$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/41062c80-8b6f-3c75-a8a2-68411d410a81.roa File: 41062c80-8b6f-3c75-a8a2-68411d410a81.roa (raw, json) Hash identifier: GwJYv3EkgDHSNwnI3XLt2HNoGqN7bzjWnmEeGFgpk4o= Subject key identifier: 1A:E4:9F:D6:B1:A8:99:81:F5:8D:9C:F3:70:58:D1:19:B1:68:81:D0 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE423461F156E9FA5D02141DA Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/41062c80-8b6f-3c75-a8a2-68411d410a81.roa Signing time: Wed 19 Aug 2026 18:03:53 +0000 ROA not before: Wed 19 Aug 2026 18:03:53 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 128.242.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:46:1f:15:6e:9f:a5:d0:21:41:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:53 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=c93f5a47-9396-49e3-b418-85459d08f9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:67:5b:65:e7:8e:a3:c8:74:73:3d:67:98:a5: 59:08:89:ff:ae:c5:d0:e0:3e:be:9a:24:86:c3:58: 7a:1d:f7:01:8f:02:38:18:51:3e:08:b9:52:b1:02: 86:d9:ef:78:d7:27:b8:e0:f1:94:95:45:23:24:93: 7b:6f:91:d2:be:f5:1f:76:a4:25:92:7d:e5:d6:23: 29:e8:34:2f:ff:f9:f4:94:fb:38:43:79:25:8e:55: d6:85:dd:fa:dd:68:dc:64:90:72:7c:7f:be:f4:f0: 5b:86:8f:e5:d5:d0:3e:18:6c:47:a3:3c:d3:69:8d: 1c:83:7b:6e:87:ae:3e:9f:df:d6:7d:7a:30:d1:e0: 06:12:6e:74:62:53:fb:7e:e3:f6:87:1f:8b:36:84: 98:e1:40:d9:0c:d8:dc:0b:59:05:65:58:dc:a8:6f: 9f:e4:79:97:be:e6:f1:0b:7c:51:d4:5c:3c:fd:c7: e5:c5:c7:e2:c3:81:3e:06:9e:43:e8:79:20:8f:d3: fd:bb:97:48:01:34:ef:ca:cf:36:f5:66:eb:cd:6b: 52:91:7e:61:0f:9e:98:84:20:e1:61:b5:da:4b:3e: 79:20:8a:61:f6:19:48:63:40:72:9a:55:b1:d8:46: 75:db:4d:7d:47:65:1c:ac:42:82:35:c5:ea:82:fd: a6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E4:9F:D6:B1:A8:99:81:F5:8D:9C:F3:70:58:D1:19:B1:68:81:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/41062c80-8b6f-3c75-a8a2-68411d410a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d7:4d:f1:d6:d9:99:2e:a4:51:64:40:15:90:f7:48:14:c7: dd:9c:c2:00:ee:66:68:ed:ab:6b:d5:61:96:7d:0b:a5:02:56: 3e:fd:e7:54:2e:9c:7f:0f:88:f2:aa:ad:e0:4f:d5:a8:7a:5d: c3:6f:da:25:48:b2:60:76:88:71:ed:f7:a8:0a:f8:ff:80:48: ce:d7:5d:d3:82:e6:c8:a9:35:7d:ef:49:40:fd:8d:48:d3:21: 18:28:b3:23:12:ea:d7:59:f4:fa:8d:43:0d:d1:3c:9a:19:89: eb:6a:10:72:03:b5:6e:0a:b8:bf:d2:9c:c2:ca:b8:d6:db:ab: 85:86:e7:d5:3c:53:b7:60:4c:76:8a:ca:00:64:46:41:5a:86: 4e:f0:13:7e:52:55:b5:ee:e5:e3:0f:e4:08:8e:6e:84:65:2c: 57:6b:ba:59:6d:76:07:de:58:67:86:db:91:52:22:ad:a0:06: 00:7b:75:ee:70:15:a9:cb:87:74:59:f9:0f:bd:af:e1:08:f8: f2:d4:af:2d:69:b1:43:26:9e:2e:ff:dc:b4:67:9b:1c:ba:6e: e8:07:6a:14:6b:d6:6c:8d:52:e6:58:0f:28:ef:3d:e3:56:01: 3e:37:55:ba:d5:16:66:43:f2:f8:ec:86:99:91:37:2f:56:57: b6:ed:9a:97 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI0YfFW6fpdAhQdowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1M1oXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk YzkzZjVhNDctOTM5Ni00OWUzLWI0MTgtODU0NTlkMDhmOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWdbZeeOo8h0cz1nmKVZCIn/rsXQ4D6+miSG w1h6HfcBjwI4GFE+CLlSsQKG2e941ye44PGUlUUjJJN7b5HSvvUfdqQlkn3l1iMp 6DQv//n0lPs4Q3kljlXWhd363WjcZJByfH++9PBbho/l1dA+GGxHozzTaY0cg3tu h64+n9/WfXow0eAGEm50YlP7fuP2hx+LNoSY4UDZDNjcC1kFZVjcqG+f5HmXvubx C3xR1Fw8/cflxcfiw4E+Bp5D6Hkgj9P9u5dIATTvys829WbrzWtSkX5hD56YhCDh YbXaSz55IIph9hlIY0BymlWx2EZ12019R2UcrEKCNcXqgv2mgwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBrkn9axqJmB9Y2c83BY0RmxaIHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDEwNjJjODAtOGI2Zi0z Yzc1LWE4YTItNjg0MTFkNDEwYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgPIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFNdN8dbZmS6kUWRAFZD3SBTH3ZzCAO5maO2ra9Vhln0LpQJWPv3nVC6c fw+I8qqt4E/VqHpdw2/aJUiyYHaIce33qAr4/4BIztdd04LmyKk1fe9JQP2NSNMh GCizIxLq11n0+o1DDdE8mhmJ62oQcgO1bgq4v9Kcwsq41turhYbn1TxTt2BMdorK AGRGQVqGTvATflJVte7l4w/kCI5uhGUsV2u6WW12B95YZ4bbkVIiraAGAHt17nAV qcuHdFn5D72v4Qj48tSvLWmxQyaeLv/ctGebHLpu6AdqFGvWbI1S5lgPKO8941YB PjdVutUWZkPy+OyGmZE3L1ZXtu2alw== -----END CERTIFICATE-----Generated at Mon Sep 14 09:41:21 2026 by rpki-client