$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/253358bb-6a87-383f-a097-6f2f72c463ff.roa File: 253358bb-6a87-383f-a097-6f2f72c463ff.roa (raw, json) Hash identifier: pPiHbJBte9Y67YfykIalfJBItkxPJQcFLN8k7AXDyWk= Subject key identifier: 9C:D5:F9:F9:C3:29:FF:6D:E5:87:B7:6C:E7:23:21:23:9A:E0:02:B7 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFE1223B1467A0D0C8218F180 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/253358bb-6a87-383f-a097-6f2f72c463ff.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 397601 IP address blocks: 204.2.128.208/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:23:b1:46:7a:0d:0c:82:18:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=c1d43d23-114e-4305-8e4c-66632a8bc347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c1:af:5a:3e:11:6a:80:b0:47:d1:67:9b:65: 0a:5f:b8:50:01:e4:11:a9:d8:d3:ab:1b:20:b2:54: 48:56:30:d8:21:d0:ac:29:cd:4f:d4:60:b8:18:d1: 32:03:54:81:b5:6c:bb:a6:f8:2b:ab:ae:4f:ad:6d: 7e:3c:85:7c:44:57:4e:43:3b:07:6f:ee:20:85:9d: 96:19:89:51:a2:da:0e:c8:06:67:cd:d8:0d:92:e4: 41:0b:ae:be:6d:17:51:38:5b:80:b8:23:00:c8:13: 2b:dd:ea:24:40:33:c8:0a:c4:bf:77:ab:e9:18:8b: 22:c3:a5:9a:0e:1f:09:dc:4d:eb:4d:60:b8:b0:76: 76:20:61:61:35:be:ce:8c:f1:28:24:0d:54:58:f8: 24:81:f2:2a:84:08:3c:20:46:04:60:27:d3:fc:78: 68:97:aa:d9:61:6e:51:f4:74:54:90:3a:40:29:4e: 08:de:2d:17:f5:ce:0a:a9:9a:70:e9:1f:47:63:10: 43:a7:a8:19:a1:a9:07:05:cf:90:52:bf:f2:e2:77: de:f6:f9:d9:52:bc:4b:91:40:8d:38:c4:c1:07:89: ef:07:15:d1:a8:58:8c:50:77:ea:f2:9d:7f:e2:0a: df:8d:b3:d9:c7:0d:ce:0c:05:f3:af:6a:e8:5b:32: e1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D5:F9:F9:C3:29:FF:6D:E5:87:B7:6C:E7:23:21:23:9A:E0:02:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/253358bb-6a87-383f-a097-6f2f72c463ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.128.208/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:de:b4:99:fe:29:12:fa:76:89:c4:64:1e:47:5f:5e:51:d8: ba:02:03:5a:45:41:60:ca:9e:2a:0c:93:be:e9:dc:b6:12:40: 82:cc:3d:14:fb:07:f9:4d:8e:c6:3d:b1:b2:74:a3:8a:03:a9: 40:a8:78:95:03:71:d8:a3:44:36:73:86:bf:5b:f4:73:8b:a5: 9d:2f:d8:3a:c9:73:48:ab:cc:84:e8:23:81:c5:82:ca:ab:c9: ec:50:dc:dc:60:51:60:ba:eb:3b:bb:e2:d7:69:69:47:36:ef: 4a:d8:9b:07:3a:fb:23:b9:e8:a6:63:f8:99:0c:e6:78:48:c7: 13:da:b4:02:20:6b:66:bf:28:31:05:24:55:d6:2e:b4:0c:3d: 8f:ac:1a:08:72:36:39:75:ec:d6:c3:72:4c:57:a0:4f:eb:f9: 48:78:de:6d:ee:59:3b:5e:3f:13:29:60:83:5c:9c:29:1a:75: 16:a9:8c:6e:73:12:57:a7:b2:4e:cc:32:ad:e2:89:72:d2:11: 26:87:78:34:1d:7b:66:35:8d:1d:1d:c6:41:90:c8:5f:a4:97: 2e:de:0d:72:0b:16:57:ba:b2:fa:cc:dc:61:1b:6e:c7:42:eb: 70:57:2c:fa:06:e0:40:8a:90:08:83:46:6d:71:51:a1:b5:c5: e7:4c:b5:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7+EiOxRnoNDIIY8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk YzFkNDNkMjMtMTE0ZS00MzA1LThlNGMtNjY2MzJhOGJjMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMGvWj4RaoCwR9Fnm2UKX7hQAeQRqdjTqxsg slRIVjDYIdCsKc1P1GC4GNEyA1SBtWy7pvgrq65PrW1+PIV8RFdOQzsHb+4ghZ2W GYlRotoOyAZnzdgNkuRBC66+bRdROFuAuCMAyBMr3eokQDPICsS/d6vpGIsiw6Wa Dh8J3E3rTWC4sHZ2IGFhNb7OjPEoJA1UWPgkgfIqhAg8IEYEYCfT/Hhol6rZYW5R 9HRUkDpAKU4I3i0X9c4KqZpw6R9HYxBDp6gZoakHBc+QUr/y4nfe9vnZUrxLkUCN OMTBB4nvBxXRqFiMUHfq8p1/4grfjbPZxw3ODAXzr2roWzLhlwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJzV+fnDKf9t5Ye3bOcjISOa4AK3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjUzMzU4YmItNmE4Ny0z ODNmLWEwOTctNmYyZjcyYzQ2M2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAKA0DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB33rSZ/ikS+naJxGQeR19eUdi6AgNaRUFgyp4qDJO+6dy2EkCCzD0U +wf5TY7GPbGydKOKA6lAqHiVA3HYo0Q2c4a/W/Rzi6WdL9g6yXNIq8yE6COBxYLK q8nsUNzcYFFguus7u+LXaWlHNu9K2JsHOvsjueimY/iZDOZ4SMcT2rQCIGtmvygx BSRV1i60DD2PrBoIcjY5dezWw3JMV6BP6/lIeN5t7lk7Xj8TKWCDXJwpGnUWqYxu cxJXp7JOzDKt4oly0hEmh3g0HXtmNY0dHcZBkMhfpJcu3g1yCxZXurL6zNxhG27H QutwVyz6BuBAipAIg0ZtcVGhtcXnTLVL -----END CERTIFICATE-----Generated at Thu Sep 3 07:13:50 2026 by rpki-client