$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa File: 3af3f3e9-925f-3f08-8530-42b4b99328f5.roa (raw, json) Hash identifier: HeKkCwjFW5l6xxAOrlHaMnJeeI39yF5U8pakO1duhDs= Subject key identifier: 3B:64:3E:35:9F:C7:24:5E:9E:03:F6:AF:B9:9D:7C:17:0A:07:B1:99 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E016B2805B30CE8217985B900 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa Signing time: Sat 30 May 2026 13:00:10 +0000 ROA not before: Sat 30 May 2026 13:00:10 +0000 ROA not after: Fri 28 Aug 2026 13:00:10 +0000 asID: 203020 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:01:6b:28:05:b3:0c:e8:21:79:85:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 30 13:00:10 2026 GMT Not After : Aug 28 13:00:10 2026 GMT Subject: CN=d2b4a2c5-ff50-49d1-88f9-a2fa4f5e65f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:4c:e5:c4:70:61:2f:d8:18:7f:0e:46:83: 2c:94:7b:b3:75:7d:54:0f:6b:05:1d:16:87:d6:94: 9c:f0:da:0b:f0:3c:3b:f6:f7:b3:c9:93:c2:77:9a: 48:36:8a:8e:11:ab:05:0b:a0:89:89:12:ab:b0:10: 99:03:5a:09:e4:fb:92:50:df:d4:a6:72:3d:2b:c1: d1:12:f0:f4:cd:bc:6a:7f:eb:82:d5:9b:f7:a3:05: 20:b4:14:1a:14:bf:49:d0:2d:0c:d7:bc:45:17:1b: ae:88:ce:d5:e9:76:e7:62:5c:8d:0f:7d:49:62:13: 48:5c:33:0c:2b:1b:8d:50:94:84:15:92:3e:03:35: c8:42:1d:89:a0:e4:1f:68:0e:88:f2:15:7e:71:51: d9:48:ce:27:eb:85:9f:96:09:db:95:28:e0:d7:91: a8:ca:d4:22:e5:ac:c1:e2:9a:96:ff:f6:8e:cf:6a: 7b:a9:11:bc:36:d7:9d:1d:a9:b0:af:22:2a:4b:7a: 11:ec:6c:0a:0d:5b:01:87:08:ca:4e:78:7d:8c:bc: e9:1d:a3:64:3f:10:d9:83:c2:c8:60:75:0b:44:8a: a7:14:39:a6:4f:ac:ee:af:f4:0c:6a:a1:27:e6:cb: 54:8e:fc:f2:81:76:ca:47:ad:7c:b7:37:f3:3c:86: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:64:3E:35:9F:C7:24:5E:9E:03:F6:AF:B9:9D:7C:17:0A:07:B1:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:12:84:27:fe:e9:55:b8:7c:2b:51:af:6d:62:1d:c8:aa:f4: 33:ec:09:d9:f2:67:8e:31:64:e0:f8:fc:df:dd:0d:fc:f6:55: 43:df:bf:4f:1a:5f:bf:9a:12:9e:e9:1e:ba:8b:34:d7:8e:8c: 34:d9:ac:2e:18:1d:ae:39:7e:23:49:d3:9d:13:12:98:90:5f: 94:92:9c:49:c0:91:5c:e6:57:55:4c:82:fb:96:09:71:ba:2b: a5:87:2b:fe:c9:7f:0a:eb:a4:12:d4:a0:39:3f:d7:89:18:4e: 2e:fc:09:69:1e:4d:f9:d2:01:bb:3d:38:80:ce:c2:b3:25:1c: e4:12:f6:d8:4c:e1:56:0a:da:c6:c0:2e:b7:f8:0c:11:08:fe: ea:f4:22:f6:e9:5e:a2:44:2b:e9:f2:cc:7f:90:32:db:0d:60: 56:e5:44:09:a9:cc:72:d2:f1:47:73:44:33:97:30:39:ee:08: 8b:4d:2f:80:5e:15:15:78:1d:a5:b9:2f:7e:12:e3:8e:40:e4: 07:9a:b7:df:b2:ad:2e:1a:26:63:b3:06:8c:3e:bf:c8:a7:af: 99:ea:14:ce:56:b5:fb:bb:b3:6e:71:f5:f6:cc:1d:9f:50:a7: 38:d4:41:8e:a8:36:5a:ed:f6:e4:2c:e1:dd:d8:e1:94:3e:82: 61:c5:0a:5d -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE4BaygFswzoIXmFuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDUzMDEzMDAxMFoXDTI2MDgyODEzMDAxMFowLzEtMCsGA1UEAxMk ZDJiNGEyYzUtZmY1MC00OWQxLTg4ZjktYTJmYTRmNWU2NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLRM5cRwYS/YGH8ORoMslHuzdX1UD2sFHRaH 1pSc8NoL8Dw79vezyZPCd5pINoqOEasFC6CJiRKrsBCZA1oJ5PuSUN/UpnI9K8HR EvD0zbxqf+uC1Zv3owUgtBQaFL9J0C0M17xFFxuuiM7V6XbnYlyND31JYhNIXDMM KxuNUJSEFZI+AzXIQh2JoOQfaA6I8hV+cVHZSM4n64WflgnblSjg15GoytQi5azB 4pqW//aOz2p7qRG8NtedHamwryIqS3oR7GwKDVsBhwjKTnh9jLzpHaNkPxDZg8LI YHULRIqnFDmmT6zur/QMaqEn5stUjvzygXbKR618tzfzPIYhtQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFDtkPjWfxyRengP2r7mdfBcKB7GZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2FmM2YzZTktOTI1Zi0z ZjA4LTg1MzAtNDJiNGI5OTMyOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEsShCf+6VW4fCtRr21iHciq9DPsCdnyZ44xZOD4 /N/dDfz2VUPfv08aX7+aEp7pHrqLNNeOjDTZrC4YHa45fiNJ050TEpiQX5SSnEnA kVzmV1VMgvuWCXG6K6WHK/7JfwrrpBLUoDk/14kYTi78CWkeTfnSAbs9OIDOwrMl HOQS9thM4VYK2sbALrf4DBEI/ur0IvbpXqJEK+nyzH+QMtsNYFblRAmpzHLS8Udz RDOXMDnuCItNL4BeFRV4HaW5L34S445A5Aeat9+yrS4aJmOzBow+v8inr5nqFM5W tfu7s25x9fbMHZ9QpzjUQY6oNlrt9uQs4d3Y4ZQ+gmHFCl0= -----END CERTIFICATE-----Generated at Wed Jun 3 19:19:50 2026 by rpki-client