$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1a8cad42-b98a-3064-951d-27c272ba24f3.roa File: 1a8cad42-b98a-3064-951d-27c272ba24f3.roa (raw, json) Hash identifier: CEldvTZzZ/eY9LjCf91DybvRF9Mxoz0xuTde6M3sZs0= Subject key identifier: E8:F4:34:51:2E:07:4B:79:41:65:A3:54:D4:18:1E:27:42:7B:6A:82 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F73C33AA2FB27B9D52163CAE0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1a8cad42-b98a-3064-951d-27c272ba24f3.roa Signing time: Sat 10 Oct 2026 04:46:46 +0000 ROA not before: Sat 10 Oct 2026 04:46:46 +0000 ROA not after: Fri 08 Jan 2027 05:46:46 +0000 asID: 2914 IP address blocks: 207.57.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:c3:3a:a2:fb:27:b9:d5:21:63:ca:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 10 04:46:46 2026 GMT Not After : Jan 8 05:46:46 2027 GMT Subject: CN=22120957-74bb-4bd6-9a6a-f738194380bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:64:9f:be:46:85:8c:31:e7:3b:37:16:9e:13: 0a:72:96:50:fe:2f:d8:a8:3f:2f:bb:db:1f:e5:42: 78:eb:ba:b5:fe:98:3d:3e:d1:48:60:5f:74:83:a3: 58:81:42:f9:34:46:fd:ca:7c:2d:30:d9:07:9b:21: 53:95:03:65:40:c3:87:ff:ed:8a:88:6b:f6:67:6f: 9f:bc:cc:1f:e0:c4:aa:bf:6e:8e:f6:9a:97:d5:41: 32:f2:70:7e:13:62:d3:8f:df:bf:56:d2:76:43:61: 5d:6a:99:26:28:16:41:ba:02:dc:33:36:53:6c:d4: e5:8b:01:01:73:85:55:9a:74:d8:0f:2c:f6:15:cb: 88:7e:1c:5c:dc:41:1e:aa:81:7b:36:01:6f:c5:63: a2:f6:df:92:c6:ff:a4:b8:51:6a:e5:f3:cf:aa:07: 43:e1:1d:69:e3:26:4a:b8:4d:12:04:ef:29:71:31: b5:fd:95:ed:1e:f5:8d:9f:eb:01:3f:a1:75:94:9e: 94:15:b1:dd:1f:45:83:5a:40:79:31:6e:2e:49:69: 6e:8d:9b:3c:f9:14:38:9a:e3:dc:dd:13:55:0e:69: ae:15:ef:67:40:e6:9c:23:d6:c1:02:90:32:9f:d3: 41:f1:bc:a4:07:45:27:1f:8d:e8:ff:2d:96:7f:2f: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F4:34:51:2E:07:4B:79:41:65:A3:54:D4:18:1E:27:42:7B:6A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1a8cad42-b98a-3064-951d-27c272ba24f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.57.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:1c:29:1b:55:ed:29:1f:d8:80:d5:e6:58:2b:6e:86:3d:b4: c6:9c:35:65:25:e8:72:87:47:0b:8f:00:fb:d4:87:37:9d:74: f3:48:4e:3f:9c:e9:52:f9:7a:fb:e0:15:3c:e7:08:15:b0:ef: 61:29:84:32:26:e1:7b:06:c7:b3:a3:8c:c0:d4:ce:d5:bc:f6: 18:f5:c4:12:03:08:d0:a0:98:39:51:a6:98:6f:9b:5e:ec:c9: 34:f7:df:73:6c:19:9b:d4:68:72:1c:4b:02:f6:70:c2:82:63: 58:e5:43:19:56:75:af:d2:5f:95:22:a9:44:70:bc:78:6e:38: d4:2f:63:6b:7a:15:76:b2:1d:15:75:67:b1:d5:fa:53:10:5a: 37:3e:3f:b1:2b:7b:59:e1:64:ff:67:63:1e:fc:9c:96:e9:d1: 88:31:bb:6f:a0:89:40:bc:66:e2:fd:2f:0f:74:bb:76:d6:5f: a7:80:ca:9b:08:b1:50:8e:6e:6c:e2:79:c6:8d:e0:89:2c:e9: e5:d5:05:1b:3f:82:9a:66:f2:b7:65:59:a0:59:7e:8f:5a:16: 30:ad:59:88:82:7d:1b:2e:69:19:6b:7a:6b:ec:bc:5d:29:07: d6:f1:a6:9d:1d:ce:55:8b:99:b1:ec:2d:f0:ef:e2:c0:50:ff: 3e:49:8d:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zwzqi+ye51SFjyuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAxMDA0NDY0NloXDTI3MDEwODA1NDY0NlowLzEtMCsGA1UEAxMk MjIxMjA5NTctNzRiYi00YmQ2LTlhNmEtZjczODE5NDM4MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWSfvkaFjDHnOzcWnhMKcpZQ/i/YqD8vu9sf 5UJ467q1/pg9PtFIYF90g6NYgUL5NEb9ynwtMNkHmyFTlQNlQMOH/+2KiGv2Z2+f vMwf4MSqv26O9pqX1UEy8nB+E2LTj9+/VtJ2Q2FdapkmKBZBugLcMzZTbNTliwEB c4VVmnTYDyz2FcuIfhxc3EEeqoF7NgFvxWOi9t+Sxv+kuFFq5fPPqgdD4R1p4yZK uE0SBO8pcTG1/ZXtHvWNn+sBP6F1lJ6UFbHdH0WDWkB5MW4uSWlujZs8+RQ4muPc 3RNVDmmuFe9nQOacI9bBApAyn9NB8bykB0UnH43o/y2Wfy9VNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOj0NFEuB0t5QWWjVNQYHidCe2qCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWE4Y2FkNDItYjk4YS0z MDY0LTk1MWQtMjdjMjcyYmEyNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzzkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEscKRtV7Skf2IDV5lgrboY9tMacNWUl6HKHRwuPAPvUhzeddPNITj+c 6VL5evvgFTznCBWw72EphDIm4XsGx7OjjMDUztW89hj1xBIDCNCgmDlRpphvm17s yTT333NsGZvUaHIcSwL2cMKCY1jlQxlWda/SX5UiqURwvHhuONQvY2t6FXayHRV1 Z7HV+lMQWjc+P7Ere1nhZP9nYx78nJbp0Ygxu2+giUC8ZuL9Lw90u3bWX6eAypsI sVCObmziecaN4Iks6eXVBRs/gppm8rdlWaBZfo9aFjCtWYiCfRsuaRlremvsvF0p B9bxpp0dzlWLmbHsLfDv4sBQ/z5JjRA= -----END CERTIFICATE-----Generated at Sun Oct 18 04:33:56 2026 by rpki-client