$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/07a265d9-ab76-3c6b-9e31-05397e3bd1a2.roa File: 07a265d9-ab76-3c6b-9e31-05397e3bd1a2.roa (raw, json) Hash identifier: y0dkijV1vCxKPhBRNjciHSMxAXp0eBOiPy1s6eSEbzU= Subject key identifier: 53:94:53:63:F0:0C:26:12:C1:0A:88:D3:9F:68:90:AD:4D:88:33:54 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F506D578012B5868E653B9400 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/07a265d9-ab76-3c6b-9e31-05397e3bd1a2.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20115 IP address blocks: 198.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:57:80:12:b5:86:8e:65:3b:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=4e238cd1-2cd0-49d8-9e66-0dcbd8e1ddd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f5:0c:7c:0b:1c:90:d0:b1:2d:c5:fa:9a:ac: 52:a2:d0:42:55:d9:8e:09:c1:30:7e:92:4f:87:58: 20:2a:0f:cc:ec:6b:d9:7e:c2:3a:ff:da:13:f6:53: bb:2e:ed:e7:6e:3e:de:94:8f:0f:9e:49:1a:0e:84: f2:82:3f:19:2e:46:08:88:65:d9:01:f2:28:5b:a9: a2:73:59:e2:64:0d:23:46:a8:2d:6f:80:3c:57:64: ac:db:c8:e0:85:bc:1e:f8:82:0a:7a:01:bc:b6:db: 12:55:38:a3:18:15:83:aa:3d:aa:ff:82:e8:e8:69: 0e:7d:46:d5:70:1c:7c:64:29:51:7f:cb:a9:25:d0: 23:6c:25:1b:fe:0a:6e:f3:c9:b4:f2:7f:94:64:cb: 7e:08:da:57:03:64:cb:6a:6a:57:13:df:b5:c9:47: 76:17:60:b5:ba:41:02:e3:7e:94:5d:14:18:b0:e1: 47:b5:7e:79:29:97:0e:4c:19:2b:b2:2b:59:36:aa: 2e:20:23:8b:8b:cc:e5:c0:03:92:86:9a:b5:12:f9: 56:b3:81:dc:5f:65:1a:6b:84:28:0e:c2:bf:c8:bf: 32:c5:74:5a:61:1b:5a:bc:85:bf:df:be:68:f2:b3: 00:e9:48:88:da:77:cb:0a:94:fa:1c:3d:35:5c:05: 05:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:94:53:63:F0:0C:26:12:C1:0A:88:D3:9F:68:90:AD:4D:88:33:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/07a265d9-ab76-3c6b-9e31-05397e3bd1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:2f:6c:84:0f:e8:bc:35:3d:d8:9b:22:58:17:9f:ca:f1:29: bc:af:56:3f:bf:19:8c:f6:c7:ba:82:76:2e:cd:79:df:4a:f4: d0:db:d2:92:0a:d2:a1:d1:1b:a3:e1:7e:02:ba:b1:2e:fa:1d: e1:dc:de:c8:80:6a:5e:7c:d8:39:38:8e:0d:24:49:02:99:d7: 78:32:55:c8:13:f2:c6:a4:74:88:81:cd:a5:7e:8c:46:2b:92: 35:ad:b9:4f:df:82:c0:64:e1:fb:aa:b4:20:b7:c6:cd:82:52: a9:c9:33:11:6d:b9:65:63:8a:b8:82:b4:ff:ff:4c:2e:1c:b2: 92:8e:31:f8:17:e3:54:09:f9:1d:34:c8:d0:96:02:c5:6e:cb: cf:73:53:e2:fa:ee:66:25:ec:3d:ec:d3:89:c5:36:cd:ed:9b: 8b:3e:52:de:26:20:0b:bf:03:03:87:39:5b:ab:8f:b0:6f:42: f1:9b:b1:da:e7:2d:f0:da:22:65:65:fa:56:29:0f:b4:60:cb: 60:06:42:2c:8a:ff:06:32:ce:98:89:34:54:37:ee:c8:6f:bd: e8:34:90:4a:43:61:6d:1e:ca:f6:f6:61:dd:02:16:1b:a5:ca: 74:d1:e3:70:eb:c8:9a:fa:bf:df:d9:ff:e7:95:59:04:88:92: 0c:d4:f5:b8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9QbVeAErWGjmU7lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NGUyMzhjZDEtMmNkMC00OWQ4LTllNjYtMGRjYmQ4ZTFkZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vUMfAsckNCxLcX6mqxSotBCVdmOCcEwfpJP h1ggKg/M7GvZfsI6/9oT9lO7Lu3nbj7elI8PnkkaDoTygj8ZLkYIiGXZAfIoW6mi c1niZA0jRqgtb4A8V2Ss28jghbwe+IIKegG8ttsSVTijGBWDqj2q/4Lo6GkOfUbV cBx8ZClRf8upJdAjbCUb/gpu88m08n+UZMt+CNpXA2TLampXE9+1yUd2F2C1ukEC 436UXRQYsOFHtX55KZcOTBkrsitZNqouICOLi8zlwAOShpq1EvlWs4HcX2Uaa4Qo DsK/yL8yxXRaYRtavIW/375o8rMA6UiI2nfLCpT6HD01XAUFcQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFOUU2PwDCYSwQqI059okK1NiDNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDdhMjY1ZDktYWI3Ni0z YzZiLTllMzEtMDUzOTdlM2JkMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATi9shA/ovDU92JsiWBefyvEpvK9WP78ZjPbHuoJ2Ls1530r00NvSkgrS odEbo+F+ArqxLvod4dzeyIBqXnzYOTiODSRJApnXeDJVyBPyxqR0iIHNpX6MRiuS Na25T9+CwGTh+6q0ILfGzYJSqckzEW25ZWOKuIK0//9MLhyyko4x+BfjVAn5HTTI 0JYCxW7Lz3NT4vruZiXsPezTicU2ze2biz5S3iYgC78DA4c5W6uPsG9C8Zux2uct 8NoiZWX6VikPtGDLYAZCLIr/BjLOmIk0VDfuyG+96DSQSkNhbR7K9vZh3QIWG6XK dNHjcOvImvq/39n/55VZBIiSDNT1uA== -----END CERTIFICATE-----Generated at Tue Oct 20 18:45:55 2026 by rpki-client