$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0043610a-d1b3-3eb4-a338-4fb3c470875b.roa File: 0043610a-d1b3-3eb4-a338-4fb3c470875b.roa (raw, json) Hash identifier: CzObWOmQNZlq1cggKE4gRA6ROCd8ARIpouJVDxc4w9A= Subject key identifier: 8A:0F:41:EC:66:9D:33:BE:E0:38:66:16:62:4F:A8:CA:04:CA:B1:4A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DE2B5F9696363B1AF7E83B820 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0043610a-d1b3-3eb4-a338-4fb3c470875b.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 398465 IP address blocks: 198.170.0.0/17 maxlen: 24 198.171.0.0/16 maxlen: 24 198.172.0.0/18 maxlen: 24 198.173.64.0/18 maxlen: 24 199.103.192.0/18 maxlen: 24 199.236.0.0/16 maxlen: 24 199.237.0.0/18 maxlen: 24 199.237.128.0/17 maxlen: 24 199.239.192.0/18 maxlen: 24 206.50.64.0/18 maxlen: 24 206.184.64.0/18 maxlen: 24 206.184.128.0/17 maxlen: 24 206.239.64.0/18 maxlen: 24 206.239.128.0/17 maxlen: 24 207.20.0.0/18 maxlen: 24 207.20.128.0/17 maxlen: 24 207.137.128.0/17 maxlen: 24 209.39.128.0/17 maxlen: 24 209.57.128.0/17 maxlen: 24 209.70.0.0/17 maxlen: 24 209.70.128.0/18 maxlen: 24 216.42.0.0/17 maxlen: 24 216.44.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:f9:69:63:63:b1:af:7e:83:b8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=fc5e464b-e5b1-41d9-9c3c-f1a4f1167136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1b:ec:b5:b9:60:a9:ca:e9:11:3e:7f:07:3b: 9a:83:d5:29:df:88:44:be:2e:8b:30:51:81:af:e5: 6a:8e:2d:b9:85:88:d1:6c:27:42:59:60:fa:65:f1: c7:7b:19:3e:03:4b:c5:fb:ce:27:4b:1c:fc:c7:f9: 26:52:73:e7:07:3b:1b:ab:fa:72:e9:7e:fa:78:5d: ed:9f:54:57:87:8e:be:52:be:77:c3:06:16:eb:04: 25:43:07:58:cb:be:48:bf:73:02:73:1a:99:78:4e: 60:ed:c3:74:4b:68:10:14:13:31:c3:d9:02:2e:42: c0:e4:15:96:ab:50:62:bb:36:cd:a6:6f:c4:4f:06: 87:85:0c:f0:7a:17:62:75:8f:ff:88:6d:d4:a8:68: 58:12:86:97:05:6d:2e:01:f9:20:7d:65:f8:f7:15: bc:b1:a6:0e:54:fc:c3:26:8b:8d:98:95:70:09:cc: de:41:53:06:0b:f3:cf:e3:10:21:f7:0e:be:d4:4f: ea:26:e6:e5:ec:2a:03:c3:6b:44:e2:3e:b2:47:84: 35:1f:df:c9:fa:48:1e:bf:38:44:75:31:32:ed:15: 77:8e:c0:28:54:d7:91:ab:19:82:1a:93:32:23:f1: 8e:da:ea:4e:f5:f9:d6:04:31:24:95:69:49:24:77: aa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0F:41:EC:66:9D:33:BE:E0:38:66:16:62:4F:A8:CA:04:CA:B1:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0043610a-d1b3-3eb4-a338-4fb3c470875b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.170.0.0/17 198.171.0.0-198.172.63.255 198.173.64.0/18 199.103.192.0/18 199.236.0.0-199.237.63.255 199.237.128.0/17 199.239.192.0/18 206.50.64.0/18 206.184.64.0-206.184.255.255 206.239.64.0-206.239.255.255 207.20.0.0/18 207.20.128.0/17 207.137.128.0/17 209.39.128.0/17 209.57.128.0/17 209.70.0.0-209.70.191.255 216.42.0.0/17 216.44.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:9b:a9:a9:48:20:be:06:05:17:9d:aa:71:02:22:d8:e9:af: f4:eb:65:0a:d0:fa:28:d5:eb:46:ec:6e:e9:87:b1:86:f1:c3: cb:42:63:e1:e4:49:fa:25:c7:31:4b:d9:cf:a1:e7:31:d2:4b: 4b:6c:f2:84:87:41:83:71:54:b7:92:1f:71:2b:cd:cc:c0:f7: d8:e6:d5:f1:ad:55:fc:9a:64:1b:7e:8d:0b:c6:01:50:77:25: 81:cc:87:60:22:4d:84:d6:f6:04:d7:d5:db:9d:19:dd:7c:10: 04:df:7c:ab:f1:ae:3a:19:91:a2:7a:ac:cf:1a:a6:e9:e2:b2: 9b:9c:0b:f8:93:84:d0:b1:5c:8f:9d:f3:ad:bd:52:fe:cc:c0: a0:00:ce:9c:1c:c3:f8:6f:bf:3e:f6:05:02:27:9a:30:39:91: 7a:6f:f3:18:df:97:f1:4e:f0:2b:b4:3f:94:02:ec:9a:da:96: 09:6e:cd:cb:29:c5:00:c5:ec:78:0e:d5:73:fd:f3:60:38:0e: a0:5d:d2:22:1b:6a:3b:65:4f:d7:5c:ec:d2:7d:12:87:20:51: b0:ce:54:5f:2d:dc:62:09:59:8c:83:81:bc:a5:60:fb:a1:8d: 88:ca:4d:7d:54:cd:b3:da:3b:ee:2c:75:f3:6e:4f:d2:aa:96: c6:c2:23:be -----BEGIN CERTIFICATE----- MIIG0TCCBbmgAwIBAgIUAQ0Mn0MoWE3itflpY2Oxr36DuCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk ZmM1ZTQ2NGItZTViMS00MWQ5LTljM2MtZjFhNGYxMTY3MTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBvstblgqcrpET5/Bzuag9Up34hEvi6LMFGB r+Vqji25hYjRbCdCWWD6ZfHHexk+A0vF+84nSxz8x/kmUnPnBzsbq/py6X76eF3t n1RXh46+Ur53wwYW6wQlQwdYy75Iv3MCcxqZeE5g7cN0S2gQFBMxw9kCLkLA5BWW q1BiuzbNpm/ETwaHhQzwehdidY//iG3UqGhYEoaXBW0uAfkgfWX49xW8saYOVPzD JouNmJVwCczeQVMGC/PP4xAh9w6+1E/qJubl7CoDw2tE4j6yR4Q1H9/J+kgevzhE dTEy7RV3jsAoVNeRqxmCGpMyI/GO2upO9fnWBDEklWlJJHeq8QIDAQABo4ID4zCC A98wHQYDVR0OBBYEFIoPQexmnTO+4DhmFmJPqMoEyrFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDA0MzYxMGEtZDFiMy0z ZWI0LWEzMzgtNGZiM2M0NzA4NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMIGsBggrBgEFBQcBBwEB/wSBnDCBmTCBlgQCAAEwgY8DBAfG qgAwCwMDAMarAwQGxqwAAwQGxq1AAwQGx2fAMAsDAwLH7AMEBsftAAMEB8ftgAME BsfvwAMEBs4yQDALAwQGzrhAAwMAzrgwCwMEBs7vQAMDBM7gAwQGzxQAAwQHzxSA AwQHz4mAAwQH0SeAAwQH0TmAMAsDAwHRRgMEBtFGgAMEB9gqAAMEB9gsgDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQB+m6mpSCC+BgUXnapxAiLY6a/062UK0Poo1etG7G7ph7GG8cPLQmPh5En6 JccxS9nPoecx0ktLbPKEh0GDcVS3kh9xK83MwPfY5tXxrVX8mmQbfo0LxgFQdyWB zIdgIk2E1vYE19XbnRndfBAE33yr8a46GZGieqzPGqbp4rKbnAv4k4TQsVyPnfOt vVL+zMCgAM6cHMP4b78+9gUCJ5owOZF6b/MY35fxTvArtD+UAuya2pYJbs3LKcUA xex4DtVz/fNgOA6gXdIiG2o7ZU/XXOzSfRKHIFGwzlRfLdxiCVmMg4G8pWD7oY2I yk19VM2z2jvuLHXzbk/SqpbGwiO+ -----END CERTIFICATE-----Generated at Tue May 26 04:02:09 2026 by rpki-client