$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b11f224-9978-3530-aa29-f0819dc43490.roa File: 2b11f224-9978-3530-aa29-f0819dc43490.roa (raw, json) Hash identifier: 9S17bHvd0PdFEdCxZxUtCuzkAiOHjJTrtRVK5FZGT4w= Subject key identifier: 39:44:DE:B7:11:D1:97:DF:B1:F7:59:7F:F4:57:78:01:ED:7D:18:10 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE42340125210130D7D2CCBC0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b11f224-9978-3530-aa29-f0819dc43490.roa Signing time: Wed 19 Aug 2026 18:03:50 +0000 ROA not before: Wed 19 Aug 2026 18:03:50 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 192.217.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:40:12:52:10:13:0d:7d:2c:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:50 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=74628a57-e5bf-432f-9f10-67889a057f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:d3:a2:5d:00:00:ab:0e:93:1f:92:6b:d9: e7:4d:99:e3:a2:bb:32:4a:17:e9:55:8d:f7:79:ef: b8:78:ad:8c:21:63:87:3b:77:c6:81:55:79:f6:c9: b5:61:a6:5b:bf:ae:69:4b:a1:bc:fc:df:f2:e9:18: 26:63:5d:5e:46:1a:91:39:0c:c2:1d:93:fb:27:5f: 76:97:90:c6:a4:5f:0c:eb:7f:87:1d:f1:de:5e:da: 73:88:36:cd:bd:8f:ec:dd:bd:f4:f7:1f:f8:56:29: a6:bd:1c:50:08:f1:3b:d4:ac:d0:2e:9d:77:31:dc: b6:a4:40:74:51:ec:a1:8c:55:3b:e0:f6:35:01:81: b4:cd:85:6b:32:a8:12:ca:52:cb:7f:a9:6d:a0:46: 0b:c6:6f:92:4c:f7:61:88:56:0b:30:90:4a:51:51: 12:ae:6e:70:ba:eb:03:7c:fe:e2:52:91:0e:c2:75: 47:16:3c:b4:7b:35:e0:b5:07:ad:26:d3:42:ba:05: 87:78:9e:6b:be:9b:15:fb:30:65:fc:69:51:85:a6: 2c:a8:9e:61:7f:8b:e3:b5:dc:01:41:15:49:4e:14: 05:e8:e1:be:ca:b8:07:f9:a8:5a:ad:12:75:c6:94: c5:0a:13:38:b5:d6:39:0a:ba:45:a2:e0:da:cb:29: 71:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:44:DE:B7:11:D1:97:DF:B1:F7:59:7F:F4:57:78:01:ED:7D:18:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b11f224-9978-3530-aa29-f0819dc43490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.217.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d3:c9:9b:1a:2b:2b:54:e7:e8:b9:bf:69:45:aa:19:c8:48: f3:50:1a:51:a4:c2:87:e5:c8:50:6b:26:20:0d:64:a8:b3:b4: b0:32:ba:2b:59:ad:c8:25:85:d7:fb:ff:59:93:bf:7f:2b:07: 3c:39:d9:88:00:14:f6:17:b3:7a:3f:e5:cd:61:2d:cf:44:92: be:5b:e6:fd:64:b8:b5:74:bf:84:5c:be:50:83:2f:4b:83:ac: 84:69:df:a1:f7:03:3e:43:c1:13:5d:58:36:ae:01:d1:8c:96: 3a:72:bd:7a:1e:30:a9:53:4f:9a:06:76:3b:b3:51:e2:bc:d2: c1:74:04:f0:68:3c:70:ec:c3:db:5d:ca:dd:43:20:3f:68:b9: bd:55:9a:37:53:a4:77:46:9a:34:19:a2:3a:fb:d7:65:d1:9b: c1:25:5b:25:c8:3d:78:03:b2:90:d1:f3:4f:3c:b2:8f:d7:5b: a7:fe:1e:98:4a:fa:3b:ba:60:1c:9e:2e:af:dc:ae:e3:5d:1f: 69:bb:6f:34:4d:52:2e:d2:ef:0f:b4:97:73:26:02:bf:a9:38: 23:87:7b:f4:a4:ab:3c:af:35:e5:fd:30:ba:1e:ec:04:6a:e2: 1e:4b:4b:7a:d5:ff:a7:4b:c7:34:f8:c3:3a:30:a9:55:3e:6d: ed:ec:ae:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0ASUhATDX0sy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk NzQ2MjhhNTctZTViZi00MzJmLTlmMTAtNjc4ODlhMDU3ZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyfTol0AAKsOkx+Sa9nnTZnjorsyShfpVY33 ee+4eK2MIWOHO3fGgVV59sm1YaZbv65pS6G8/N/y6RgmY11eRhqROQzCHZP7J192 l5DGpF8M63+HHfHeXtpziDbNvY/s3b309x/4VimmvRxQCPE71KzQLp13Mdy2pEB0 UeyhjFU74PY1AYG0zYVrMqgSylLLf6ltoEYLxm+STPdhiFYLMJBKUVESrm5wuusD fP7iUpEOwnVHFjy0ezXgtQetJtNCugWHeJ5rvpsV+zBl/GlRhaYsqJ5hf4vjtdwB QRVJThQF6OG+yrgH+aharRJ1xpTFChM4tdY5CrpFouDayylxBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlE3rcR0ZffsfdZf/RXeAHtfRgQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmIxMWYyMjQtOTk3OC0z NTMwLWFhMjktZjA4MTlkYzQzNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELTyZsaKytU5+i5v2lFqhnISPNQGlGkwoflyFBrJiANZKiztLAyuitZ rcglhdf7/1mTv38rBzw52YgAFPYXs3o/5c1hLc9Ekr5b5v1kuLV0v4RcvlCDL0uD rIRp36H3Az5DwRNdWDauAdGMljpyvXoeMKlTT5oGdjuzUeK80sF0BPBoPHDsw9td yt1DID9oub1VmjdTpHdGmjQZojr712XRm8ElWyXIPXgDspDR8088so/XW6f+HphK +ju6YByeLq/cruNdH2m7bzRNUi7S7w+0l3MmAr+pOCOHe/SkqzyvNeX9MLoe7ARq 4h5LS3rV/6dLxzT4wzowqVU+be3srkc= -----END CERTIFICATE-----Generated at Thu Sep 3 09:26:00 2026 by rpki-client