$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1ad14d16-09b8-3887-9fdf-34a2b863737e.roa File: 1ad14d16-09b8-3887-9fdf-34a2b863737e.roa (raw, json) Hash identifier: X2mp93HeKkFUsq6jRIQlYsvzIlhMmejjK2u8rEuKBzw= Subject key identifier: 88:75:B6:D7:7A:1C:19:E9:09:54:F5:9E:85:CF:2E:E9:7D:E3:72:E7 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F0829B05B4FF0B4BD4620B900 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1ad14d16-09b8-3887-9fdf-34a2b863737e.roa Signing time: Tue 01 Sep 2026 15:45:55 +0000 ROA not before: Tue 01 Sep 2026 15:45:55 +0000 ROA not after: Mon 30 Nov 2026 16:45:55 +0000 asID: 1054 IP address blocks: 207.57.64.0/21 maxlen: 24 207.57.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:29:b0:5b:4f:f0:b4:bd:46:20:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 1 15:45:55 2026 GMT Not After : Nov 30 16:45:55 2026 GMT Subject: CN=d1acf70b-127b-4c7f-b9b8-241eecc51a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1e:8b:33:43:45:99:bd:79:76:ef:ef:4e:3e: db:62:5f:e0:b8:1a:e8:ad:60:f6:bf:37:52:cb:d0: 1b:e4:7d:a2:2f:30:e5:15:f5:e3:36:d8:a2:9a:aa: b0:24:6d:cc:b1:67:7d:4d:34:0a:a5:cf:e9:40:47: fd:6a:25:9b:bf:26:4a:56:c0:ba:b2:ac:33:29:a7: 2d:42:86:9a:63:44:e3:6d:a8:d7:b8:9a:39:68:13: 40:c5:21:ee:e4:d1:32:c3:14:77:5f:6c:e6:66:2a: a1:92:6e:ab:57:12:2e:3d:5e:dc:9d:f9:e9:bc:7c: d8:27:ad:9b:cb:55:f5:fc:65:eb:91:6a:ad:5c:f5: 3d:b0:cd:b7:72:35:37:1d:98:b3:42:5c:b3:f8:6d: 6f:ce:62:dc:ea:d6:26:52:bd:22:2a:a2:a7:a1:cb: 85:d4:77:c2:90:37:5f:69:d4:16:66:c0:60:eb:e8: c2:fe:01:76:b6:b3:97:bb:3d:23:05:c3:fc:50:f4: 92:66:99:3d:bd:04:d7:a0:6c:94:16:28:84:bb:a9: da:a8:7b:42:2d:6a:a1:81:18:64:a8:4d:2d:e8:f5: 5b:b5:1d:5e:55:21:6d:bc:fa:66:b5:d2:76:35:a1: 7a:02:29:d4:d9:5d:4e:89:bb:16:77:14:e6:a1:fb: 8b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:75:B6:D7:7A:1C:19:E9:09:54:F5:9E:85:CF:2E:E9:7D:E3:72:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1ad14d16-09b8-3887-9fdf-34a2b863737e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.57.64.0-207.57.75.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:0b:9f:b1:46:c1:fc:92:5d:cf:ca:ba:56:76:ce:9d:38:4d: c7:40:5f:1d:37:27:bd:71:62:00:b7:4b:b5:ac:e6:69:93:47: 79:c5:22:cb:2c:6c:89:2d:94:ff:46:78:55:89:d9:4d:37:a7: c9:94:9e:1c:3a:b0:f0:19:e7:1c:b8:b6:9e:86:e0:87:09:48: d1:7d:3e:6a:b9:c0:91:f1:a2:67:6c:59:a0:4a:09:8a:9c:f9: df:c2:ca:45:bc:c8:02:d3:5c:3b:4b:a6:83:d6:a2:5e:e0:4d: 81:d6:c5:d8:7d:4e:f6:31:c2:25:95:c8:01:f2:c4:24:85:48: d5:69:f5:ca:8e:24:d1:41:fd:d1:14:b0:a2:e6:36:f7:9b:cb: 16:91:ee:c2:3f:85:76:9e:ec:02:93:ce:95:ac:ea:dd:1b:b7: 23:c3:54:c7:bc:ec:36:3a:5a:0d:86:0d:6c:ff:18:8a:6e:9e: 6e:92:cd:36:a0:53:97:c4:80:4e:8c:04:18:88:2d:4c:d7:ed: 9a:90:b1:70:69:6a:7d:63:69:70:ca:32:1b:5a:8f:2b:90:5c: a5:d0:0e:31:4c:86:26:d1:cd:e4:ba:0f:ac:69:ab:3a:a6:30: 10:e9:af:eb:f9:36:99:49:8d:73:31:6b:62:de:68:87:a9:e0: eb:82:a7:e1 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8IKbBbT/C0vUYguQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkwMTE1NDU1NVoXDTI2MTEzMDE2NDU1NVowLzEtMCsGA1UEAxMk ZDFhY2Y3MGItMTI3Yi00YzdmLWI5YjgtMjQxZWVjYzUxYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox6LM0NFmb15du/vTj7bYl/guBrorWD2vzdS y9Ab5H2iLzDlFfXjNtiimqqwJG3MsWd9TTQKpc/pQEf9aiWbvyZKVsC6sqwzKact QoaaY0TjbajXuJo5aBNAxSHu5NEywxR3X2zmZiqhkm6rVxIuPV7cnfnpvHzYJ62b y1X1/GXrkWqtXPU9sM23cjU3HZizQlyz+G1vzmLc6tYmUr0iKqKnocuF1HfCkDdf adQWZsBg6+jC/gF2trOXuz0jBcP8UPSSZpk9vQTXoGyUFiiEu6naqHtCLWqhgRhk qE0t6PVbtR1eVSFtvPpmtdJ2NaF6AinU2V1OibsWdxTmofuLmQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIh1ttd6HBnpCVT1noXPLul943LnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWFkMTRkMTYtMDliOC0z ODg3LTlmZGYtMzRhMmI4NjM3MzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAbPOUAD BALPOUgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAnQufsUbB/JJdz8q6VnbOnThNx0BfHTcnvXFiALdLtazm aZNHecUiyyxsiS2U/0Z4VYnZTTenyZSeHDqw8BnnHLi2nobghwlI0X0+arnAkfGi Z2xZoEoJipz538LKRbzIAtNcO0umg9aiXuBNgdbF2H1O9jHCJZXIAfLEJIVI1Wn1 yo4k0UH90RSwouY295vLFpHuwj+Fdp7sApPOlazq3Ru3I8NUx7zsNjpaDYYNbP8Y im6ebpLNNqBTl8SATowEGIgtTNftmpCxcGlqfWNpcMoyG1qPK5BcpdAOMUyGJtHN 5LoPrGmrOqYwEOmv6/k2mUmNczFrYt5oh6ng64Kn4Q== -----END CERTIFICATE-----Generated at Thu Sep 3 08:28:56 2026 by rpki-client