjYLFKhaMJQ2toOETPUcOscPHGm9/pK7Hqif259J TBe37Sne2A1hk0MwgtnS91N+vIoTjb7dHyVCDz0MFC7bAeEBW169pbFDOspvt3Cu TVg/gRGhLri8YOZxg3wp44vOdCDKL8aEcN6M7jQ5lL8edY22BbxDhdk/fQG4evHT qBgyz+ujl1lj6ibScuWoLmrpkBVRfys7YNxQs4VyF1cwnTLzOA1efgUmNEalOaQd pdiFiY9s3wuvCeDKlLqcvV0/BBNz+mw= -----END CERTIFICATE-----Generated at Wed Aug 19 18:47:49 2026 by rpki-client