$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/34eafa6e-11a8-3c3b-a3e7-7e5a9402a347.roa File: 34eafa6e-11a8-3c3b-a3e7-7e5a9402a347.roa (raw, json) Hash identifier: QPJn2nhfFX475lMZtiTxiHPyxnRwATSqKiDll9kA1OM= Subject key identifier: CF:BD:38:0A:35:AC:E4:15:3E:24:E7:8E:F6:DF:B7:39:09:19:9D:4A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232474447858BB8C392D80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/34eafa6e-11a8-3c3b-a3e7-7e5a9402a347.roa Signing time: Wed 19 Aug 2026 18:03:37 +0000 ROA not before: Wed 19 Aug 2026 18:03:37 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 192.41.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:24:74:44:78:58:bb:8c:39:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:37 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=726bbb38-761e-4bec-8812-c35cb7cf4921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:41:6c:48:f4:f0:4d:3b:55:da:ad:97:d4: ea:8a:cb:c3:bf:64:11:07:e9:73:a5:5c:1a:e8:81: 40:a7:3b:9a:fe:cf:92:f5:32:6e:31:33:7a:d9:ea: b7:93:0c:43:8f:07:96:0e:1b:d9:97:d4:e3:15:79: 68:45:d4:a3:b2:3f:48:54:f7:be:03:3f:66:a7:5c: 04:ae:ce:1c:0c:2e:e1:9b:ff:31:76:b9:99:ee:15: 33:ae:54:ba:64:8e:7c:b6:fa:9d:89:92:f4:20:a9: f6:62:58:24:aa:5d:8c:0c:4c:9c:a4:47:0d:93:3a: f5:39:0d:83:a0:79:67:4a:0d:78:39:0b:1a:ee:0b: c4:9b:f1:7c:f2:3d:e8:50:fe:5e:b2:d0:6e:08:58: 8a:c5:3b:98:d4:79:9c:08:71:bb:37:93:51:93:fd: 57:ef:20:3c:60:09:33:7b:9d:46:2e:5e:03:6a:64: c5:b9:04:b5:c4:21:28:bb:93:c9:36:ab:80:cc:1e: ab:18:64:b3:a0:0c:02:2f:44:e0:0e:ec:03:d6:d9: 7b:78:56:07:41:d2:3d:af:d9:a6:6e:2b:9f:f3:e1: 8f:be:28:eb:dd:9f:de:d5:a0:d2:4d:e2:c1:6d:b0: 40:c3:43:54:f8:cd:48:09:3c:a7:ac:02:b8:f9:90: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BD:38:0A:35:AC:E4:15:3E:24:E7:8E:F6:DF:B7:39:09:19:9D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/34eafa6e-11a8-3c3b-a3e7-7e5a9402a347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.41.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:cf:bd:00:c4:19:2a:f8:0e:69:12:8b:0d:26:6e:57:78:b7: ec:9e:e7:73:ed:ac:ab:0d:47:1c:bd:29:5d:9f:da:79:84:eb: eb:20:57:c3:59:f9:0a:a3:7e:7c:07:f3:30:89:29:10:c9:01: 41:12:5a:9e:2a:a5:08:25:b2:29:af:d7:66:4e:5f:0b:de:9e: c3:ca:57:9a:ec:9d:2a:3c:7c:82:ad:c1:7e:cb:1a:ce:8b:9a: e1:a4:22:83:c0:cf:5a:92:5b:71:dd:05:d1:fd:7e:b6:ed:c8: c3:78:17:24:88:09:56:bd:95:d3:24:5c:1e:1d:eb:13:c2:14: f8:dc:29:a8:fb:37:25:9d:6d:7c:cb:22:e3:e2:a3:42:bd:55: b1:a5:0b:e8:36:5b:dd:6a:d2:6a:c5:f4:12:5c:bf:5b:c1:de: c9:c5:42:91:8b:f1:90:f8:9f:31:98:ea:e4:73:c4:d4:18:80: 84:c1:39:99:5e:fd:db:bc:62:27:c1:b8:6c:f7:e8:4c:56:6d: 8f:e0:d6:46:80:bc:40:a6:0c:a7:11:36:a3:11:7a:c9:49:e9: d0:1c:82:69:7a:6a:d0:5a:e0:ed:10:34:65:77:13:08:5d:6c: 5b:83:51:1b:96:bf:6c:c0:59:c7:12:c7:01:81:36:b3:f0:04: 17:3c:03:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyR0RHhYu4w5LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDMzN1oXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk NzI2YmJiMzgtNzYxZS00YmVjLTg4MTItYzM1Y2I3Y2Y0OTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju1BbEj08E07Vdqtl9TqisvDv2QRB+lzpVwa 6IFApzua/s+S9TJuMTN62eq3kwxDjweWDhvZl9TjFXloRdSjsj9IVPe+Az9mp1wE rs4cDC7hm/8xdrmZ7hUzrlS6ZI58tvqdiZL0IKn2Ylgkql2MDEycpEcNkzr1OQ2D oHlnSg14OQsa7gvEm/F88j3oUP5estBuCFiKxTuY1HmcCHG7N5NRk/1X7yA8YAkz e51GLl4DamTFuQS1xCEou5PJNquAzB6rGGSzoAwCL0TgDuwD1tl7eFYHQdI9r9mm biuf8+GPvijr3Z/e1aDSTeLBbbBAw0NU+M1ICTynrAK4+ZBzDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+9OAo1rOQVPiTnjvbftzkJGZ1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzRlYWZhNmUtMTFhOC0z YzNiLWEzZTctN2U1YTk0MDJhMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLPvQDEGSr4DmkSiw0mbld4t+ye53PtrKsNRxy9KV2f2nmE6+sgV8NZ +QqjfnwH8zCJKRDJAUESWp4qpQglsimv12ZOXwvensPKV5rsnSo8fIKtwX7LGs6L muGkIoPAz1qSW3HdBdH9frbtyMN4FySICVa9ldMkXB4d6xPCFPjcKaj7NyWdbXzL IuPio0K9VbGlC+g2W91q0mrF9BJcv1vB3snFQpGL8ZD4nzGY6uRzxNQYgITBOZle /du8YifBuGz36ExWbY/g1kaAvECmDKcRNqMReslJ6dAcgml6atBa4O0QNGV3Ewhd bFuDURuWv2zAWccSxwGBNrPwBBc8A/s= -----END CERTIFICATE-----Generated at Thu Sep 17 12:12:27 2026 by rpki-client