$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa File: 3af3f3e9-925f-3f08-8530-42b4b99328f5.roa (raw, json) Hash identifier: pTkebIkpL56Zow4xV2VU7WoJ+ViXz1PeaFoWHbHbC+Y= Subject key identifier: B3:D8:F1:C4:6E:61:8A:B2:8A:60:33:3E:5C:A1:91:40:B3:76:D9:4F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EA79B4D98337199C497E5FF88 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 203020 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:4d:98:33:71:99:c4:97:e5:ff:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=900eca96-da78-4459-abf4-64e4e8363d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:45:a7:d8:65:74:de:84:b8:cc:44:64:65:2c: 67:48:3a:04:4c:37:0b:39:39:cf:83:4c:a3:35:e5: 83:31:2c:dc:b5:4c:d4:8d:a7:cc:5e:ad:59:2a:11: ce:9b:bc:68:b2:b7:ed:ff:2d:b5:69:79:ec:f9:e1: 51:c3:64:54:1c:91:f6:ed:89:b0:2b:4e:10:21:54: 65:a9:56:d9:a9:8c:59:65:5c:00:78:cb:85:e0:7d: 91:2c:1c:9e:df:77:e9:c0:2f:44:36:34:cb:7d:fc: e3:e6:0b:1d:bf:24:e7:38:08:18:06:1f:75:7b:4a: d4:df:3a:b4:b0:90:94:56:5b:7b:2c:ac:20:63:29: 47:f0:5c:40:e2:57:b6:2c:59:1c:13:85:74:c3:b7: af:b0:00:a4:8e:80:6a:81:1e:35:17:99:70:3f:cd: ce:ce:26:77:f3:51:95:e9:45:b4:4d:4c:ed:2e:67: d6:46:85:5c:fa:2a:ed:f0:bb:af:38:69:fa:51:b3: cd:87:05:57:10:fd:5b:78:6f:dd:b2:6e:65:0a:dd: 83:57:f9:96:1a:bf:4f:01:ea:61:d3:23:dc:b6:0e: 4a:9d:f9:65:7a:49:53:e7:4d:b0:70:92:8c:74:86: 86:5a:bb:72:ba:64:56:25:9b:04:2f:d0:69:84:37: 00:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D8:F1:C4:6E:61:8A:B2:8A:60:33:3E:5C:A1:91:40:B3:76:D9:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:0a:41:62:d1:fe:81:22:d7:17:db:a4:46:cf:b2:38:8b:94: 18:b2:ee:fa:d3:53:0e:45:fe:3c:5b:f5:e6:75:97:1b:76:44: 59:5d:43:ea:6d:ad:d1:f1:15:2d:83:50:bb:01:c4:05:d3:f1: 0c:cc:59:e7:04:33:4c:c1:25:eb:8b:98:fa:d3:3c:bc:83:59: 8c:60:ef:a9:cc:8f:da:c2:42:43:21:11:57:67:8f:d8:d8:9e: 20:c5:80:da:9c:fe:ce:81:90:3a:8a:f5:86:d3:1c:c9:68:54: d3:b3:7c:38:40:df:9e:b1:25:23:6e:37:bf:c1:a7:cb:82:73: 8d:51:ed:89:a4:a4:bb:12:56:2f:c5:b2:af:80:05:a0:1f:56: 63:88:ca:22:6d:c9:cc:55:ff:47:29:51:ae:63:f7:ad:41:a8: 9b:e0:f6:d0:ce:e4:bb:73:e3:5d:80:7c:ab:b4:9c:2e:83:8d: 5e:2e:0b:9e:39:43:a6:67:27:99:96:31:86:8f:3e:ac:55:39: 34:4b:c7:10:9b:5f:b0:b8:1c:5b:6d:ee:a0:b3:fb:52:b2:fe: 38:19:85:6a:4c:00:0b:ae:c2:6e:eb:39:4e:cf:bc:54:73:87: 29:32:43:be:f8:be:38:72:2a:90:f6:3e:e2:ee:5e:f7:b6:a2: 26:3a:82:40 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE6nm02YM3GZxJfl/4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTAwZWNhOTYtZGE3OC00NDU5LWFiZjQtNjRlNGU4MzYzZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UWn2GV03oS4zERkZSxnSDoETDcLOTnPg0yj NeWDMSzctUzUjafMXq1ZKhHOm7xosrft/y21aXns+eFRw2RUHJH27YmwK04QIVRl qVbZqYxZZVwAeMuF4H2RLBye33fpwC9ENjTLffzj5gsdvyTnOAgYBh91e0rU3zq0 sJCUVlt7LKwgYylH8FxA4le2LFkcE4V0w7evsACkjoBqgR41F5lwP83OziZ381GV 6UW0TUztLmfWRoVc+irt8LuvOGn6UbPNhwVXEP1beG/dsm5lCt2DV/mWGr9PAeph 0yPctg5KnflleklT502wcJKMdIaGWrtyumRWJZsEL9BphDcAbQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFLPY8cRuYYqyimAzPlyhkUCzdtlPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2FmM2YzZTktOTI1Zi0z ZjA4LTg1MzAtNDJiNGI5OTMyOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAQKQWLR/oEi1xfbpEbPsjiLlBiy7vrTUw5F/jxb 9eZ1lxt2RFldQ+ptrdHxFS2DULsBxAXT8QzMWecEM0zBJeuLmPrTPLyDWYxg76nM j9rCQkMhEVdnj9jYniDFgNqc/s6BkDqK9YbTHMloVNOzfDhA356xJSNuN7/Bp8uC c41R7YmkpLsSVi/Fsq+ABaAfVmOIyiJtycxV/0cpUa5j961BqJvg9tDO5Ltz412A fKu0nC6DjV4uC545Q6ZnJ5mWMYaPPqxVOTRLxxCbX7C4HFtt7qCz+1Ky/jgZhWpM AAuuwm7rOU7PvFRzhykyQ774vjhyKpD2PuLuXve2oiY6gkA= -----END CERTIFICATE-----Generated at Thu Sep 10 18:13:49 2026 by rpki-client