$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ca0129b-3659-32e7-8ff5-df4b02f1ce9a.roa File: 0ca0129b-3659-32e7-8ff5-df4b02f1ce9a.roa (raw, json) Hash identifier: OlY/Pl3XkFo20yW/x5lvQtXfvOi55eXt48SIxH1fnyM= Subject key identifier: 89:00:00:A4:7F:31:A2:5D:63:E8:DD:F2:35:61:8D:D7:A1:DF:D4:A2 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F698D883FA6C5A285B6F17480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ca0129b-3659-32e7-8ff5-df4b02f1ce9a.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 32787 IP address blocks: 204.141.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:88:3f:a6:c5:a2:85:b6:f1:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=3464ade1-b55a-4f0a-9ede-f02e3df99921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:5e:e5:3e:44:58:8a:68:c4:93:ad:13:64: 7b:de:67:52:e9:bd:94:ce:d1:8d:20:8a:02:bf:84: dc:7a:cc:a9:3f:1c:aa:47:f5:ac:7e:3c:18:6d:83: 0b:24:08:93:2a:9d:0a:ba:b1:de:e1:f7:10:0b:a7: a9:0e:af:93:97:a2:58:4e:08:3e:bc:b9:63:2e:0d: 52:92:cf:71:a1:38:44:e5:a4:59:ef:77:24:1d:c8: 7f:75:b7:ab:3e:50:2d:60:27:cb:c0:c5:9d:89:16: 05:c5:01:2f:91:a7:fa:88:32:09:f7:56:33:eb:2b: 52:73:b8:a4:21:8f:93:6e:67:85:6f:0b:36:1d:a2: be:d9:16:37:df:2f:c2:eb:8c:c8:31:28:5b:95:38: 88:ac:a6:f4:52:ac:f3:e5:8e:96:8e:c6:70:ec:56: 5a:48:7b:68:84:8b:19:21:c9:f8:37:19:8a:96:6d: fb:4b:98:66:66:2d:56:47:df:40:cd:28:2e:ac:b4: 82:af:99:9b:95:d5:5e:49:56:bf:1c:5e:54:57:3e: 67:aa:c9:eb:5b:8a:ff:fd:93:96:48:88:4e:3e:c6: 46:49:c0:2d:15:72:47:26:67:4a:50:1f:c8:5c:40: d7:c1:7a:c4:d4:ae:3f:43:20:6e:db:db:a9:a3:60: 92:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:00:00:A4:7F:31:A2:5D:63:E8:DD:F2:35:61:8D:D7:A1:DF:D4:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ca0129b-3659-32e7-8ff5-df4b02f1ce9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:66:ca:29:2e:31:d7:a0:a1:8e:4c:e2:fe:15:08:0a:d0:55: 98:ea:bf:3d:d0:13:db:f3:b5:07:82:3e:87:32:18:e0:d0:7a: df:6e:c6:01:2a:12:da:e2:4c:0d:c1:53:4d:1c:d1:0b:4e:ef: fc:0c:a6:ae:4d:09:20:24:be:e8:6a:01:b6:47:d2:4c:ce:ec: ac:99:db:7a:22:dd:3e:a5:8b:95:3d:08:b0:05:08:f9:54:2d: 1e:91:9f:71:79:f5:88:6b:11:4e:20:6a:d2:2e:78:b3:c4:71: ac:78:08:a9:28:a2:a5:69:f9:87:af:8d:88:68:42:20:e6:32: 72:c6:09:25:e6:a2:90:b4:ce:9b:ec:63:ae:12:24:d5:ac:7a: e2:be:9d:96:96:2d:58:41:66:68:66:9d:2a:9e:13:15:c5:52: b1:eb:b1:2d:04:40:75:7a:cf:2e:64:0a:03:53:7f:de:3e:8f: da:07:c8:68:e1:96:71:02:1c:79:89:c6:de:7f:8d:8b:e5:06: b7:20:22:bb:a1:51:d7:9a:04:dc:fc:90:46:fb:f3:ce:70:9d: 77:e8:1b:62:0e:40:42:9f:0e:1d:8c:1b:32:03:d1:9d:5a:e1: c7:e8:85:c6:18:96:75:af:a6:e2:8b:1e:8c:8f:d1:c5:7e:63: 89:5b:84:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYg/psWihbbxdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk MzQ2NGFkZTEtYjU1YS00ZjBhLTllZGUtZjAyZTNkZjk5OTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCFe5T5EWIpoxJOtE2R73mdS6b2UztGNIIoC v4TcesypPxyqR/WsfjwYbYMLJAiTKp0KurHe4fcQC6epDq+Tl6JYTgg+vLljLg1S ks9xoThE5aRZ73ckHch/dberPlAtYCfLwMWdiRYFxQEvkaf6iDIJ91Yz6ytSc7ik IY+TbmeFbws2HaK+2RY33y/C64zIMShblTiIrKb0Uqzz5Y6WjsZw7FZaSHtohIsZ Icn4NxmKlm37S5hmZi1WR99AzSgurLSCr5mbldVeSVa/HF5UVz5nqsnrW4r//ZOW SIhOPsZGScAtFXJHJmdKUB/IXEDXwXrE1K4/QyBu29upo2CSCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkAAKR/MaJdY+jd8jVhjdeh39SiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGNhMDEyOWItMzY1OS0z MmU3LThmZjUtZGY0YjAyZjFjZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzI2sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlmyikuMdegoY5M4v4VCArQVZjqvz3QE9vztQeCPocyGODQet9uxgEq EtriTA3BU00c0QtO7/wMpq5NCSAkvuhqAbZH0kzO7KyZ23oi3T6li5U9CLAFCPlU LR6Rn3F59YhrEU4gatIueLPEcax4CKkooqVp+YevjYhoQiDmMnLGCSXmopC0zpvs Y64SJNWseuK+nZaWLVhBZmhmnSqeExXFUrHrsS0EQHV6zy5kCgNTf94+j9oHyGjh lnECHHmJxt5/jYvlBrcgIruhUdeaBNz8kEb7885wnXfoG2IOQEKfDh2MGzID0Z1a 4cfohcYYlnWvpuKLHoyP0cV+Y4lbhC8= -----END CERTIFICATE-----Generated at Sat Oct 24 10:23:11 2026 by rpki-client