$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4bbe541b-b38c-3d02-a3b4-4c452868a2d5.roa File: 4bbe541b-b38c-3d02-a3b4-4c452868a2d5.roa (raw, json) Hash identifier: oDN3Rs4erH5xEZsT5kh3hx9gAcE8lYKEbJkaXAaajlU= Subject key identifier: 97:BB:22:88:E4:3E:AE:28:C3:A0:4D:CB:4E:85:B6:97:F7:F2:79:C7 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE423458640632D2869016500 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4bbe541b-b38c-3d02-a3b4-4c452868a2d5.roa Signing time: Wed 19 Aug 2026 18:03:53 +0000 ROA not before: Wed 19 Aug 2026 18:03:53 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 209.207.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:45:86:40:63:2d:28:69:01:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:53 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=50d0495c-cc4a-411d-bbba-5ad23964cacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:cd:88:e6:38:7f:5f:8d:a5:2d:b9:11:94: d3:53:2a:09:a9:c4:08:38:5d:8a:c5:88:3d:1c:25: 62:c2:1e:93:b6:66:23:95:2e:e4:e3:2e:68:fb:5f: 02:b9:3f:f9:5d:46:39:ca:04:47:2f:d9:95:86:08: 97:bf:78:69:c9:ba:52:ef:74:8d:ae:b5:64:48:8a: 63:65:eb:fa:30:93:f0:bb:68:c1:6c:0f:62:da:69: a3:0f:21:91:2c:8b:1e:12:7f:42:01:47:84:de:43: 04:09:be:7d:26:86:52:ed:51:ab:83:eb:92:d5:0a: b8:a5:01:3d:18:d9:83:fc:d3:23:f5:b9:80:8f:d5: ef:41:0b:82:f1:d0:39:72:d3:be:3b:78:ba:54:f6: 58:d2:e5:41:7d:72:cf:42:ad:14:31:d1:24:41:d4: 1a:34:41:55:03:ed:10:cc:0b:dd:d8:68:4b:df:49: 0f:96:0f:1b:3c:a8:24:f7:87:96:21:94:7b:14:08: 95:98:e5:17:20:e6:c6:9b:cc:b4:46:03:b4:58:b6: cf:f1:ae:e6:be:29:26:06:7c:63:0c:12:61:11:07: 12:8e:0b:03:f0:0e:8e:f4:d5:8e:d9:1f:e6:b3:a5: de:a6:ee:0c:15:c1:f0:d2:b4:2a:75:d3:ff:e1:ca: 9a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BB:22:88:E4:3E:AE:28:C3:A0:4D:CB:4E:85:B6:97:F7:F2:79:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4bbe541b-b38c-3d02-a3b4-4c452868a2d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 209.207.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:36:78:51:9d:35:c1:db:07:b1:cd:5b:3d:bb:27:83:ee:e5: 52:22:d8:52:4f:02:ae:47:50:0c:85:68:54:2d:7b:51:fd:45: 14:48:2c:53:8f:33:0b:eb:df:b3:ff:a6:89:73:9d:26:ea:fe: 26:18:16:c3:30:c1:b0:bd:37:87:05:5f:93:8b:2b:91:cb:c0: 93:4a:98:b3:01:e2:c0:87:f8:c5:be:53:d9:01:46:44:92:36: 25:f0:03:b6:7d:57:41:a8:38:a4:26:9d:d1:53:8c:40:2a:a9: 88:5d:ad:01:7a:82:e4:70:ee:37:dd:79:47:92:16:5e:8c:79: 21:c0:ab:33:f7:74:51:61:5d:fb:ae:7d:ca:5b:d8:e2:64:9d: e8:63:30:a5:cc:ba:6f:d5:ff:ea:ae:10:11:aa:65:28:55:05: 44:ab:d0:b3:ca:54:9f:04:c0:8b:b8:ec:d0:fd:d8:f4:e2:1d: 94:d9:cc:a2:59:9d:fd:5b:4a:44:64:2f:0c:eb:07:85:63:b0: af:5c:ae:94:1f:1c:da:01:6b:37:db:1b:f1:61:9d:9c:11:59: ec:f0:28:43:dc:e1:db:13:f6:4b:c7:37:03:1f:7d:18:e9:8c: 13:61:78:e4:43:16:61:fc:02:c3:29:0b:28:ec:f0:67:c5:6f: 0d:59:2d:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0WGQGMtKGkBZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1M1oXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk NTBkMDQ5NWMtY2M0YS00MTFkLWJiYmEtNWFkMjM5NjRjYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUXNiOY4f1+NpS25EZTTUyoJqcQIOF2KxYg9 HCViwh6TtmYjlS7k4y5o+18CuT/5XUY5ygRHL9mVhgiXv3hpybpS73SNrrVkSIpj Zev6MJPwu2jBbA9i2mmjDyGRLIseEn9CAUeE3kMECb59JoZS7VGrg+uS1Qq4pQE9 GNmD/NMj9bmAj9XvQQuC8dA5ctO+O3i6VPZY0uVBfXLPQq0UMdEkQdQaNEFVA+0Q zAvd2GhL30kPlg8bPKgk94eWIZR7FAiVmOUXIObGm8y0RgO0WLbP8a7mvikmBnxj DBJhEQcSjgsD8A6O9NWO2R/ms6Xepu4MFcHw0rQqddP/4cqaTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJe7IojkPq4ow6BNy06Ftpf38nnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGJiZTU0MWItYjM4Yy0z ZDAyLWEzYjQtNGM0NTI4NjhhMmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0c+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALA2eFGdNcHbB7HNWz27J4Pu5VIi2FJPAq5HUAyFaFQte1H9RRRILFOP Mwvr37P/polznSbq/iYYFsMwwbC9N4cFX5OLK5HLwJNKmLMB4sCH+MW+U9kBRkSS NiXwA7Z9V0GoOKQmndFTjEAqqYhdrQF6guRw7jfdeUeSFl6MeSHAqzP3dFFhXfuu fcpb2OJknehjMKXMum/V/+quEBGqZShVBUSr0LPKVJ8EwIu47ND92PTiHZTZzKJZ nf1bSkRkLwzrB4VjsK9crpQfHNoBazfbG/FhnZwRWezwKEPc4dsT9kvHNwMffRjp jBNheORDFmH8AsMpCyjs8GfFbw1ZLcA= -----END CERTIFICATE-----Generated at Thu Sep 17 19:20:00 2026 by rpki-client