$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/18d0721a-78f5-3798-9933-d6bb83324d78.roa File: 18d0721a-78f5-3798-9933-d6bb83324d78.roa (raw, json) Hash identifier: titPN1hDHTofnWkDvzF3pxKtUo5t1gWM3ywZvNVypLU= Subject key identifier: 91:AA:F9:B1:00:B9:6A:83:1F:06:D5:23:44:5D:CB:10:BB:4A:C8:A7 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233D7703BC7519699A2F80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/18d0721a-78f5-3798-9933-d6bb83324d78.roa Signing time: Wed 19 Aug 2026 18:03:49 +0000 ROA not before: Wed 19 Aug 2026 18:03:49 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 174 IP address blocks: 198.138.48.0/24 maxlen: 24 198.139.133.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3d:77:03:bc:75:19:69:9a:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:49 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=d5b6700b-a638-4e00-b34a-957728cd778f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:bf:0f:a4:1a:28:49:bd:7a:2d:a5:41:ad: 18:aa:6d:3f:09:bc:b8:17:55:3f:57:85:73:f8:72: 44:a5:c4:d2:83:9d:01:b4:27:11:10:e8:4b:a7:b9: d4:67:b3:0a:6a:fd:61:67:23:64:97:ac:c8:08:70: 99:59:bb:9b:90:48:46:2e:8e:59:7d:31:07:35:19: d1:bf:ad:fa:5f:09:79:28:1c:73:1b:00:88:e4:c7: 10:e8:77:c7:db:1e:01:1c:7f:70:a5:46:2e:f2:96: ef:d4:b5:9e:1b:79:b8:82:fc:c4:f7:3d:90:f6:29: 29:ab:70:35:bc:16:db:db:ee:3a:78:25:f9:af:59: 45:74:9c:55:4c:9e:30:ca:16:cb:d1:d0:9b:75:ba: 0c:fe:fc:a3:e1:32:53:c3:57:3a:2f:93:ec:f8:a6: 81:7c:33:56:4f:6e:e3:07:0b:5c:e9:cb:7a:25:57: b3:51:d9:0a:84:5d:d3:1e:96:0f:91:bf:30:4c:e1: b5:50:68:5e:46:c6:b5:f7:4c:41:99:94:d3:18:54: 7f:d3:05:6c:75:4a:0f:15:93:73:a3:99:ee:92:55: 5f:07:a0:3f:1a:77:76:d3:7d:f1:02:ac:70:46:f4: 05:04:b9:e4:44:db:aa:2e:0b:a1:15:14:87:79:3e: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AA:F9:B1:00:B9:6A:83:1F:06:D5:23:44:5D:CB:10:BB:4A:C8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/18d0721a-78f5-3798-9933-d6bb83324d78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.138.48.0/24 198.139.133.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:35:b6:88:ed:90:10:50:c2:96:58:26:19:f2:a6:08:5a:3e: 62:df:22:4a:10:d0:7f:b7:99:40:aa:cb:97:e3:58:b4:54:7f: ff:4e:19:e9:cd:e9:3e:12:29:de:eb:e6:85:25:fe:95:3c:fe: 1e:ce:2b:a7:d1:dc:58:0b:52:2d:0c:8a:51:35:3e:da:e1:27: a8:d3:02:aa:09:0b:cc:88:a6:b2:cf:03:43:58:e7:20:a7:cf: 61:18:3c:05:f3:fd:2a:0b:8f:bd:e3:03:3b:72:59:77:8e:cd: e6:59:bc:86:6a:c1:2f:b2:0e:33:8b:ac:82:c1:2c:fd:c6:d5: f6:f6:ed:a0:e6:85:7f:39:91:71:27:96:5d:b3:9e:2e:85:a9: 79:5d:fb:99:c6:20:3c:63:03:47:e3:c0:0e:bf:27:f8:19:56: 2c:d1:cb:7b:43:78:2a:99:24:c2:5f:4b:20:00:2d:c2:3b:6a: 97:90:0d:1e:c2:4a:92:37:b6:3f:44:63:ae:3a:75:fd:30:e4: 71:b3:34:91:ac:63:55:95:28:85:19:c7:90:c9:9a:d7:c3:88: 51:43:71:6a:cd:d1:21:a6:5a:1f:24:3f:1a:ad:30:81:fb:c4: f8:06:60:39:60:43:3c:fa:f6:1e:44:96:1f:d5:91:08:3c:20: 25:91:fb:1e -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE7kIz13A7x1GWmaL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ZDViNjcwMGItYTYzOC00ZTAwLWIzNGEtOTU3NzI4Y2Q3NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvua/D6QaKEm9ei2lQa0Yqm0/Cby4F1U/V4Vz +HJEpcTSg50BtCcREOhLp7nUZ7MKav1hZyNkl6zICHCZWbubkEhGLo5ZfTEHNRnR v636Xwl5KBxzGwCI5McQ6HfH2x4BHH9wpUYu8pbv1LWeG3m4gvzE9z2Q9ikpq3A1 vBbb2+46eCX5r1lFdJxVTJ4wyhbL0dCbdboM/vyj4TJTw1c6L5Ps+KaBfDNWT27j Bwtc6ct6JVezUdkKhF3THpYPkb8wTOG1UGheRsa190xBmZTTGFR/0wVsdUoPFZNz o5nuklVfB6A/Gnd2033xAqxwRvQFBLnkRNuqLguhFRSHeT68EQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFJGq+bEAuWqDHwbVI0RdyxC7SsinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMThkMDcyMWEtNzhmNS0z Nzk4LTk5MzMtZDZiYjgzMzI0ZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwQAxoowAwUE xouFgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBmNbaI7ZAQUMKWWCYZ8qYIWj5i3yJKENB/t5lAqsuX41i0 VH//Thnpzek+Eine6+aFJf6VPP4eziun0dxYC1ItDIpRNT7a4Seo0wKqCQvMiKay zwNDWOcgp89hGDwF8/0qC4+94wM7cll3js3mWbyGasEvsg4zi6yCwSz9xtX29u2g 5oV/OZFxJ5Zds54uhal5XfuZxiA8YwNH48AOvyf4GVYs0ct7Q3gqmSTCX0sgAC3C O2qXkA0ewkqSN7Y/RGOuOnX9MORxszSRrGNVlSiFGceQyZrXw4hRQ3FqzdEhplof JD8arTCB+8T4BmA5YEM8+vYeRJYf1ZEIPCAlkfse -----END CERTIFICATE-----Generated at Thu Sep 3 07:54:53 2026 by rpki-client