$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/308aeca1-779b-3757-a66a-199fcccdad87.roa File: 308aeca1-779b-3757-a66a-199fcccdad87.roa (raw, json) Hash identifier: aOJiM0OzOLO0o1VJtp6f+hd0YSl9sKeteBOEzfLzD3k= Subject key identifier: 77:04:1A:19:83:38:36:A0:4F:17:46:EB:20:F6:50:8E:44:1C:BA:96 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233D6B18497A5BCF0C9800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/308aeca1-779b-3757-a66a-199fcccdad87.roa Signing time: Wed 19 Aug 2026 18:03:49 +0000 ROA not before: Wed 19 Aug 2026 18:03:49 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 32634 IP address blocks: 199.234.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3d:6b:18:49:7a:5b:cf:0c:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:49 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=e0dfc4ab-db01-4c82-8041-f6a9e30117a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:e8:a2:4d:ec:e9:57:60:42:2c:5c:2d:92: 3f:52:25:58:19:df:d4:53:84:44:f5:01:30:2b:59: 02:7c:34:85:40:e4:b1:3c:63:77:75:f3:ae:ae:63: 53:6c:ca:bc:86:25:29:ff:69:b6:94:d1:03:14:b4: c4:8f:7e:6d:2d:94:da:be:c4:a1:53:4f:a6:ad:16: cc:28:a7:fc:4f:75:3a:ef:c0:3e:fc:8e:0f:50:c0: e3:a1:4a:39:20:62:3b:48:fa:1b:f9:5c:b0:73:64: 60:9f:90:04:d9:25:43:d3:8e:ae:32:4c:89:11:b5: 2e:88:e1:3d:20:15:2e:0b:7e:e5:3e:11:24:1e:f3: ce:ce:9b:79:55:33:32:b8:81:15:7a:19:51:0a:6f: c5:ba:ea:12:a8:fc:73:cf:be:ae:49:88:21:dc:2a: cb:ac:07:f9:cd:54:10:5d:14:50:5b:e6:40:7e:c4: 10:47:f5:bc:7e:a3:64:89:ed:95:19:2e:e4:6d:ca: 17:1d:94:d6:63:c3:58:1f:ed:61:1c:59:71:ca:e9: 8a:df:7c:41:f2:4f:af:d7:08:4b:98:a0:aa:f4:2b: 4e:26:31:25:80:ba:6a:4a:91:15:26:83:aa:19:9f: 97:36:fc:89:07:c2:fa:ed:64:cf:c4:5c:4f:4a:06: 20:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:04:1A:19:83:38:36:A0:4F:17:46:EB:20:F6:50:8E:44:1C:BA:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/308aeca1-779b-3757-a66a-199fcccdad87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 199.234.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:fa:63:43:64:12:4f:df:10:48:61:ef:76:f7:1a:db:40:58: 55:41:52:ac:8a:6f:46:23:0f:a1:61:20:e2:9d:2e:98:e5:33: f5:d3:c9:a6:82:70:30:96:44:74:4a:b0:24:e6:a4:12:02:b4: 0d:78:13:48:6a:fa:6e:22:f5:81:58:ec:11:b4:cb:f5:32:fb: a5:dc:d6:cd:62:37:39:98:0e:4d:01:15:2c:df:39:96:ba:9a: b1:41:cc:c3:63:22:92:3f:79:01:b3:ac:60:f4:97:2a:12:b1: c4:2f:7e:71:9d:16:dd:00:f1:37:11:e9:42:e6:d8:4d:ee:b0: 38:45:3e:db:31:bf:0e:97:61:71:37:58:9f:69:22:f8:d2:8d: 2a:53:39:7f:73:27:a2:4d:f0:70:9b:29:fe:2b:fa:e0:82:38: b9:f5:3f:97:33:70:82:fe:e4:31:b6:ff:55:0f:f1:10:f7:b4: d8:06:7d:c8:b0:46:c9:9a:36:bc:0b:b8:68:21:eb:5b:b2:7e: 17:3c:8d:a7:e3:b3:7b:c3:84:17:91:32:3c:a9:41:84:6b:93: c8:fc:b8:07:21:c0:6f:fc:f6:a8:56:7f:55:18:c4:45:c6:c8: 4d:2f:5d:a7:de:e8:6d:e6:40:96:5e:1c:67:25:b1:69:6b:bb: 84:92:6b:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIz1rGEl6W88MmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ZTBkZmM0YWItZGIwMS00YzgyLTgwNDEtZjZhOWUzMDExN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9jook3s6VdgQixcLZI/UiVYGd/UU4RE9QEw K1kCfDSFQOSxPGN3dfOurmNTbMq8hiUp/2m2lNEDFLTEj35tLZTavsShU0+mrRbM KKf8T3U678A+/I4PUMDjoUo5IGI7SPob+Vywc2Rgn5AE2SVD046uMkyJEbUuiOE9 IBUuC37lPhEkHvPOzpt5VTMyuIEVehlRCm/FuuoSqPxzz76uSYgh3CrLrAf5zVQQ XRRQW+ZAfsQQR/W8fqNkie2VGS7kbcoXHZTWY8NYH+1hHFlxyumK33xB8k+v1whL mKCq9CtOJjElgLpqSpEVJoOqGZ+XNvyJB8L67WTPxFxPSgYgGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcEGhmDODagTxdG6yD2UI5EHLqWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzA4YWVjYTEtNzc5Yi0z NzU3LWE2NmEtMTk5ZmNjY2RhZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx+pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP6Y0NkEk/fEEhh73b3GttAWFVBUqyKb0YjD6FhIOKdLpjlM/XTyaaC cDCWRHRKsCTmpBICtA14E0hq+m4i9YFY7BG0y/Uy+6Xc1s1iNzmYDk0BFSzfOZa6 mrFBzMNjIpI/eQGzrGD0lyoSscQvfnGdFt0A8TcR6ULm2E3usDhFPtsxvw6XYXE3 WJ9pIvjSjSpTOX9zJ6JN8HCbKf4r+uCCOLn1P5czcIL+5DG2/1UP8RD3tNgGfciw RsmaNrwLuGgh61uyfhc8jafjs3vDhBeRMjypQYRrk8j8uAchwG/89qhWf1UYxEXG yE0vXafe6G3mQJZeHGclsWlru4SSa2I= -----END CERTIFICATE-----Generated at Thu Sep 17 14:24:30 2026 by rpki-client