$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/02d83ce4-4efc-3155-bb8f-a01746ad9bed.roa File: 02d83ce4-4efc-3155-bb8f-a01746ad9bed.roa (raw, json) Hash identifier: BJiflZ5g8D+ETttRCzVWY0bLdEZ6TGimFwC0p5QCW6c= Subject key identifier: FE:54:91:A3:E6:C8:4C:8D:B1:D1:D1:5C:57:25:52:4A:84:E5:18:D5 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F9E987AC69312104B0DD218C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/02d83ce4-4efc-3155-bb8f-a01746ad9bed.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 3949 IP address blocks: 204.2.23.208/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:7a:c6:93:12:10:4b:0d:d2:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=9f8746d8-ec57-4e2f-b3b7-0e885ec0e50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:8a:7d:7d:63:93:c1:34:6f:a2:50:88:20: 1c:8f:8c:8b:91:e2:47:07:1f:f8:d7:54:b4:f9:b6: 48:97:03:3d:f6:94:96:26:3a:41:e9:05:86:d2:cc: 5c:07:37:b0:0c:ab:de:85:15:4f:32:e1:3c:1e:29: 81:a5:ff:00:76:d6:52:a9:f0:dd:e1:13:8e:75:83: 0d:a3:7c:aa:94:62:9f:bc:7c:f0:ea:cc:78:fc:d3: 6b:2e:f1:ad:98:35:c2:da:62:b5:12:55:36:b1:f8: d0:a3:47:64:67:c9:a0:7e:17:c2:69:79:32:01:4a: 7f:75:4b:83:ba:7c:10:7d:43:a5:00:25:e8:98:9f: 78:d6:7b:ea:50:c4:cb:f9:fc:be:68:23:ef:90:35: c3:60:4b:72:ed:a4:a6:e9:ec:6f:b1:47:e1:a3:79: 53:fd:d0:26:77:36:63:46:04:5d:e2:a2:1b:50:07: 73:35:6d:42:7c:c0:33:63:1f:62:da:a8:8e:69:d5: 2f:9d:9b:0f:d9:d4:e9:1a:86:6a:9d:12:7b:58:6c: 36:54:7f:d5:46:40:02:11:ec:b0:80:96:57:cd:97: dd:fa:3d:4f:71:33:0c:d1:4d:b3:81:82:47:29:e1: f6:ae:f8:cd:f8:4c:32:1e:a7:7c:4c:ea:92:d3:5f: 1d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:54:91:A3:E6:C8:4C:8D:B1:D1:D1:5C:57:25:52:4A:84:E5:18:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/02d83ce4-4efc-3155-bb8f-a01746ad9bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.23.208/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ae:2b:ec:85:3e:d4:47:bb:1f:e9:64:0b:04:49:44:2c:65: 0d:b9:1e:f1:b1:2c:2a:13:84:da:a3:6d:e9:ef:e7:39:05:15: fd:fe:21:62:2d:51:4b:17:f4:7d:13:9a:c3:fc:c6:1c:81:6b: d8:d7:9d:48:af:27:59:02:29:a9:2e:08:00:ca:61:dd:15:89: 04:f5:0d:48:bb:bb:85:e2:52:55:7a:90:04:05:0c:cd:e8:ef: 91:fb:63:b6:a6:5f:5d:6c:c2:f6:e6:fe:be:ab:5d:f5:e8:89: 3e:76:0e:60:da:65:25:73:5d:f0:c3:6f:06:00:52:b5:d1:b5: 43:07:34:60:3e:ff:61:c1:d8:0f:85:1a:79:ee:44:c2:d5:27: ea:a5:4a:2f:61:fc:b7:38:d8:71:d6:ba:c1:2b:96:65:ff:4a: 24:f7:b4:d0:20:dc:61:f7:46:99:fd:5b:a7:28:b4:cb:fc:b4: 37:53:1c:67:ad:7e:c3:47:7c:87:93:7b:57:ed:7e:a7:2d:b2: 0b:69:24:f2:2e:5f:c2:86:b4:bc:88:c4:35:d4:79:2d:9e:ae: e0:5a:64:8d:f7:e3:22:67:f6:e2:ac:26:5a:ae:f6:9f:3a:6a: b4:da:20:67:fb:eb:3e:09:fe:b9:f5:a2:77:d2:ce:46:8e:f6: 32:ba:3a:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+emHrGkxIQSw3SGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk OWY4NzQ2ZDgtZWM1Ny00ZTJmLWIzYjctMGU4ODVlYzBlNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor6KfX1jk8E0b6JQiCAcj4yLkeJHBx/411S0 +bZIlwM99pSWJjpB6QWG0sxcBzewDKvehRVPMuE8HimBpf8AdtZSqfDd4ROOdYMN o3yqlGKfvHzw6sx4/NNrLvGtmDXC2mK1ElU2sfjQo0dkZ8mgfhfCaXkyAUp/dUuD unwQfUOlACXomJ941nvqUMTL+fy+aCPvkDXDYEty7aSm6exvsUfho3lT/dAmdzZj RgRd4qIbUAdzNW1CfMAzYx9i2qiOadUvnZsP2dTpGoZqnRJ7WGw2VH/VRkACEeyw gJZXzZfd+j1PcTMM0U2zgYJHKeH2rvjN+EwyHqd8TOqS018dqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP5UkaPmyEyNsdHRXFclUkqE5RjVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDJkODNjZTQtNGVmYy0z MTU1LWJiOGYtYTAxNzQ2YWQ5YmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAIX0DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqrivshT7UR7sf6WQLBElELGUNuR7xsSwqE4Tao23p7+c5BRX9/iFi LVFLF/R9E5rD/MYcgWvY151IrydZAimpLggAymHdFYkE9Q1Iu7uF4lJVepAEBQzN 6O+R+2O2pl9dbML25v6+q1316Ik+dg5g2mUlc13ww28GAFK10bVDBzRgPv9hwdgP hRp57kTC1SfqpUovYfy3ONhx1rrBK5Zl/0ok97TQINxh90aZ/VunKLTL/LQ3Uxxn rX7DR3yHk3tX7X6nLbILaSTyLl/ChrS8iMQ11Hktnq7gWmSN9+MiZ/birCZarvaf Omq02iBn++s+Cf659aJ30s5GjvYyujqk -----END CERTIFICATE-----Generated at Sun Oct 25 21:24:16 2026 by rpki-client