$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b9bed61-515a-3b93-9d14-c2cd66f54156.roa File: 2b9bed61-515a-3b93-9d14-c2cd66f54156.roa (raw, json) Hash identifier: iVJvAb7Pxf/UhFexj4dpBWGKpA/rv9m+U1vCuwS2er0= Subject key identifier: 54:DC:7A:8D:1A:72:A6:44:11:C4:D4:8E:41:25:B6:4F:4B:36:8C:C4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232482E2D03B60B06A6C80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b9bed61-515a-3b93-9d14-c2cd66f54156.roa Signing time: Wed 19 Aug 2026 18:03:37 +0000 ROA not before: Wed 19 Aug 2026 18:03:37 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 192.67.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:24:82:e2:d0:3b:60:b0:6a:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:37 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=975fca2f-d772-49ae-952e-3ffbbb476b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:3d:33:62:01:16:8c:8d:55:2b:c1:56:49: aa:a5:23:b5:9b:f1:d1:e5:05:fe:c3:76:29:30:dd: 43:fc:35:f2:a2:ab:f4:c0:e7:63:34:99:33:f1:2f: c1:62:0f:d2:c4:d9:ce:a4:5f:07:c1:11:d8:9e:e6: 08:6d:d2:84:a8:c9:87:cb:04:b5:0a:a8:d2:02:82: c2:91:e2:58:5a:b7:74:5a:fc:0c:51:47:3e:58:03: 3b:70:51:70:04:ce:d3:3e:40:8e:d1:51:65:de:74: a9:57:57:c2:b6:4d:78:e3:b0:5d:19:dd:4b:7f:96: 78:0b:c1:8e:b0:4d:2a:26:25:09:08:a4:71:03:ce: 61:ad:ad:95:de:df:e4:06:76:5e:75:83:76:b9:3f: ff:c2:ad:3f:fb:1a:77:a8:27:2e:06:92:f9:e2:59: 00:6f:13:1c:96:5f:80:ff:81:56:0d:1d:59:f0:7d: 40:28:3b:91:4c:5f:d0:74:80:c2:2b:42:53:09:b3: 21:78:cb:c5:49:ba:c8:85:60:30:c9:29:4a:b5:41: ce:a1:8d:24:d9:b1:83:fb:f7:b1:bb:12:3a:1e:52: 7d:cc:1f:d1:b8:95:f2:c8:0f:15:5c:70:bc:90:e6: 9e:4e:0b:79:c3:80:49:d7:06:fb:61:92:19:c2:cb: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DC:7A:8D:1A:72:A6:44:11:C4:D4:8E:41:25:B6:4F:4B:36:8C:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b9bed61-515a-3b93-9d14-c2cd66f54156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.67.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:fc:e2:25:16:ea:c6:cb:9a:22:77:72:59:f1:a6:76:e3:95: 8f:35:07:6b:23:c0:89:40:3d:68:5b:7a:57:a6:1e:9d:2e:df: 81:25:78:3a:0f:84:fa:3e:52:c9:d3:8d:74:bc:e6:b3:00:a2: 5a:8b:3b:b8:f4:22:b3:f6:d2:e5:cd:02:9a:73:ac:49:07:32: 72:14:40:47:7a:7d:25:42:11:5b:54:72:b4:95:32:73:ae:dd: 98:16:cd:f3:b7:4b:c2:38:1f:e9:c7:d1:55:b2:03:13:bf:86: 2f:5a:7e:3b:24:ba:89:88:b3:af:80:7c:a0:3c:46:7a:9c:c5: 39:82:22:04:9f:57:08:64:70:c6:aa:fa:5a:cd:57:ef:8d:8f: c1:2c:3a:4f:a1:a2:ae:27:2e:46:00:80:85:66:8f:84:d6:99: c2:a3:b8:06:85:90:89:8d:bf:28:ad:00:ff:30:f6:5c:69:b3: 3b:aa:bb:bd:17:0c:00:8f:b0:a3:c7:d3:ec:01:71:28:e2:41: 06:fa:eb:cd:6e:1e:5e:b7:d6:00:06:4f:7e:86:87:d9:62:85: f4:7d:4a:ad:05:ef:46:d4:7b:00:d8:28:dd:16:e5:b7:60:c3: ee:65:4f:dc:ad:18:4f:e2:a3:20:83:97:dd:72:c9:be:3f:9b: 18:fc:cc:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIySC4tA7YLBqbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDMzN1oXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk OTc1ZmNhMmYtZDc3Mi00OWFlLTk1MmUtM2ZmYmJiNDc2YjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCM9M2IBFoyNVSvBVkmqpSO1m/HR5QX+w3Yp MN1D/DXyoqv0wOdjNJkz8S/BYg/SxNnOpF8HwRHYnuYIbdKEqMmHywS1CqjSAoLC keJYWrd0WvwMUUc+WAM7cFFwBM7TPkCO0VFl3nSpV1fCtk1447BdGd1Lf5Z4C8GO sE0qJiUJCKRxA85hra2V3t/kBnZedYN2uT//wq0/+xp3qCcuBpL54lkAbxMcll+A /4FWDR1Z8H1AKDuRTF/QdIDCK0JTCbMheMvFSbrIhWAwySlKtUHOoY0k2bGD+/ex uxI6HlJ9zB/RuJXyyA8VXHC8kOaeTgt5w4BJ1wb7YZIZwsv9vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTceo0acqZEEcTUjkEltk9LNozEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmI5YmVkNjEtNTE1YS0z YjkzLTlkMTQtYzJjZDY2ZjU0MTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwEPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD84iUW6sbLmiJ3clnxpnbjlY81B2sjwIlAPWhbelemHp0u34EleDoP hPo+UsnTjXS85rMAolqLO7j0IrP20uXNAppzrEkHMnIUQEd6fSVCEVtUcrSVMnOu 3ZgWzfO3S8I4H+nH0VWyAxO/hi9afjskuomIs6+AfKA8RnqcxTmCIgSfVwhkcMaq +lrNV++Nj8EsOk+hoq4nLkYAgIVmj4TWmcKjuAaFkImNvyitAP8w9lxpszuqu70X DACPsKPH0+wBcSjiQQb6681uHl631gAGT36Gh9lihfR9Sq0F70bUewDYKN0W5bdg w+5lT9ytGE/ioyCDl91yyb4/mxj8zJE= -----END CERTIFICATE-----Generated at Thu Sep 17 12:13:20 2026 by rpki-client