$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4d70a503-a8c7-3d69-b5ee-03c24c478a3b.roa File: 4d70a503-a8c7-3d69-b5ee-03c24c478a3b.roa (raw, json) Hash identifier: WdHEYTKNVcxBcWhTiubVwbfd84QMGRI/ZrPyGYah8sI= Subject key identifier: 88:6B:32:2C:28:60:5C:0C:5F:E1:34:D0:80:B9:EC:74:96:6C:D7:3C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232D6618148C5C8D860E80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4d70a503-a8c7-3d69-b5ee-03c24c478a3b.roa Signing time: Wed 19 Aug 2026 18:03:42 +0000 ROA not before: Wed 19 Aug 2026 18:03:42 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 20940 IP address blocks: 157.238.91.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:2d:66:18:14:8c:5c:8d:86:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:42 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=fb3b5ec5-5758-4078-8e99-1a19d8f27d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c5:c4:92:f5:ca:8a:1d:91:f1:8d:d0:46:6f: ff:d7:28:13:63:71:c0:1f:4a:95:6d:5d:9c:7b:a6: 54:50:82:16:0e:8f:1e:4e:c8:75:07:21:d3:15:82: e2:89:cd:30:da:da:51:cf:62:3c:fe:c9:8f:b0:3a: 95:b6:4d:bf:df:fd:07:08:fe:d6:7e:db:bc:51:a5: bd:42:c4:c4:40:01:38:84:90:04:8b:eb:00:cd:06: fc:5f:5b:42:26:0d:5c:f3:13:ce:14:64:8b:f9:ec: 3b:b8:f8:da:75:9a:c4:5a:2d:e2:82:f1:83:39:5f: eb:c3:2e:44:04:37:78:43:88:1b:2c:c9:2e:dd:78: 5b:ab:a9:38:5f:ff:84:f2:55:58:e6:35:b1:2a:68: 6e:88:27:b7:cc:57:b3:2c:42:1d:6a:61:c4:65:ca: eb:72:b5:55:d3:9a:05:99:8f:b4:61:90:2d:02:ed: bc:04:bf:ca:98:15:36:98:bb:62:43:2b:cd:e8:33: ea:43:ce:5b:61:e7:ed:cc:c9:b0:41:3b:45:a1:c5: 2b:ff:c1:a2:5f:49:ab:90:25:ff:7d:87:ee:f1:ef: 12:c1:61:ba:e3:9c:35:da:44:0b:c3:5d:f4:86:f4: 4d:ba:9e:ea:c5:7a:f0:e8:ed:3b:6e:f3:73:da:42: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6B:32:2C:28:60:5C:0C:5F:E1:34:D0:80:B9:EC:74:96:6C:D7:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4d70a503-a8c7-3d69-b5ee-03c24c478a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 157.238.91.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c8:4e:67:48:df:8c:e3:4d:98:0e:8b:27:b8:43:fd:5a:8e: d4:7d:30:4b:dc:56:45:a2:b9:5f:13:01:05:3e:f2:af:1c:25: 98:12:3c:d9:84:56:05:af:a6:d0:cb:c3:1a:fe:ec:b9:bf:bd: d2:4e:e7:2b:87:86:fa:50:80:b0:99:45:91:4c:17:5e:7f:a2: 66:d0:d9:3e:6f:fb:ca:d1:1a:31:a3:16:3b:d6:9b:9c:91:14: 51:e2:36:d6:e3:9c:55:99:bb:9c:6a:ba:fc:0d:69:5b:4a:b5: a3:ec:c0:a8:ea:5f:88:c7:ec:d8:1f:cd:3b:77:84:59:36:ea: b5:7e:46:81:76:bf:06:c5:cf:70:52:0c:26:41:94:a1:af:52: 06:ea:10:e7:3c:49:c0:9d:07:fc:e3:9b:72:86:3a:d6:db:89: 8e:a2:5c:46:d8:31:98:65:e4:63:b1:b9:9d:9a:43:d8:f6:92: 64:4b:94:0c:36:fb:b8:3d:52:16:ba:0b:48:26:16:76:6e:66: 30:34:d2:b6:bd:a1:b6:dd:eb:df:c8:35:cf:2d:a7:a6:4c:c1: 40:24:2f:db:e7:4b:64:ac:ce:25:55:be:de:d2:07:c6:76:e7: bc:26:c6:45:39:54:4c:f4:07:3b:6f:d0:9f:d0:73:95:30:69: 62:4a:93:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7kIy1mGBSMXI2GDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0MloXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ZmIzYjVlYzUtNTc1OC00MDc4LThlOTktMWExOWQ4ZjI3ZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcXEkvXKih2R8Y3QRm//1ygTY3HAH0qVbV2c e6ZUUIIWDo8eTsh1ByHTFYLiic0w2tpRz2I8/smPsDqVtk2/3/0HCP7Wftu8UaW9 QsTEQAE4hJAEi+sAzQb8X1tCJg1c8xPOFGSL+ew7uPjadZrEWi3igvGDOV/rwy5E BDd4Q4gbLMku3Xhbq6k4X/+E8lVY5jWxKmhuiCe3zFezLEIdamHEZcrrcrVV05oF mY+0YZAtAu28BL/KmBU2mLtiQyvN6DPqQ85bYeftzMmwQTtFocUr/8GiX0mrkCX/ fYfu8e8SwWG645w12kQLw130hvRNup7qxXrw6O07bvNz2kIohQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIhrMiwoYFwMX+E00IC57HSWbNc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGQ3MGE1MDMtYThjNy0z ZDY5LWI1ZWUtMDNjMjRjNDc4YTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHne5bADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCXyE5nSN+M402YDosnuEP9Wo7UfTBL3FZForlfEwEFPvKvHCWYEjzZ hFYFr6bQy8Ma/uy5v73STucrh4b6UICwmUWRTBdef6Jm0Nk+b/vK0RoxoxY71puc kRRR4jbW45xVmbucarr8DWlbSrWj7MCo6l+Ix+zYH807d4RZNuq1fkaBdr8Gxc9w UgwmQZShr1IG6hDnPEnAnQf845tyhjrW24mOolxG2DGYZeRjsbmdmkPY9pJkS5QM Nvu4PVIWugtIJhZ2bmYwNNK2vaG23evfyDXPLaemTMFAJC/b50tkrM4lVb7e0gfG due8JsZFOVRM9Ac7b9Cf0HOVMGliSpMe -----END CERTIFICATE-----Generated at Thu Sep 3 07:13:48 2026 by rpki-client