$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c647cee-a4ee-3ea8-9a2c-861f84534236.roa File: 3c647cee-a4ee-3ea8-9a2c-861f84534236.roa (raw, json) Hash identifier: C7DnTvoOkvdvLfWUIT1vt4rBVHn7r4H2XEq6JQJGXto= Subject key identifier: 03:32:12:9D:C3:6D:1D:EA:4E:3E:EF:DC:C1:0B:D5:D3:25:99:3B:AC Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232661885E367EB9653AA8 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c647cee-a4ee-3ea8-9a2c-861f84534236.roa Signing time: Wed 19 Aug 2026 18:03:38 +0000 ROA not before: Wed 19 Aug 2026 18:03:38 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 199.88.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:26:61:88:5e:36:7e:b9:65:3a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:38 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=1b3bf54f-a328-467b-9c8c-5f235606257f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:ab:0a:bf:7e:e0:9d:90:cf:c5:10:d8:02: 7c:3e:53:81:6c:d9:17:13:a5:c9:18:c4:65:3a:58: ac:af:3b:0a:7f:ba:23:b0:59:5f:71:19:9d:8e:a5: 54:a5:0e:7e:8c:8d:d1:1d:d0:00:75:90:b1:98:87: 08:24:02:29:c3:d2:7f:4f:34:fb:ab:ae:11:b6:10: 28:73:06:07:28:18:f8:51:dc:b3:66:27:79:e7:fb: 84:19:25:4e:e0:0c:30:7f:13:75:99:30:e8:a1:a9: 45:2d:25:07:d0:05:46:6f:c8:e3:ef:11:94:37:d0: ca:7a:b2:56:4c:04:8f:31:b6:2b:ce:f1:72:f4:dc: 79:80:4a:be:39:94:9d:ea:15:b9:63:d5:98:c7:79: 87:3a:37:cc:ca:89:82:0f:2d:2c:0f:28:cf:92:ca: bf:a4:a6:70:c1:91:b9:10:56:85:2b:ef:c8:3c:a8: 9b:a6:fc:b8:7f:06:8a:c2:6e:85:2e:a9:5e:65:0c: 78:43:4f:f7:a1:f0:ea:61:22:64:64:0a:1f:9a:62: 64:29:63:41:e1:7d:37:4a:88:f3:15:db:b6:6f:27: 3d:06:f5:86:3d:15:d7:eb:6c:04:1e:99:2c:ae:55: d2:3b:32:a6:69:96:74:93:94:a6:92:30:ae:9b:c3: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:32:12:9D:C3:6D:1D:EA:4E:3E:EF:DC:C1:0B:D5:D3:25:99:3B:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c647cee-a4ee-3ea8-9a2c-861f84534236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 199.88.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:84:53:1b:35:3a:29:09:2f:07:6d:1a:d0:77:8e:ea:2f:0c: a6:c4:ad:58:6a:ff:0f:95:8b:86:cb:57:1a:f0:02:e1:7a:25: 0b:84:36:cc:43:21:7c:69:7a:6d:6e:10:94:a6:dc:4d:8f:9d: 0c:24:5f:71:dd:37:a0:f6:64:1b:02:6d:1a:50:ac:00:d0:0e: f9:ea:71:a6:6e:3d:86:8c:15:67:a3:57:fb:be:f8:04:4d:5e: ea:ba:27:14:61:d6:fe:1b:17:ab:3a:5e:fe:82:a4:10:d2:d0: f9:50:f4:4d:18:80:38:13:cf:75:69:c0:e3:ca:7f:c9:34:bc: 46:de:36:b5:9c:e8:b4:47:58:69:f0:da:3e:3a:5f:0a:42:38: 67:53:f2:66:5f:a8:bf:21:1a:b9:8e:de:85:4c:79:57:52:31: cf:ae:fb:42:ef:01:77:e9:12:6e:0d:e3:26:67:7f:6d:1f:aa: 2f:67:6c:f9:6f:2e:bb:6c:1e:91:99:15:4d:88:52:cd:d1:56: 06:98:81:ce:ab:65:cf:3d:ae:2f:a5:5b:68:7f:7b:30:86:72: 99:6c:1a:27:56:b9:3e:70:c1:4b:e6:ed:8d:54:a2:7a:59:33: 46:75:ae:bd:a5:66:bc:c3:3b:21:b0:ff:15:72:1a:a6:0d:af: 31:82:df:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyZhiF42frllOqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDMzOFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk MWIzYmY1NGYtYTMyOC00NjdiLTljOGMtNWYyMzU2MDYyNTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QurCr9+4J2Qz8UQ2AJ8PlOBbNkXE6XJGMRl OlisrzsKf7ojsFlfcRmdjqVUpQ5+jI3RHdAAdZCxmIcIJAIpw9J/TzT7q64RthAo cwYHKBj4UdyzZid55/uEGSVO4AwwfxN1mTDooalFLSUH0AVGb8jj7xGUN9DKerJW TASPMbYrzvFy9Nx5gEq+OZSd6hW5Y9WYx3mHOjfMyomCDy0sDyjPksq/pKZwwZG5 EFaFK+/IPKibpvy4fwaKwm6FLqleZQx4Q0/3ofDqYSJkZAofmmJkKWNB4X03Sojz Fdu2byc9BvWGPRXX62wEHpksrlXSOzKmaZZ0k5SmkjCum8PyzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMyEp3DbR3qTj7v3MEL1dMlmTusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2M2NDdjZWUtYTRlZS0z ZWE4LTlhMmMtODYxZjg0NTM0MjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1iRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSEUxs1OikJLwdtGtB3juovDKbErVhq/w+Vi4bLVxrwAuF6JQuENsxD IXxpem1uEJSm3E2PnQwkX3HdN6D2ZBsCbRpQrADQDvnqcaZuPYaMFWejV/u++ARN Xuq6JxRh1v4bF6s6Xv6CpBDS0PlQ9E0YgDgTz3VpwOPKf8k0vEbeNrWc6LRHWGnw 2j46XwpCOGdT8mZfqL8hGrmO3oVMeVdSMc+u+0LvAXfpEm4N4yZnf20fqi9nbPlv LrtsHpGZFU2IUs3RVgaYgc6rZc89ri+lW2h/ezCGcplsGidWuT5wwUvm7Y1UonpZ M0Z1rr2lZrzDOyGw/xVyGqYNrzGC32E= -----END CERTIFICATE-----Generated at Thu Sep 17 16:50:39 2026 by rpki-client