$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43d1fcf4-e119-32d2-9238-8a0abd5a988a.roa File: 43d1fcf4-e119-32d2-9238-8a0abd5a988a.roa (raw, json) Hash identifier: BYVnCIRHEArWZ6yLyxx37bIJgeFyD9RFEWQslTZWWxY= Subject key identifier: 54:DA:25:F1:20:C0:EF:93:42:89:F4:A8:0E:5E:6D:73:3F:44:12:C3 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F7D3A11E8B3263D33A680FD40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43d1fcf4-e119-32d2-9238-8a0abd5a988a.roa Signing time: Tue 13 Oct 2026 14:08:30 +0000 ROA not before: Tue 13 Oct 2026 14:08:30 +0000 ROA not after: Wed 06 Jan 2027 17:40:19 +0000 asID: 20115 IP address blocks: 128.121.0.0/22 maxlen: 24 128.241.84.0/22 maxlen: 24 130.94.196.0/22 maxlen: 24 157.238.180.0/22 maxlen: 24 198.63.224.0/20 maxlen: 24 198.88.96.0/20 maxlen: 24 198.104.208.0/20 maxlen: 24 198.107.144.0/20 maxlen: 24 198.138.48.0/20 maxlen: 24 204.143.80.0/21 maxlen: 24 204.171.32.0/20 maxlen: 24 207.21.112.0/21 maxlen: 24 207.55.152.0/21 maxlen: 24 207.67.152.0/21 maxlen: 24 207.71.88.0/21 maxlen: 24 207.91.104.0/21 maxlen: 24 207.111.64.0/21 maxlen: 24 207.137.88.0/21 maxlen: 24 207.152.72.0/21 maxlen: 24 207.198.136.0/21 maxlen: 24 207.241.16.0/21 maxlen: 24 209.107.88.0/21 maxlen: 24 209.168.112.0/21 maxlen: 24 216.42.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:3a:11:e8:b3:26:3d:33:a6:80:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 13 14:08:30 2026 GMT Not After : Jan 6 17:40:19 2027 GMT Subject: CN=a1edeaba-e89a-48be-9d26-68c936d66fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:ca:7a:6e:69:60:b2:42:d6:69:15:bc:cc: d7:4e:c5:7a:a1:47:cd:68:4c:4c:43:8c:ed:e4:cd: 75:55:a8:ed:d6:bc:4e:c1:0d:f2:1a:ac:f7:41:36: 66:ef:b4:a2:cb:22:34:cb:f3:3c:d1:6a:5b:96:e8: 2b:8f:81:8b:77:7d:58:ce:b9:8c:dd:23:ef:16:1f: 2b:09:25:cc:b6:99:fe:52:33:df:ad:5a:bb:ec:54: c3:58:d1:f3:a2:ba:71:2a:aa:c5:0a:72:04:f2:62: fe:fa:bf:26:5a:ad:3e:10:71:ad:13:37:67:dc:a4: 84:7d:fe:67:68:15:09:07:fb:ba:f6:e8:1a:2d:1d: ba:86:ee:4a:0c:97:a5:2a:50:28:a0:52:b5:b0:e2: af:28:46:ff:7c:ca:c2:da:70:23:c8:17:c3:ca:2c: 9b:11:50:9c:47:21:f4:0c:42:5b:6e:71:71:9c:e8: 5d:07:27:f9:13:b5:0b:7b:83:4e:b2:c2:71:93:a8: 82:43:a1:18:da:f8:f7:0a:96:d3:dc:12:7e:1e:08: 3f:8f:53:bb:a2:56:52:4d:f1:83:52:f6:11:15:a3: d3:ae:eb:1b:ff:c5:20:6e:71:1e:07:d5:50:88:76: d3:b1:42:4b:54:a5:b0:19:63:e2:4a:46:1d:c3:c9: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DA:25:F1:20:C0:EF:93:42:89:F4:A8:0E:5E:6D:73:3F:44:12:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43d1fcf4-e119-32d2-9238-8a0abd5a988a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.0.0/22 128.241.84.0/22 130.94.196.0/22 157.238.180.0/22 198.63.224.0/20 198.88.96.0/20 198.104.208.0/20 198.107.144.0/20 198.138.48.0/20 204.143.80.0/21 204.171.32.0/20 207.21.112.0/21 207.55.152.0/21 207.67.152.0/21 207.71.88.0/21 207.91.104.0/21 207.111.64.0/21 207.137.88.0/21 207.152.72.0/21 207.198.136.0/21 207.241.16.0/21 209.107.88.0/21 209.168.112.0/21 216.42.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:74:5c:fe:e7:b6:66:29:70:9f:c3:f0:0a:49:68:f7:71:c3: 64:e5:10:fc:28:42:f8:d5:b6:7f:4c:0c:43:59:bd:d4:c1:01: 90:32:f3:eb:3f:c0:b2:af:b6:c5:cd:8f:3b:ad:fe:cb:94:3f: 23:e9:b1:c0:30:af:de:1e:af:b5:ea:8d:85:c0:a8:70:75:01: aa:c3:cb:b7:d6:ea:10:29:10:06:30:a5:78:b8:6c:af:d7:dc: ae:87:a5:bc:6f:dc:ce:32:f8:0c:c0:10:5e:bc:e8:7a:cd:12: 52:db:f0:42:ed:88:e8:0b:b4:f9:66:0c:dc:c3:b1:3c:15:9f: 1c:3a:e6:b6:69:9f:64:c3:3c:a2:06:7c:89:e4:44:6e:28:69: 1e:b3:0e:35:1e:bc:e4:de:3a:21:b9:05:48:c2:5a:a9:fb:c0: ac:7f:65:09:74:0b:91:c8:f0:78:8c:1d:7c:f3:99:6f:d5:c4: 5e:1e:6c:ad:00:d0:a7:c4:99:82:28:e5:f0:f9:c3:fa:4a:04: 63:81:bf:7d:ee:f9:61:c0:63:d0:bb:f6:0b:0d:58:79:e8:e4: 4b:0d:6e:1d:b8:3a:d8:03:10:63:8d:ce:e1:7f:8d:83:d7:a1: 38:5c:c6:10:69:03:29:ae:e6:cf:4f:b4:a3:18:db:59:4c:34: 5a:b5:93:6c -----BEGIN CERTIFICATE----- MIIG0jCCBbqgAwIBAgIUAQ0Mn0MoWE99OhHosyY9M6aA/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAxMzE0MDgzMFoXDTI3MDEwNjE3NDAxOVowLzEtMCsGA1UEAxMk YTFlZGVhYmEtZTg5YS00OGJlLTlkMjYtNjhjOTM2ZDY2ZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVvKem5pYLJC1mkVvMzXTsV6oUfNaExMQ4zt 5M11Vajt1rxOwQ3yGqz3QTZm77SiyyI0y/M80Wpblugrj4GLd31YzrmM3SPvFh8r CSXMtpn+UjPfrVq77FTDWNHzorpxKqrFCnIE8mL++r8mWq0+EHGtEzdn3KSEff5n aBUJB/u69ugaLR26hu5KDJelKlAooFK1sOKvKEb/fMrC2nAjyBfDyiybEVCcRyH0 DEJbbnFxnOhdByf5E7ULe4NOssJxk6iCQ6EY2vj3CpbT3BJ+Hgg/j1O7olZSTfGD UvYRFaPTrusb/8UgbnEeB9VQiHbTsUJLVKWwGWPiSkYdw8mRkQIDAQABo4ID5DCC A+AwHQYDVR0OBBYEFFTaJfEgwO+TQon0qA5ebXM/RBLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDNkMWZjZjQtZTExOS0z MmQyLTkyMzgtOGEwYWJkNWE5ODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAKA eQADBAKA8VQDBAKCXsQDBAKd7rQDBATGP+ADBATGWGADBATGaNADBATGa5ADBATG ijADBAPMj1ADBATMqyADBAPPFXADBAPPN5gDBAPPQ5gDBAPPR1gDBAPPW2gDBAPP b0ADBAPPiVgDBAPPmEgDBAPPxogDBAPP8RADBAPRa1gDBAPRqHADBAPYKpAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjXRc/ue2Zilwn8PwCklo93HDZOUQ/ChC+NW2f0wMQ1m91MEBkDLz6z/A sq+2xc2PO63+y5Q/I+mxwDCv3h6vteqNhcCocHUBqsPLt9bqECkQBjCleLhsr9fc roelvG/czjL4DMAQXrzoes0SUtvwQu2I6Au0+WYM3MOxPBWfHDrmtmmfZMM8ogZ8 ieREbihpHrMONR685N46IbkFSMJaqfvArH9lCXQLkcjweIwdfPOZb9XEXh5srQDQ p8SZgijl8PnD+koEY4G/fe75YcBj0Lv2Cw1YeejkSw1uHbg62AMQY43O4X+Ng9eh OFzGEGkDKa7mz0+0oxjbWUw0WrWTbA== -----END CERTIFICATE-----Generated at Mon Oct 19 20:58:18 2026 by rpki-client