$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0d6406e8-1380-3237-afaa-afbe164e7e4c.roa File: 0d6406e8-1380-3237-afaa-afbe164e7e4c.roa (raw, json) Hash identifier: 43hw6StWTgCZhuQPmrzUeNJkhvS4vG02LSIoe7fxCEA= Subject key identifier: 1B:D9:E3:0D:C8:F5:24:CF:E8:01:79:CC:D2:F8:46:FB:51:BE:9F:D6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232BE41B017D2B4FFDF0C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0d6406e8-1380-3237-afaa-afbe164e7e4c.roa Signing time: Wed 19 Aug 2026 18:03:41 +0000 ROA not before: Wed 19 Aug 2026 18:03:41 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 128.241.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:2b:e4:1b:01:7d:2b:4f:fd:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:41 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=d3c28685-21f0-40e8-ac50-5c78cfcd4b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:cb:9e:a7:78:9d:bd:4a:95:2a:33:cd:84: fc:b8:5b:5d:f3:4d:9c:d1:e6:5c:c0:de:a1:56:39: 8c:d6:4e:5e:e6:e8:a8:f5:1e:dd:34:f5:a1:e7:26: df:0d:9c:95:45:9f:f5:2f:15:db:a6:bc:14:aa:e2: a7:c0:97:5c:b6:70:00:19:40:f9:14:2e:bc:81:b2: 6b:99:c6:ce:41:c4:cb:a0:63:91:24:13:36:29:23: 05:d8:29:99:4b:30:a1:dd:90:df:67:c6:8d:a0:38: b7:da:8e:ad:e3:3f:76:a5:0b:51:56:4e:e8:c7:95: a5:e5:2d:82:c0:fe:70:25:38:4f:65:a7:5c:6f:78: 67:42:8b:b3:fb:02:51:dc:60:91:9f:37:ed:55:30: 28:44:b7:eb:11:3b:fd:9c:25:1f:67:30:1b:69:14: ad:03:d7:4c:b0:78:41:1a:da:ea:f1:85:0b:0b:1c: 78:64:01:47:52:54:b0:bb:7f:28:41:1e:55:4e:54: 90:c1:aa:41:a1:86:af:67:db:cf:24:c0:cc:f0:ad: 6b:74:81:1a:9d:16:33:a8:f4:c1:ce:8c:17:ae:0c: 1f:0b:f1:3b:0c:a3:4a:69:cb:0b:9d:23:b8:7f:3d: 2d:9f:1d:f0:a4:62:7e:51:55:20:6e:1d:6f:38:2a: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D9:E3:0D:C8:F5:24:CF:E8:01:79:CC:D2:F8:46:FB:51:BE:9F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0d6406e8-1380-3237-afaa-afbe164e7e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d4:3b:3f:5e:9a:00:10:3a:e2:dc:d8:39:cf:e8:16:c6:4e: ea:99:1f:fc:a9:2d:f3:e7:c1:52:2f:dc:51:f0:5a:c7:8c:34: e5:59:59:43:e5:08:e5:c9:87:b7:89:12:2f:f2:46:3f:14:c2: 3a:aa:f2:a5:99:43:48:71:5e:cb:f5:97:6e:45:7d:bf:ce:cc: 54:9f:4c:c5:0e:68:d2:07:02:6e:ad:70:ab:e8:dd:ce:b8:ad: 45:16:75:48:67:3c:9e:61:d3:55:7f:f3:1e:d5:75:6d:35:50: 36:ae:3b:68:f8:4e:5c:2c:5a:70:bc:55:d9:23:fb:0c:fd:72: 41:af:dd:46:e1:16:88:9d:1f:8e:4f:c6:ca:37:0a:81:f3:77: 00:58:70:71:21:e3:e7:bb:2f:27:47:c0:30:cb:0b:48:3f:14: 38:8f:7e:62:26:c7:62:6c:08:02:26:f6:3c:28:81:d3:ee:d3: 73:67:56:e4:80:27:7d:c8:4a:69:b8:28:29:e7:fd:e9:0a:9e: 69:10:b6:f4:8c:5e:06:80:87:a5:31:b8:af:f8:10:b7:cd:a2: b9:64:30:44:3d:d6:5b:0b:c6:74:8b:2e:e2:ef:83:41:33:c4: 16:68:81:23:ca:9d:91:9f:47:e7:9f:37:78:5a:a4:23:5e:66: 45:a4:c6:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyvkGwF9K0/98MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0MVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ZDNjMjg2ODUtMjFmMC00MGU4LWFjNTAtNWM3OGNmY2Q0YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqzLnqd4nb1KlSozzYT8uFtd802c0eZcwN6h VjmM1k5e5uio9R7dNPWh5ybfDZyVRZ/1LxXbprwUquKnwJdctnAAGUD5FC68gbJr mcbOQcTLoGORJBM2KSMF2CmZSzCh3ZDfZ8aNoDi32o6t4z92pQtRVk7ox5Wl5S2C wP5wJThPZadcb3hnQouz+wJR3GCRnzftVTAoRLfrETv9nCUfZzAbaRStA9dMsHhB Gtrq8YULCxx4ZAFHUlSwu38oQR5VTlSQwapBoYavZ9vPJMDM8K1rdIEanRYzqPTB zowXrgwfC/E7DKNKacsLnSO4fz0tnx3wpGJ+UVUgbh1vOCoKuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvZ4w3I9STP6AF5zNL4RvtRvp/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGQ2NDA2ZTgtMTM4MC0z MjM3LWFmYWEtYWZiZTE2NGU3ZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgPFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzUOz9emgAQOuLc2DnP6BbGTuqZH/ypLfPnwVIv3FHwWseMNOVZWUPl COXJh7eJEi/yRj8Uwjqq8qWZQ0hxXsv1l25Ffb/OzFSfTMUOaNIHAm6tcKvo3c64 rUUWdUhnPJ5h01V/8x7VdW01UDauO2j4TlwsWnC8Vdkj+wz9ckGv3UbhFoidH45P xso3CoHzdwBYcHEh4+e7LydHwDDLC0g/FDiPfmImx2JsCAIm9jwogdPu03NnVuSA J33ISmm4KCnn/ekKnmkQtvSMXgaAh6UxuK/4ELfNorlkMEQ91lsLxnSLLuLvg0Ez xBZogSPKnZGfR+efN3hapCNeZkWkxho= -----END CERTIFICATE-----Generated at Thu Sep 17 14:24:14 2026 by rpki-client