$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1f728d17-d602-32b0-9c88-b5cec1a7af9d.roa File: 1f728d17-d602-32b0-9c88-b5cec1a7af9d.roa (raw, json) Hash identifier: x+N+qxz42UYymaOGzT6biobtstVxvRo1JolSZUSvHjY= Subject key identifier: B5:59:C3:91:89:47:CC:6B:2F:9E:75:8C:C5:FF:55:E7:E5:1E:B9:E0 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232B6425F535C60180D010 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1f728d17-d602-32b0-9c88-b5cec1a7af9d.roa Signing time: Wed 19 Aug 2026 18:03:41 +0000 ROA not before: Wed 19 Aug 2026 18:03:41 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 3949 IP address blocks: 204.2.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:2b:64:25:f5:35:c6:01:80:d0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:41 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=840dce29-1679-4661-af20-05918aa757ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:85:b3:eb:ea:37:50:10:74:46:86:36:ac: 3c:ba:95:33:54:2d:d3:6e:a2:eb:ee:64:0a:50:93: 16:ac:fb:45:06:53:16:42:17:c3:50:5f:6c:7c:68: 13:43:85:41:db:8c:54:fe:52:a4:c8:94:5f:e9:ef: 61:fd:77:c9:b5:19:66:bd:a6:0f:60:1e:57:fa:8e: 5d:27:24:3e:f8:a3:4a:bc:bd:8c:2f:b2:06:b0:28: 9f:fa:66:7a:54:63:9d:97:b4:45:19:e5:7b:12:12: df:2b:aa:5d:4e:f6:76:52:21:09:49:28:9e:81:76: 08:94:cd:67:5c:f4:6e:60:c1:03:65:88:0a:de:5b: a8:b3:e2:d5:53:7e:0e:a8:4f:2c:1e:d0:fc:41:1f: 92:bd:bd:c8:b0:60:a9:93:4c:9d:18:53:f7:6c:5a: 51:ed:1a:7c:14:aa:dc:3e:1e:62:d9:09:42:8b:03: 3b:07:59:db:8c:a9:f1:eb:f3:9e:e1:78:6b:f5:ec: d5:77:8b:a9:1b:0e:44:3d:97:89:4a:15:d3:d8:8e: 12:eb:36:84:86:ac:95:2a:1b:98:ba:e4:40:b1:23: 10:fb:35:0e:a8:49:b8:41:1f:bf:2d:58:1a:e8:f0: d6:e2:06:59:0e:b4:67:5d:fd:29:be:aa:76:94:4c: 62:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:59:C3:91:89:47:CC:6B:2F:9E:75:8C:C5:FF:55:E7:E5:1E:B9:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1f728d17-d602-32b0-9c88-b5cec1a7af9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d4:44:53:d6:4f:4f:f1:5b:ad:e2:26:f5:bb:79:19:0d:f9: 40:18:b7:d0:da:41:65:01:bc:ef:21:68:46:35:c7:05:d4:ee: 14:62:7a:47:02:c8:29:de:e3:5a:72:ad:1e:50:38:d1:74:7d: 5c:01:13:df:b4:91:af:64:78:62:a8:8c:f4:0b:8e:18:48:ff: 54:04:2d:62:ec:12:60:8d:b4:29:c3:15:58:85:ef:0d:a7:6e: f7:24:db:97:1d:2b:bf:d6:46:f2:f6:3a:3a:d6:62:cd:94:a5: 76:a4:59:bf:20:39:bc:b8:3d:08:89:92:3b:d0:5a:d1:e6:27: f0:60:b5:1f:59:83:a4:a7:94:7a:ee:ee:5e:50:1b:ea:15:a5: 75:43:5b:09:17:a9:29:6c:5c:4f:aa:3f:6a:40:5b:c0:98:da: 73:ce:11:db:e0:5b:a6:f1:87:97:b3:55:bb:99:6a:8f:3a:ac: eb:b8:21:06:d0:56:16:22:94:16:77:80:bd:77:16:b6:f2:d8: 28:27:dc:d9:e6:8a:c7:c2:18:80:2c:b6:f5:24:51:4b:c2:fa: 1a:56:17:a5:80:89:55:f8:98:ea:b2:49:95:c3:a1:8f:6a:99: 0e:87:4e:14:64:7e:d1:f1:2a:05:d1:bd:cb:46:32:60:13:95: 36:99:cd:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIytkJfU1xgGA0BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0MVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ODQwZGNlMjktMTY3OS00NjYxLWFmMjAtMDU5MThhYTc1N2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx6Fs+vqN1AQdEaGNqw8upUzVC3TbqLr7mQK UJMWrPtFBlMWQhfDUF9sfGgTQ4VB24xU/lKkyJRf6e9h/XfJtRlmvaYPYB5X+o5d JyQ++KNKvL2ML7IGsCif+mZ6VGOdl7RFGeV7EhLfK6pdTvZ2UiEJSSiegXYIlM1n XPRuYMEDZYgK3luos+LVU34OqE8sHtD8QR+Svb3IsGCpk0ydGFP3bFpR7Rp8FKrc Ph5i2QlCiwM7B1nbjKnx6/Oe4Xhr9ezVd4upGw5EPZeJShXT2I4S6zaEhqyVKhuY uuRAsSMQ+zUOqEm4QR+/LVga6PDW4gZZDrRnXf0pvqp2lExibQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVZw5GJR8xrL551jMX/VeflHrngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWY3MjhkMTctZDYwMi0z MmIwLTljODgtYjVjZWMxYTdhZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzALlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbURFPWT0/xW63iJvW7eRkN+UAYt9DaQWUBvO8haEY1xwXU7hRiekcC yCne41pyrR5QONF0fVwBE9+0ka9keGKojPQLjhhI/1QELWLsEmCNtCnDFViF7w2n bvck25cdK7/WRvL2OjrWYs2UpXakWb8gOby4PQiJkjvQWtHmJ/BgtR9Zg6SnlHru 7l5QG+oVpXVDWwkXqSlsXE+qP2pAW8CY2nPOEdvgW6bxh5ezVbuZao86rOu4IQbQ VhYilBZ3gL13Frby2Cgn3NnmisfCGIAstvUkUUvC+hpWF6WAiVX4mOqySZXDoY9q mQ6HThRkftHxKgXRvctGMmATlTaZzZ0= -----END CERTIFICATE-----Generated at Thu Sep 3 09:25:21 2026 by rpki-client