$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2bf5ff37-18ff-3653-96e5-c6194cec608e.roa File: 2bf5ff37-18ff-3653-96e5-c6194cec608e.roa (raw, json) Hash identifier: TCsBUW3fPewvUwl0PoVwiAvKsKDJIcby9iItgaKWZ1w= Subject key identifier: 47:21:69:C2:7F:5F:DA:F3:46:F1:C1:E6:BA:32:11:70:F1:B6:FA:F0 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE42349EF72E4DC2FA48E4700 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2bf5ff37-18ff-3653-96e5-c6194cec608e.roa Signing time: Wed 19 Aug 2026 18:03:55 +0000 ROA not before: Wed 19 Aug 2026 18:03:55 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 174 IP address blocks: 198.84.16.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:49:ef:72:e4:dc:2f:a4:8e:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:55 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=0f060eab-8f73-45be-979c-9fc4e44bb5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:00:b7:47:b6:77:ec:8d:22:95:ae:42:4d:8d: f2:cb:2d:35:e5:24:06:8b:f0:f3:35:83:d8:50:fb: 56:40:68:e8:f8:c8:80:f6:e5:04:4c:f6:e9:20:af: aa:26:8b:e2:f6:c6:83:80:ed:fa:2b:16:eb:ba:54: 6c:2b:a9:fc:20:24:36:78:40:46:59:73:c2:16:64: 0e:97:48:7d:ba:fd:dc:59:6e:f1:90:e2:8b:95:40: 74:1c:22:27:c8:13:60:74:30:0e:1e:b3:b3:e4:b9: 90:98:15:45:c8:fd:aa:cd:a8:9e:f3:0e:25:e5:30: 9f:db:f7:96:4b:fe:dd:30:12:82:7d:9e:3a:c2:3e: 2a:13:1c:41:6b:b0:9f:71:e4:74:1a:c2:8c:41:86: c9:7e:cf:14:a5:a6:64:ef:f9:ef:2a:46:68:9b:70: 39:2c:59:ae:5e:03:cd:5a:2f:15:0a:a3:1f:81:9b: e0:e1:7e:86:e5:1f:da:b9:54:a1:41:7a:bc:c8:95: 33:f8:5f:6f:eb:02:cb:74:81:0d:fb:f6:c7:97:c7: 5d:14:84:0d:d9:96:bb:50:4c:66:7e:48:1e:b9:35: e7:4c:a1:e1:be:a0:3e:67:41:bc:d2:bf:ee:2a:3d: c7:56:39:72:6a:25:ff:b7:e8:c2:80:4d:d7:42:2d: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:21:69:C2:7F:5F:DA:F3:46:F1:C1:E6:BA:32:11:70:F1:B6:FA:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2bf5ff37-18ff-3653-96e5-c6194cec608e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.84.16.0/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:08:04:d6:dc:4f:46:8a:90:67:75:86:20:a8:39:86:57:0f: 7d:28:03:47:e1:90:2e:75:ef:2f:46:93:a8:fb:1c:26:93:45: 37:29:a3:ba:b3:75:9c:1e:60:b8:6f:ae:9d:19:d8:ee:89:92: e2:af:8c:39:30:8f:4a:c9:78:55:a5:30:07:25:5f:61:6f:a5: 06:00:3f:40:32:28:63:c3:bd:fa:d9:65:1e:d9:23:83:97:46: 92:e1:e4:08:9e:bc:f6:10:94:44:6c:e3:30:22:8f:1d:e3:d8: bc:54:ba:d4:03:72:0b:61:f7:2e:4a:79:bb:d9:1a:f9:e7:72: 25:e8:02:c2:4c:00:4b:bc:1f:65:00:6f:ec:51:61:58:aa:58: 31:d3:fa:8c:bb:4d:8d:64:89:90:23:cc:9d:2a:12:ed:9a:5d: 46:ac:08:9b:05:80:39:f6:39:70:79:02:fb:1f:8a:eb:4f:99: 3d:25:8c:61:8a:fc:fd:2a:43:8e:ee:e3:02:87:97:37:c0:93: 11:6c:cf:28:2f:e2:f1:25:8c:9f:0a:5a:dd:25:82:bb:a7:e6: 74:59:42:e1:f4:a1:2d:34:40:c0:cb:f9:c0:01:56:1c:6a:28: b7:71:7e:d6:f6:9d:52:42:49:56:fa:f1:69:84:33:7d:c0:39: c9:5e:76:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7kI0nvcuTcL6SORwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1NVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk MGYwNjBlYWItOGY3My00NWJlLTk3OWMtOWZjNGU0NGJiNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAC3R7Z37I0ila5CTY3yyy015SQGi/DzNYPY UPtWQGjo+MiA9uUETPbpIK+qJovi9saDgO36KxbrulRsK6n8ICQ2eEBGWXPCFmQO l0h9uv3cWW7xkOKLlUB0HCInyBNgdDAOHrOz5LmQmBVFyP2qzaie8w4l5TCf2/eW S/7dMBKCfZ46wj4qExxBa7CfceR0GsKMQYbJfs8UpaZk7/nvKkZom3A5LFmuXgPN Wi8VCqMfgZvg4X6G5R/auVShQXq8yJUz+F9v6wLLdIEN+/bHl8ddFIQN2Za7UExm fkgeuTXnTKHhvqA+Z0G80r/uKj3HVjlyaiX/t+jCgE3XQi1OgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEchacJ/X9rzRvHB5royEXDxtvrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmJmNWZmMzctMThmZi0z NjUzLTk2ZTUtYzYxOTRjZWM2MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUExlQQADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGCATW3E9GipBndYYgqDmGVw99KANH4ZAude8vRpOo+xwmk0U3KaO6 s3WcHmC4b66dGdjuiZLir4w5MI9KyXhVpTAHJV9hb6UGAD9AMihjw7362WUe2SOD l0aS4eQInrz2EJREbOMwIo8d49i8VLrUA3ILYfcuSnm72Rr553Il6ALCTABLvB9l AG/sUWFYqlgx0/qMu02NZImQI8ydKhLtml1GrAibBYA59jlweQL7H4rrT5k9JYxh ivz9KkOO7uMCh5c3wJMRbM8oL+LxJYyfClrdJYK7p+Z0WULh9KEtNEDAy/nAAVYc aii3cX7W9p1SQklW+vFphDN9wDnJXnYC -----END CERTIFICATE-----Generated at Thu Sep 3 12:58:51 2026 by rpki-client