$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0d10bd09-f057-39b7-bbdc-5e26676ff449.roa File: 0d10bd09-f057-39b7-bbdc-5e26676ff449.roa (raw, json) Hash identifier: zgQ5Y4+VZeawkTZ+iZ+SNU/HGZX5AGeFGiE0Qcqs5/A= Subject key identifier: E5:24:7F:B8:96:8A:E0:F5:A4:32:65:8C:3E:5D:5C:BD:86:68:82:E9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACC8273826F8E3C94F6F00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0d10bd09-f057-39b7-bbdc-5e26676ff449.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 3949 IP address blocks: 204.2.42.16/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c8:27:38:26:f8:e3:c9:4f:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=450a6de0-bd48-4f34-b398-aba2b4e9b05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:b9:3e:21:08:f4:9e:08:7b:e3:5e:b4:18: 04:8c:e4:71:55:c4:0e:66:d9:54:f3:b2:89:5d:4c: ca:93:cd:e6:f3:33:80:50:62:fc:f6:b3:98:48:7d: 1b:a1:ee:99:b1:58:91:b5:72:d3:3c:e9:fe:64:66: 91:2b:f4:34:ee:f3:67:1a:61:d4:5a:a5:98:0a:e0: ec:e4:b6:47:61:d2:74:37:ca:72:b3:67:6c:ea:9c: 8c:f9:b6:1b:32:49:48:5b:02:a3:84:b5:74:6c:8a: 4f:b4:4b:aa:09:23:3e:a2:2e:ec:62:d7:6c:91:52: ff:40:1f:38:e4:61:d4:e8:95:3f:66:4d:f8:31:63: e5:8b:c4:5c:6e:31:a7:37:c8:d6:4b:92:79:29:b7: 20:ef:7e:c2:d9:9d:7d:86:f1:d3:21:2b:83:c8:3a: 9f:7c:0d:4a:78:9c:a2:ed:fa:2e:dd:00:a6:7f:79: 09:0c:ee:c0:82:9b:c1:61:f0:d2:e1:9c:14:5d:31: 0f:ff:6e:c7:83:60:0a:b8:1b:c2:a8:f3:30:01:3e: 23:24:2e:01:98:e4:15:db:49:9e:57:08:1c:11:59: d8:4a:ef:22:97:92:0d:f7:3c:c8:77:77:8b:bf:91: e2:da:c3:c9:34:fc:ab:b4:ff:4e:79:91:44:52:db: 0a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:24:7F:B8:96:8A:E0:F5:A4:32:65:8C:3E:5D:5C:BD:86:68:82:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0d10bd09-f057-39b7-bbdc-5e26676ff449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.42.16/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:7c:64:dc:80:01:25:19:44:b0:18:7f:c3:8e:3a:5f:36:da: 5d:c7:d2:f2:7e:96:70:d2:ee:25:13:cb:ab:8c:38:29:31:45: 79:b7:b0:a6:24:bf:cc:95:df:7e:17:ca:80:ac:13:15:86:28: fc:cd:59:a5:66:7d:87:94:f8:8b:49:65:ae:bb:6d:35:7c:52: 77:82:19:15:30:12:73:e1:3c:17:23:eb:47:04:3b:87:39:c6: 02:ae:59:16:00:2a:81:a1:a2:15:42:28:77:88:6c:5c:4b:ff: 05:1f:3f:f5:52:65:50:4f:f4:2e:56:45:0d:54:44:63:ab:9d: 6f:6c:0f:37:f0:9c:ed:1c:88:69:e0:c6:e7:0a:d9:43:4e:0d: 35:69:c5:25:33:91:70:ab:dd:bc:b3:0a:06:b7:53:5a:83:9a: 04:88:03:0f:c1:0b:8d:7e:7c:17:0b:3b:81:dc:cb:9b:47:e9: 64:37:56:50:b7:81:c6:41:6b:bc:6e:3a:bf:4b:e8:35:2d:36: 76:cf:bd:ac:79:22:a3:ea:55:39:f7:ce:43:69:de:df:e3:d6: 8c:2c:1b:55:21:6d:7d:81:74:73:6c:92:37:6b:42:77:b3:fb: 8a:43:76:18:23:0f:bc:b3:b2:36:82:3e:ff:3e:10:2b:2c:fb: f1:b8:d1:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE78rMgnOCb448lPbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NDUwYTZkZTAtYmQ0OC00ZjM0LWIzOTgtYWJhMmI0ZTliMDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6G5PiEI9J4Ie+NetBgEjORxVcQOZtlU87KJ XUzKk83m8zOAUGL89rOYSH0boe6ZsViRtXLTPOn+ZGaRK/Q07vNnGmHUWqWYCuDs 5LZHYdJ0N8pys2ds6pyM+bYbMklIWwKjhLV0bIpPtEuqCSM+oi7sYtdskVL/QB84 5GHU6JU/Zk34MWPli8RcbjGnN8jWS5J5Kbcg737C2Z19hvHTISuDyDqffA1KeJyi 7fou3QCmf3kJDO7AgpvBYfDS4ZwUXTEP/27Hg2AKuBvCqPMwAT4jJC4BmOQV20me VwgcEVnYSu8il5IN9zzId3eLv5Hi2sPJNPyrtP9OeZFEUtsKyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOUkf7iWiuD1pDJljD5dXL2GaILpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGQxMGJkMDktZjA1Ny0z OWI3LWJiZGMtNWUyNjY3NmZmNDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAIqEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxfGTcgAElGUSwGH/DjjpfNtpdx9LyfpZw0u4lE8urjDgpMUV5t7Cm JL/Mld9+F8qArBMVhij8zVmlZn2HlPiLSWWuu201fFJ3ghkVMBJz4TwXI+tHBDuH OcYCrlkWACqBoaIVQih3iGxcS/8FHz/1UmVQT/QuVkUNVERjq51vbA838JztHIhp 4MbnCtlDTg01acUlM5Fwq928swoGt1Nag5oEiAMPwQuNfnwXCzuB3MubR+lkN1ZQ t4HGQWu8bjq/S+g1LTZ2z72seSKj6lU5985Dad7f49aMLBtVIW19gXRzbJI3a0J3 s/uKQ3YYIw+8s7I2gj7/PhArLPvxuNG2 -----END CERTIFICATE-----Generated at Mon Sep 21 10:00:50 2026 by rpki-client