$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37f6277a-fa09-3f67-9423-5e38803dea58.roa File: 37f6277a-fa09-3f67-9423-5e38803dea58.roa (raw, json) Hash identifier: YRBKkEvebeJKFQJohHCNMMO+kkISXQfQ/XP2bcmhlG4= Subject key identifier: 0C:0B:61:81:EA:C8:1D:A3:3D:B0:85:10:72:4A:26:91:98:75:2D:67 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232514B124821F504C2300 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37f6277a-fa09-3f67-9423-5e38803dea58.roa Signing time: Wed 19 Aug 2026 18:03:38 +0000 ROA not before: Wed 19 Aug 2026 18:03:38 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 198.252.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:25:14:b1:24:82:1f:50:4c:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:38 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=34b217cd-6f95-4ad0-aa4b-47aca5738bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3d:32:38:1a:0f:25:8e:31:3a:ab:c2:8d:9b: 59:73:46:a0:86:fa:3c:83:51:44:bf:78:29:f2:81: 01:95:b7:82:cc:53:34:4a:4f:f2:26:f9:60:8d:0a: 10:e9:25:67:91:c6:af:69:ab:0c:0d:69:79:1f:37: a3:22:5a:1d:e6:00:14:ed:d9:92:63:15:6c:d9:e8: f4:f0:31:bb:9a:19:45:81:fc:c8:d9:b3:5f:79:6a: 32:74:f1:e6:a1:29:c1:e8:c1:df:82:57:30:19:3c: 6b:36:e7:12:a9:c3:06:a6:d5:fd:92:21:a8:6b:03: 9c:4d:a7:79:82:eb:28:2e:20:95:dc:90:45:b9:95: 5c:ac:9d:a3:cb:92:a0:73:07:c0:e3:fb:8d:f5:63: 42:2e:a9:d4:99:67:26:d8:a6:11:c9:27:cd:60:6c: a6:44:66:33:c5:9d:65:33:5e:42:ee:9e:91:52:0c: d7:2b:47:73:97:e9:35:e5:2e:ad:0e:da:48:cc:f9: ba:6a:4c:47:2f:6e:d7:d2:c1:72:31:cd:61:4a:36: 14:93:2a:bf:80:1c:c3:1b:d3:4c:bc:ae:90:9b:72: 06:5c:8d:ca:3f:f6:cd:7f:04:1e:dc:9c:60:83:53: 08:cd:fa:10:1c:3b:c3:5f:07:46:ae:b2:a4:41:e6: 62:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:61:81:EA:C8:1D:A3:3D:B0:85:10:72:4A:26:91:98:75:2D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37f6277a-fa09-3f67-9423-5e38803dea58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.252.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d5:88:f5:91:14:36:0a:8a:f3:9e:89:06:cc:76:a7:9b:05: 71:f3:ef:0c:1f:82:aa:a0:3f:ff:21:32:e1:f8:1f:c4:d1:bd: 1c:23:96:00:fc:60:12:a2:57:e8:85:4c:2c:c2:12:9b:41:41: da:ed:8a:b8:dc:ad:5b:72:ee:b5:d4:4f:2a:c8:57:12:c3:79: c7:b2:ff:cb:e9:88:bb:a9:fe:6f:35:6b:53:49:f9:7d:d0:b7: 49:4a:2f:09:6d:b6:c5:8b:27:2b:ab:e3:d1:27:02:19:9e:de: 06:f5:3d:44:b9:0f:c7:0f:c1:91:42:4c:90:50:78:d2:ff:66: e6:5e:ba:84:ba:bb:52:8b:d3:92:7d:4d:48:56:fe:56:e1:dd: d6:2e:13:30:8c:42:07:8c:ce:23:9f:60:4b:88:f6:ab:a0:db: fa:2f:02:e9:64:de:f8:7f:82:7f:9c:25:5e:3a:ba:b8:84:17: 75:d6:56:bd:75:b3:29:95:42:ba:a5:bd:ab:f1:4c:6c:cc:44: 2f:bd:b5:92:f7:17:85:fd:e9:71:15:f0:56:80:6e:e5:a8:f7: dd:0f:e3:ea:1e:6c:a2:54:11:29:f5:40:07:c5:08:16:eb:94: 6d:fc:16:10:28:c2:9d:62:1b:cf:57:27:29:df:8d:6f:7f:96: e0:85:2a:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyUUsSSCH1BMIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDMzOFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk MzRiMjE3Y2QtNmY5NS00YWQwLWFhNGItNDdhY2E1NzM4YmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz0yOBoPJY4xOqvCjZtZc0aghvo8g1FEv3gp 8oEBlbeCzFM0Sk/yJvlgjQoQ6SVnkcavaasMDWl5HzejIlod5gAU7dmSYxVs2ej0 8DG7mhlFgfzI2bNfeWoydPHmoSnB6MHfglcwGTxrNucSqcMGptX9kiGoawOcTad5 gusoLiCV3JBFuZVcrJ2jy5KgcwfA4/uN9WNCLqnUmWcm2KYRySfNYGymRGYzxZ1l M15C7p6RUgzXK0dzl+k15S6tDtpIzPm6akxHL27X0sFyMc1hSjYUkyq/gBzDG9NM vK6Qm3IGXI3KP/bNfwQe3Jxgg1MIzfoQHDvDXwdGrrKkQeZiTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwLYYHqyB2jPbCFEHJKJpGYdS1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzdmNjI3N2EtZmEwOS0z ZjY3LTk0MjMtNWUzODgwM2RlYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxvzCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnViPWRFDYKivOeiQbMdqebBXHz7wwfgqqgP/8hMuH4H8TRvRwjlgD8 YBKiV+iFTCzCEptBQdrtirjcrVty7rXUTyrIVxLDecey/8vpiLup/m81a1NJ+X3Q t0lKLwlttsWLJyur49EnAhme3gb1PUS5D8cPwZFCTJBQeNL/ZuZeuoS6u1KL05J9 TUhW/lbh3dYuEzCMQgeMziOfYEuI9qug2/ovAulk3vh/gn+cJV46uriEF3XWVr11 symVQrqlvavxTGzMRC+9tZL3F4X96XEV8FaAbuWo990P4+oebKJUESn1QAfFCBbr lG38FhAowp1iG89XJynfjW9/luCFKpo= -----END CERTIFICATE-----Generated at Thu Sep 17 16:04:27 2026 by rpki-client