$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d9a5ee0-e226-31ef-a5df-6b96a22c2159.roa File: 1d9a5ee0-e226-31ef-a5df-6b96a22c2159.roa (raw, json) Hash identifier: LIDaNt/q14S1ZabQlMWtYrs+/h6gSgozQpvquH048u8= Subject key identifier: 67:EE:1B:78:39:E8:5D:9B:F0:36:11:42:B1:5D:1A:2E:21:A4:48:59 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE42344B3E47E13F5E6CD6A40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d9a5ee0-e226-31ef-a5df-6b96a22c2159.roa Signing time: Wed 19 Aug 2026 18:03:53 +0000 ROA not before: Wed 19 Aug 2026 18:03:53 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 209.39.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:44:b3:e4:7e:13:f5:e6:cd:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:53 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=5b7ec42a-5230-4ece-8fbe-a6aa411e00fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:20:5d:fe:d0:9d:1d:02:fa:77:4b:a5:3a: 55:24:2d:9f:ce:35:fe:26:00:61:83:aa:03:fb:91: 04:e1:38:a8:b6:9a:dc:ad:49:56:a8:6a:a0:cc:9b: f4:21:5a:42:47:0e:83:55:d4:ea:a9:09:24:71:48: a2:50:aa:ca:62:d7:d7:90:ba:11:a9:7a:77:63:ee: dc:69:1b:4b:61:68:9a:55:6e:48:ab:79:e1:9d:86: c7:f5:01:56:40:47:f8:62:da:f2:59:0c:bd:2d:1f: f1:a9:d5:3b:35:ec:ca:1c:a4:f8:fc:92:f4:43:f5: 91:58:64:76:c7:f5:1c:ab:3d:d9:fc:42:9b:e6:8f: 00:a2:be:47:d7:1e:dd:68:0b:88:9d:c3:07:c3:bc: 13:12:2e:ca:35:4b:48:14:b7:cc:06:ef:b9:bd:3f: 3e:ac:ee:cc:df:f3:a9:02:46:7d:99:98:dc:f8:2c: 0f:32:f9:62:3c:f8:70:f6:2f:9b:27:14:c9:79:6a: 08:c0:cb:4b:2e:8a:85:d4:cb:30:2d:d9:dc:4a:ee: 41:b8:7c:3a:65:4c:42:c0:f8:de:ee:d2:43:6d:1e: a3:ab:35:02:3b:6f:89:2b:1d:8f:57:86:fe:b9:90: c8:fa:0a:2f:33:0d:27:b0:db:74:bf:4c:ad:3b:fc: 3c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EE:1B:78:39:E8:5D:9B:F0:36:11:42:B1:5D:1A:2E:21:A4:48:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d9a5ee0-e226-31ef-a5df-6b96a22c2159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 209.39.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:67:8d:07:f7:23:d9:11:d8:22:e5:ca:b8:56:27:78:6d:a4: fd:98:0e:c1:bc:d8:52:16:4e:ab:96:6c:7d:48:1a:44:b3:ad: ad:01:a2:c7:3b:fb:7d:75:b9:8b:2f:48:bf:c4:a8:21:ad:3e: 13:03:9d:f5:59:2f:01:36:ce:76:92:19:c9:8e:f7:d5:c4:6d: 2c:9a:99:58:04:c6:81:6e:d1:21:c1:62:08:ab:e7:f4:f3:17: 4a:ae:b1:9c:e5:7f:e2:36:18:d4:c9:78:8b:a8:7f:da:a5:6e: 5f:ee:0f:4c:f7:46:8a:e7:4a:1f:34:c0:49:1b:df:2d:25:69: 7b:6b:0b:0f:bd:1e:84:e3:f2:8a:cf:5e:cf:ea:35:2a:e8:47: 85:93:f6:cb:bf:eb:cb:38:80:36:c6:c4:25:21:47:0c:cf:31: 07:29:44:87:9b:67:53:9a:3f:2a:23:a2:32:39:d3:14:db:37: 37:9a:a9:8d:1b:4f:19:6c:cf:2c:95:25:41:cb:49:9d:01:56: 50:dd:98:da:76:02:cd:b8:46:ed:62:5b:58:18:a7:ee:59:d0: c1:86:05:98:b4:ff:5c:97:b3:6c:5e:0c:c1:7a:48:33:c8:ad: 49:81:96:62:19:a1:a7:64:87:13:ff:c2:75:9d:6a:7c:95:09: 53:ca:5a:4e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI0Sz5H4T9ebNakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1M1oXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk NWI3ZWM0MmEtNTIzMC00ZWNlLThmYmUtYTZhYTQxMWUwMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9kgXf7QnR0C+ndLpTpVJC2fzjX+JgBhg6oD +5EE4TiotprcrUlWqGqgzJv0IVpCRw6DVdTqqQkkcUiiUKrKYtfXkLoRqXp3Y+7c aRtLYWiaVW5Iq3nhnYbH9QFWQEf4YtryWQy9LR/xqdU7NezKHKT4/JL0Q/WRWGR2 x/Ucqz3Z/EKb5o8Aor5H1x7daAuIncMHw7wTEi7KNUtIFLfMBu+5vT8+rO7M3/Op AkZ9mZjc+CwPMvliPPhw9i+bJxTJeWoIwMtLLoqF1MswLdncSu5BuHw6ZUxCwPje 7tJDbR6jqzUCO2+JKx2PV4b+uZDI+govMw0nsNt0v0ytO/w8CQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGfuG3g56F2b8DYRQrFdGi4hpEhZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWQ5YTVlZTAtZTIyNi0z MWVmLWE1ZGYtNmI5NmEyMmMyMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0ScwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAlWeNB/cj2RHYIuXKuFYneG2k/ZgOwbzYUhZOq5ZsfUgaRLOtrQGixzv7 fXW5iy9Iv8SoIa0+EwOd9VkvATbOdpIZyY731cRtLJqZWATGgW7RIcFiCKvn9PMX Sq6xnOV/4jYY1Ml4i6h/2qVuX+4PTPdGiudKHzTASRvfLSVpe2sLD70ehOPyis9e z+o1KuhHhZP2y7/ryziANsbEJSFHDM8xBylEh5tnU5o/KiOiMjnTFNs3N5qpjRtP GWzPLJUlQctJnQFWUN2Y2nYCzbhG7WJbWBin7lnQwYYFmLT/XJezbF4MwXpIM8it SYGWYhmhp2SHE//CdZ1qfJUJU8paTg== -----END CERTIFICATE-----Generated at Sat Aug 22 00:04:42 2026 by rpki-client