$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c78638de-7ff7-3326-9fc4-3bf0db1e3925.roa File: c78638de-7ff7-3326-9fc4-3bf0db1e3925.roa (raw, json) Hash identifier: 8ACbyfxgEalh3k+olCHF+v5h2drC7aMHo2wN3hiRqpA= Subject key identifier: F9:00:33:3B:DF:B6:9E:0F:83:FD:DC:26:E8:E8:11:66:BB:35:7F:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6828253F3C137D7DD3408F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c78638de-7ff7-3326-9fc4-3bf0db1e3925.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 396707 IP address blocks: 192.33.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:25:3f:3c:13:7d:7d:d3:40:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=32b4e3c1-a12e-4d38-91cb-9ad3180a5c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:8a:fa:c8:62:65:80:e1:56:e0:64:3c:87: 81:c9:98:eb:6a:63:5e:b9:3a:4d:4a:50:b1:f9:2e: 48:6e:d7:ad:9c:4b:93:d0:89:d3:d1:aa:c5:b9:d1: 34:02:f9:84:d9:03:6c:a1:ce:cd:55:2f:25:5c:ce: e0:35:07:a4:94:f6:1c:19:04:d9:5c:80:f8:94:3f: 5b:83:7f:55:db:e4:c8:be:c8:dc:31:8d:f0:88:31: 7b:ad:cd:f9:e9:13:d3:cf:82:91:2d:46:05:42:3a: b5:63:d4:2a:da:b1:36:b2:11:54:dc:6a:4f:5a:d3: 0f:2c:40:12:4c:f2:df:3a:4f:83:f5:e5:19:c0:71: b3:ba:72:42:ab:14:3c:f8:8a:1d:ab:96:61:87:5b: 13:e0:67:28:0b:2a:d5:ee:88:f1:85:93:f0:1d:65: ef:e9:96:40:54:ef:87:a2:8b:98:3e:f5:aa:ea:5e: 44:6d:34:a4:6f:14:42:2e:f4:1a:62:26:55:5e:52: 2d:48:d0:49:20:a1:d2:f9:57:79:d8:eb:5b:38:23: cf:bc:1e:0f:24:d4:71:53:44:6f:bc:97:e0:c9:74: 88:78:6a:6a:b3:c4:85:0b:4d:43:1f:63:13:ba:f2: 8c:56:65:b7:65:bc:86:bb:78:06:0a:9d:f1:10:42: d5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:00:33:3B:DF:B6:9E:0F:83:FD:DC:26:E8:E8:11:66:BB:35:7F:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c78638de-7ff7-3326-9fc4-3bf0db1e3925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.33.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8f:90:e9:e4:e6:b7:27:04:e5:35:7c:e4:9f:43:d4:af:66: df:1d:cf:d4:fa:c4:71:84:b2:93:a9:c8:7d:58:93:44:cb:e2: f5:20:83:b0:d3:9c:44:88:cb:9b:dd:87:d3:5f:d0:6e:26:0e: 93:b9:82:a7:29:a7:eb:d1:ae:d3:66:40:e6:d2:fb:5c:d7:8d: 49:37:67:17:ef:f8:ca:4a:e8:80:b9:28:12:37:7a:76:42:53: d5:73:3c:99:9c:a3:7e:5b:9b:b2:fa:83:61:b7:0a:dd:a8:5a: b9:8e:a2:60:95:57:4f:0c:d2:06:2e:f3:5a:1b:54:7c:12:58: 7b:a5:32:6f:57:79:c6:39:79:b5:39:08:2c:40:6e:7e:36:83: 87:9f:f2:09:6c:fa:93:fb:24:b0:f3:60:4e:fb:ec:cd:bd:f5: a6:31:b0:a4:49:52:9a:62:59:e3:ea:f6:30:4b:ef:41:6a:28: 6a:ec:12:6e:b0:1e:3b:a9:18:46:66:82:de:78:c8:24:fb:3b: b4:06:5b:7a:92:42:ed:fc:c2:6e:f6:f0:ea:52:5e:b7:2f:62: b6:97:3e:14:fd:e3:e0:cc:9f:18:f0:d9:63:50:71:ff:c0:1c: 67:43:fd:82:97:44:33:a9:d5:7d:bc:0a:c3:4b:31:47:70:47: 59:ba:4e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKCU/PBN9fdNAj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk MzJiNGUzYzEtYTEyZS00ZDM4LTkxY2ItOWFkMzE4MGE1YzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/SK+shiZYDhVuBkPIeByZjramNeuTpNSlCx +S5IbtetnEuT0InT0arFudE0AvmE2QNsoc7NVS8lXM7gNQeklPYcGQTZXID4lD9b g39V2+TIvsjcMY3wiDF7rc356RPTz4KRLUYFQjq1Y9Qq2rE2shFU3GpPWtMPLEAS TPLfOk+D9eUZwHGzunJCqxQ8+Iodq5Zhh1sT4GcoCyrV7ojxhZPwHWXv6ZZAVO+H oouYPvWq6l5EbTSkbxRCLvQaYiZVXlItSNBJIKHS+Vd52OtbOCPPvB4PJNRxU0Rv vJfgyXSIeGpqs8SFC01DH2MTuvKMVmW3ZbyGu3gGCp3xEELV3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkAMzvftp4Pg/3cJujoEWa7NX/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzc4NjM4ZGUtN2ZmNy0z MzI2LTlmYzQtM2JmMGRiMWUzOTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWPkOnk5rcnBOU1fOSfQ9SvZt8dz9T6xHGEspOpyH1Yk0TL4vUgg7DT nESIy5vdh9Nf0G4mDpO5gqcpp+vRrtNmQObS+1zXjUk3Zxfv+MpK6IC5KBI3enZC U9VzPJmco35bm7L6g2G3Ct2oWrmOomCVV08M0gYu81obVHwSWHulMm9XecY5ebU5 CCxAbn42g4ef8gls+pP7JLDzYE777M299aYxsKRJUppiWePq9jBL70FqKGrsEm6w HjupGEZmgt54yCT7O7QGW3qSQu38wm728OpSXrcvYraXPhT94+DMnxjw2WNQcf/A HGdD/YKXRDOp1X28CsNLMUdwR1m6TvQ= -----END CERTIFICATE-----Generated at Thu Oct 8 04:05:45 2026 by rpki-client