$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/01856ecf-ae7a-3879-852a-5cefde4c79ff.roa File: 01856ecf-ae7a-3879-852a-5cefde4c79ff.roa (raw, json) Hash identifier: HL60jNwux9FYYMzyc6BqHFAdbu1yzlYtJ+wqOBoMHuI= Subject key identifier: E3:E0:D6:ED:DF:F0:D9:CB:04:76:FE:06:61:32:EA:69:EF:91:60:1B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE42340B603D29EE87BFEBDFD Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/01856ecf-ae7a-3879-852a-5cefde4c79ff.roa Signing time: Wed 19 Aug 2026 18:03:51 +0000 ROA not before: Wed 19 Aug 2026 18:03:51 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 12044 IP address blocks: 204.245.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:40:b6:03:d2:9e:e8:7b:fe:bd:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:51 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=dd0f4a3b-88f5-4440-b572-ca59cb1d24ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:86:33:c8:d8:96:29:de:80:75:3a:15:4f:89: f1:06:af:42:ae:59:d4:a3:c7:5b:d6:ef:ca:cb:48: 29:62:af:39:ba:26:18:c5:73:4e:39:88:af:37:46: a1:42:13:e1:19:e5:04:5c:e8:d2:db:6d:5a:e8:37: 6e:94:c1:c1:05:7e:cb:81:c1:ac:19:c5:7a:bb:9f: bb:ae:3c:ab:ee:27:be:d6:2a:76:2f:0b:1b:8d:73: 92:ec:09:ae:79:96:cc:2a:f5:46:c3:98:e3:93:db: d7:38:14:05:5b:55:20:cd:99:53:cd:46:d0:ba:1c: d1:7c:d1:de:6e:69:d8:cc:6a:89:3a:08:cf:c4:71: 55:41:2c:ed:9a:00:7d:7b:8d:a5:13:d3:af:3d:51: 34:4f:91:74:5a:38:2b:af:cb:dd:fe:73:27:6a:36: b1:6c:a7:ca:8a:ff:16:db:d7:0d:2e:d0:a7:44:64: 20:b6:1e:40:61:04:99:e1:16:8a:b1:92:8a:c1:e3: 6f:dd:58:9f:f0:0b:0d:19:4f:e7:39:6f:1f:ac:f3: 07:1e:48:c6:99:0d:5c:78:ce:bf:a4:ca:60:f4:29: d7:5d:db:ca:1c:f9:c5:89:ac:8a:5f:81:1e:6e:f4: 88:71:25:f4:53:5e:6e:e9:09:08:03:a1:e0:ce:73: 0b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E0:D6:ED:DF:F0:D9:CB:04:76:FE:06:61:32:EA:69:EF:91:60:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/01856ecf-ae7a-3879-852a-5cefde4c79ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.245.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:60:5f:a2:21:cf:66:77:a6:49:df:09:98:b5:ee:30:73:50: aa:20:58:09:2b:fb:c5:7f:e0:00:ba:54:19:af:cc:f5:ad:6d: 32:05:3f:7f:7d:92:af:24:bb:42:ec:cd:fb:58:5c:c7:60:f1: 43:5d:61:77:d7:3b:91:a9:ba:2b:5c:28:50:05:fb:68:21:fe: a4:cb:31:d4:4f:93:93:13:84:71:d9:ae:b6:c6:7a:ec:94:cb: 3e:79:2a:8e:26:71:4f:d1:cc:77:ff:e2:99:14:22:30:25:cc: 79:5b:1e:ec:a8:d7:07:8f:b4:6b:0a:c7:77:b2:79:d3:99:a5: 9a:42:59:b9:6f:63:dc:f9:82:44:f0:9c:33:77:b3:4d:b2:fa: d4:3f:a8:84:3d:39:88:27:0b:f9:a9:9e:a5:80:8d:47:45:92: 0d:9f:91:fa:e6:05:d2:f4:2a:02:19:b2:88:ce:1e:92:22:2e: b7:eb:c7:05:23:9c:85:47:b8:d4:01:69:55:bd:a4:b0:b9:19: 6f:12:00:36:da:f8:ff:0d:df:4c:d8:44:24:7b:f8:d7:4d:4c: 3f:69:07:ec:36:74:0f:9d:60:67:45:1f:e9:72:c1:ac:10:15: ff:ed:18:e8:bf:1c:21:52:5c:10:4e:14:93:af:35:84:f9:a5: e2:04:0e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0C2A9Ke6Hv+vf0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ZGQwZjRhM2ItODhmNS00NDQwLWI1NzItY2E1OWNiMWQyNGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4YzyNiWKd6AdToVT4nxBq9CrlnUo8db1u/K y0gpYq85uiYYxXNOOYivN0ahQhPhGeUEXOjS221a6DdulMHBBX7LgcGsGcV6u5+7 rjyr7ie+1ip2LwsbjXOS7AmueZbMKvVGw5jjk9vXOBQFW1UgzZlTzUbQuhzRfNHe bmnYzGqJOgjPxHFVQSztmgB9e42lE9OvPVE0T5F0Wjgrr8vd/nMnajaxbKfKiv8W 29cNLtCnRGQgth5AYQSZ4RaKsZKKweNv3Vif8AsNGU/nOW8frPMHHkjGmQ1ceM6/ pMpg9CnXXdvKHPnFiayKX4EebvSIcSX0U15u6QkIA6HgznML/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPg1u3f8NnLBHb+BmEy6mnvkWAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDE4NTZlY2YtYWU3YS0z ODc5LTg1MmEtNWNlZmRlNGM3OWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzPX/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMVgX6Ihz2Z3pknfCZi17jBzUKogWAkr+8V/4AC6VBmvzPWtbTIFP399 kq8ku0LszftYXMdg8UNdYXfXO5GpuitcKFAF+2gh/qTLMdRPk5MThHHZrrbGeuyU yz55Ko4mcU/RzHf/4pkUIjAlzHlbHuyo1wePtGsKx3eyedOZpZpCWblvY9z5gkTw nDN3s02y+tQ/qIQ9OYgnC/mpnqWAjUdFkg2fkfrmBdL0KgIZsojOHpIiLrfrxwUj nIVHuNQBaVW9pLC5GW8SADba+P8N30zYRCR7+NdNTD9pB+w2dA+dYGdFH+lywawQ Ff/tGOi/HCFSXBBOFJOvNYT5peIEDgE= -----END CERTIFICATE-----Generated at Thu Sep 17 15:13:55 2026 by rpki-client