$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2547136d-055b-314b-8c0b-60a45f1eb47a.roa File: 2547136d-055b-314b-8c0b-60a45f1eb47a.roa (raw, json) Hash identifier: rEEvSG5x9/TZaOkCvqY5S3kfGUEuH3jzTor+YYxQ6M0= Subject key identifier: C9:71:89:B0:8D:86:A7:F5:8F:B1:0A:9D:BF:77:C3:B4:38:E6:74:49 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232C981032239B07EB6B00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2547136d-055b-314b-8c0b-60a45f1eb47a.roa Signing time: Wed 19 Aug 2026 18:03:41 +0000 ROA not before: Wed 19 Aug 2026 18:03:41 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 128.121.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:2c:98:10:32:23:9b:07:eb:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:41 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=72ff1c14-49dc-42fe-b06a-155fb1244ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:c3:c7:01:9a:eb:7c:e4:7b:0d:99:af:48: 5c:19:ee:da:03:e0:fe:5a:8e:df:28:b4:2b:d3:bc: ba:f4:72:d6:df:08:48:2f:f3:0c:9f:1e:67:e9:8e: 27:d3:3a:a7:19:9f:26:67:60:92:cc:9c:b8:01:0a: bc:c5:73:8f:a1:a3:61:7c:78:5c:82:a2:23:f2:a1: b5:c0:35:95:a8:29:9b:17:d2:f6:49:06:fb:8d:3f: 8c:92:aa:16:42:a1:d7:72:39:de:ca:45:9f:dc:96: cc:a0:9b:c3:67:8a:b0:a7:56:13:da:35:97:e7:92: c5:89:6a:ac:36:bf:8a:7c:35:42:40:eb:2e:5d:2b: 3f:a5:e3:29:10:af:0d:cf:28:77:e8:37:8e:d9:86: 32:eb:be:cb:d6:48:76:c5:10:50:7a:b4:be:97:ce: fd:ca:63:64:bd:b4:dd:dc:29:91:6e:04:31:ff:25: d3:6c:8a:d9:2f:d1:3a:a7:82:83:8d:a9:dd:e0:2c: 28:f2:9f:2c:ce:c1:58:1b:22:79:fe:94:9b:84:77: bc:55:bc:ef:0f:72:47:d7:7d:82:f3:6f:87:39:e6: 3f:1d:fa:52:ab:68:31:43:32:a3:80:d5:a0:93:7c: dc:59:e8:82:29:a1:64:7a:82:56:f7:e9:9e:f4:66: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:71:89:B0:8D:86:A7:F5:8F:B1:0A:9D:BF:77:C3:B4:38:E6:74:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2547136d-055b-314b-8c0b-60a45f1eb47a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:b4:39:9f:82:83:f4:a2:e1:89:7c:21:a4:f6:f2:d8:1f:cb: 89:8f:b8:8a:4c:0d:c3:70:b4:10:bd:67:85:f4:26:8d:8e:0e: 4a:35:c4:bd:65:40:27:03:2c:32:56:fa:12:ea:72:60:f0:86: 4c:61:6a:96:e2:e5:84:cf:aa:15:e4:a7:00:f0:c9:2a:e8:2e: 7b:2d:f3:7e:9e:39:60:4e:f4:d0:9f:4d:84:08:55:fc:6c:30: 08:23:f9:5a:9d:79:9f:3a:03:c9:7c:04:92:2f:93:63:6f:55: da:c4:21:6e:f7:ac:06:37:58:10:a5:d4:b2:af:36:ee:eb:57: 38:79:9c:62:aa:d9:99:44:d1:b0:49:60:05:91:37:4a:7d:fb: 74:7b:55:03:ee:35:0a:fc:36:2b:e6:af:59:41:82:5d:14:6e: ae:ce:13:c7:10:a2:2e:27:55:aa:95:ab:b3:ca:da:73:b3:82: a8:37:a3:a4:1b:b8:f8:f1:07:3c:44:a9:92:80:c5:65:43:68: 29:a2:0a:9e:f9:16:e4:0a:7e:27:52:09:03:a6:2d:bd:98:3b: 0e:5c:98:f1:85:48:23:b4:a4:0b:64:a7:5b:fd:2a:24:2d:0a: 87:d6:85:7b:54:7b:c5:35:93:a0:5f:a7:64:6c:75:57:31:b2: d9:b0:7e:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyyYEDIjmwfrawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0MVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk NzJmZjFjMTQtNDlkYy00MmZlLWIwNmEtMTU1ZmIxMjQ0Y2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6rDxwGa63zkew2Zr0hcGe7aA+D+Wo7fKLQr 07y69HLW3whIL/MMnx5n6Y4n0zqnGZ8mZ2CSzJy4AQq8xXOPoaNhfHhcgqIj8qG1 wDWVqCmbF9L2SQb7jT+MkqoWQqHXcjneykWf3JbMoJvDZ4qwp1YT2jWX55LFiWqs Nr+KfDVCQOsuXSs/peMpEK8Nzyh36DeO2YYy677L1kh2xRBQerS+l879ymNkvbTd 3CmRbgQx/yXTbIrZL9E6p4KDjand4Cwo8p8szsFYGyJ5/pSbhHe8VbzvD3JH132C 82+HOeY/HfpSq2gxQzKjgNWgk3zcWeiCKaFkeoJW9+me9GaIbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlxibCNhqf1j7EKnb93w7Q45nRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjU0NzEzNmQtMDU1Yi0z MTRiLThjMGItNjBhNDVmMWViNDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgHnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKy0OZ+Cg/Si4Yl8IaT28tgfy4mPuIpMDcNwtBC9Z4X0Jo2ODko1xL1l QCcDLDJW+hLqcmDwhkxhapbi5YTPqhXkpwDwySroLnst836eOWBO9NCfTYQIVfxs MAgj+VqdeZ86A8l8BJIvk2NvVdrEIW73rAY3WBCl1LKvNu7rVzh5nGKq2ZlE0bBJ YAWRN0p9+3R7VQPuNQr8Nivmr1lBgl0Ubq7OE8cQoi4nVaqVq7PK2nOzgqg3o6Qb uPjxBzxEqZKAxWVDaCmiCp75FuQKfidSCQOmLb2YOw5cmPGFSCO0pAtkp1v9KiQt CofWhXtUe8U1k6Bfp2RsdVcxstmwfqU= -----END CERTIFICATE-----Generated at Thu Sep 17 18:26:32 2026 by rpki-client