$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e27081d-51d1-3324-a69b-5946786f76e3.roa File: 3e27081d-51d1-3324-a69b-5946786f76e3.roa (raw, json) Hash identifier: hDiIs73Dc30ffcX+FqzuiNzeD53I/wPR9ZqSUxjPm+Q= Subject key identifier: BA:59:AD:38:0F:A6:C0:4F:76:4C:86:82:43:3E:6E:0F:77:84:FD:00 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233F92EDA45F91504AD480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e27081d-51d1-3324-a69b-5946786f76e3.roa Signing time: Wed 19 Aug 2026 18:03:50 +0000 ROA not before: Wed 19 Aug 2026 18:03:50 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 209.107.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3f:92:ed:a4:5f:91:50:4a:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:50 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=697d72ce-e028-48b8-9d07-55e1cb2b6589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ef:6e:9b:21:2f:fe:eb:a2:5d:03:96:01:70: a3:11:21:90:79:17:20:f3:52:c3:cc:7d:52:4d:39: 51:ae:16:13:32:93:43:56:50:40:9f:ab:f4:3c:b1: 41:f2:e1:5f:de:61:de:df:ee:6d:a0:0c:39:2f:fb: 29:cf:b0:45:97:e4:01:09:d7:10:87:d3:f2:d4:2b: ae:4d:fd:4a:43:30:73:e3:63:e4:41:db:91:9b:8f: 72:14:83:79:2c:f2:6f:4a:3f:93:b3:e1:8b:e6:d4: b4:11:72:e1:34:8a:af:72:2e:f2:3d:28:10:1a:04: be:55:4b:33:26:5b:f6:87:41:d1:d2:a1:88:48:a9: 84:b0:96:c4:5f:2c:ac:20:fd:69:04:55:0a:5b:80: be:69:b7:67:b3:e1:86:3f:66:4a:4f:cd:b2:9c:d9: 37:07:7b:2f:29:c3:e1:34:11:f0:ea:d0:83:60:a7: f4:4e:de:b9:ab:1e:61:9f:7c:93:7c:f5:24:9f:2a: d2:4f:f0:0c:fe:3e:ff:4c:7d:ad:83:1c:85:19:70: 36:70:c5:02:b2:4a:d4:b3:bf:be:30:89:b9:0b:03: dc:fe:0f:66:42:29:21:ce:45:ae:62:49:76:10:6a: 35:c0:58:d8:b9:5b:d6:c7:72:f8:d9:53:1c:c8:27: 70:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:59:AD:38:0F:A6:C0:4F:76:4C:86:82:43:3E:6E:0F:77:84:FD:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e27081d-51d1-3324-a69b-5946786f76e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 209.107.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:4a:8b:33:93:a3:7b:53:4d:0d:db:4b:75:e8:59:16:6c:4c: 03:6f:3a:8a:f4:3f:7a:75:a3:f1:36:d3:65:e5:fd:62:8a:47: 78:04:36:79:ae:1b:fe:31:bd:96:8f:4e:ee:f4:da:8d:96:6d: f1:42:32:da:9d:fc:ae:71:4d:db:0d:63:46:87:e4:05:ea:4f: de:0d:b5:86:e8:57:d5:42:2c:30:b2:a9:5c:db:b1:4c:c0:68: 48:38:bb:05:ef:2d:58:18:0f:9d:6c:0d:c4:69:8c:7a:59:ab: a1:23:0c:69:ae:65:b2:82:cf:92:9e:97:39:69:0a:c7:ed:fd: 6f:95:1b:9b:34:7a:e7:60:87:d8:b5:cb:8b:f8:a2:cd:80:6d: 04:6d:00:30:38:a8:48:92:83:fc:4e:10:31:d9:41:31:f4:f8: 6b:75:53:f6:c8:ff:28:00:d2:69:54:6b:cd:21:86:bd:59:de: 6e:b0:30:7d:67:3d:c1:c5:d2:df:56:16:16:50:57:14:68:97: 36:50:d9:e7:14:3d:be:88:27:ea:a4:bb:61:66:47:ee:e1:6e: ac:17:a8:06:90:7d:d0:37:23:3e:44:81:79:04:ae:e3:e2:88: 77:9a:bd:97:93:da:a5:b9:cd:27:40:ab:4c:0b:7b:93:2e:1b: 41:dc:8f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIz+S7aRfkVBK1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk Njk3ZDcyY2UtZTAyOC00OGI4LTlkMDctNTVlMWNiMmI2NTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+9umyEv/uuiXQOWAXCjESGQeRcg81LDzH1S TTlRrhYTMpNDVlBAn6v0PLFB8uFf3mHe3+5toAw5L/spz7BFl+QBCdcQh9Py1Cuu Tf1KQzBz42PkQduRm49yFIN5LPJvSj+Ts+GL5tS0EXLhNIqvci7yPSgQGgS+VUsz Jlv2h0HR0qGISKmEsJbEXyysIP1pBFUKW4C+abdns+GGP2ZKT82ynNk3B3svKcPh NBHw6tCDYKf0Tt65qx5hn3yTfPUknyrST/AM/j7/TH2tgxyFGXA2cMUCskrUs7++ MIm5CwPc/g9mQikhzkWuYkl2EGo1wFjYuVvWx3L42VMcyCdwaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpZrTgPpsBPdkyGgkM+bg93hP0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2UyNzA4MWQtNTFkMS0z MzI0LWE2OWItNTk0Njc4NmY3NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0WtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhKizOTo3tTTQ3bS3XoWRZsTANvOor0P3p1o/E202Xl/WKKR3gENnmu G/4xvZaPTu702o2WbfFCMtqd/K5xTdsNY0aH5AXqT94NtYboV9VCLDCyqVzbsUzA aEg4uwXvLVgYD51sDcRpjHpZq6EjDGmuZbKCz5KelzlpCsft/W+VG5s0eudgh9i1 y4v4os2AbQRtADA4qEiSg/xOEDHZQTH0+Gt1U/bI/ygA0mlUa80hhr1Z3m6wMH1n PcHF0t9WFhZQVxRolzZQ2ecUPb6IJ+qku2FmR+7hbqwXqAaQfdA3Iz5EgXkEruPi iHeavZeT2qW5zSdAq0wLe5MuG0Hcj70= -----END CERTIFICATE-----Generated at Thu Sep 17 14:25:09 2026 by rpki-client