$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e09b82d-c40e-307b-91ac-4ba85e660313.roa File: 4e09b82d-c40e-307b-91ac-4ba85e660313.roa (raw, json) Hash identifier: 1P6uh35jrCn3U5Tp/ASqtKMs0gkNer8mfDGecsNuoGA= Subject key identifier: 85:11:51:4D:3C:B0:84:20:91:62:EC:F0:0A:7F:80:2C:AE:3C:85:D6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F7D39AA1AEABF4473467F4380 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e09b82d-c40e-307b-91ac-4ba85e660313.roa Signing time: Tue 13 Oct 2026 14:07:41 +0000 ROA not before: Tue 13 Oct 2026 14:07:41 +0000 ROA not after: Wed 06 Jan 2027 17:46:53 +0000 asID: 11404 IP address blocks: 128.121.0.0/22 maxlen: 24 128.241.84.0/22 maxlen: 24 130.94.196.0/22 maxlen: 24 157.238.180.0/22 maxlen: 24 198.63.224.0/20 maxlen: 24 198.88.96.0/20 maxlen: 24 198.104.208.0/20 maxlen: 24 198.107.144.0/20 maxlen: 24 198.138.48.0/20 maxlen: 24 204.143.80.0/21 maxlen: 24 204.171.32.0/20 maxlen: 24 207.21.112.0/21 maxlen: 24 207.55.152.0/21 maxlen: 24 207.67.152.0/21 maxlen: 24 207.71.88.0/21 maxlen: 24 207.91.104.0/21 maxlen: 24 207.111.64.0/21 maxlen: 24 207.137.88.0/21 maxlen: 24 207.152.72.0/21 maxlen: 24 207.198.136.0/21 maxlen: 24 207.241.16.0/21 maxlen: 24 209.107.88.0/21 maxlen: 24 209.168.112.0/21 maxlen: 24 216.42.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:39:aa:1a:ea:bf:44:73:46:7f:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 13 14:07:41 2026 GMT Not After : Jan 6 17:46:53 2027 GMT Subject: CN=eab505b5-1dc0-4ed0-9bd7-1bddfb2445d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:6b:5b:d9:a1:44:23:1c:be:af:b6:67:34: bd:8d:d3:b6:9e:66:0a:25:35:2a:3b:58:03:74:ae: df:40:6d:b6:52:18:f5:37:fe:77:cb:8c:b2:e7:58: 65:62:81:1f:06:28:95:4f:00:0e:5c:e4:15:46:a8: 7b:70:79:e5:71:0c:c6:35:36:1b:9e:17:01:05:37: 2c:3f:10:7a:2d:e5:92:35:e8:83:0c:63:22:0f:dc: 6f:c4:76:a4:2e:9c:76:37:ad:13:96:e5:1f:2f:f6: 88:91:5f:dc:80:b5:f8:c8:88:8d:42:d3:0c:3a:d5: 23:6e:8f:3e:01:32:93:cd:cd:81:30:a8:91:d9:e7: 88:ba:69:07:a4:e5:9f:83:e5:23:6f:68:02:7e:ac: 9f:56:0e:ff:97:d0:74:39:f1:52:22:82:bf:51:c4: dd:00:9c:07:28:f8:5b:16:b0:ad:35:f4:e9:09:15: 04:b1:62:82:73:03:b1:2d:32:92:c7:79:12:7a:18: 1a:b6:31:8e:32:1c:77:61:94:fd:dc:d8:d8:d7:a9: 8b:e7:b1:65:05:21:d4:48:0f:b4:1a:d1:b0:dc:8a: 8c:ca:eb:6f:ec:a0:ee:0d:5f:f3:20:52:3f:de:b2: ad:3c:4c:35:15:6d:f7:03:75:f2:50:d0:d0:4a:de: d8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:11:51:4D:3C:B0:84:20:91:62:EC:F0:0A:7F:80:2C:AE:3C:85:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e09b82d-c40e-307b-91ac-4ba85e660313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.0.0/22 128.241.84.0/22 130.94.196.0/22 157.238.180.0/22 198.63.224.0/20 198.88.96.0/20 198.104.208.0/20 198.107.144.0/20 198.138.48.0/20 204.143.80.0/21 204.171.32.0/20 207.21.112.0/21 207.55.152.0/21 207.67.152.0/21 207.71.88.0/21 207.91.104.0/21 207.111.64.0/21 207.137.88.0/21 207.152.72.0/21 207.198.136.0/21 207.241.16.0/21 209.107.88.0/21 209.168.112.0/21 216.42.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:52:f6:09:d0:08:66:c1:ea:c9:21:00:af:71:89:a4:fb:d6: 42:8a:a5:7f:df:1e:c6:cd:4c:28:76:f9:89:ec:1e:f4:02:97: da:2f:13:30:ae:05:93:eb:df:ee:ea:96:50:5d:33:5d:aa:02: 5c:b5:76:25:6d:c5:f2:ea:ba:0e:b8:9a:70:db:92:b5:78:a3: 73:ad:59:ac:cc:6e:8c:33:fd:7f:6d:b4:5e:c5:b9:99:2b:50: 91:21:d7:77:a3:af:e2:f0:7e:a8:2f:7b:a1:18:8f:ab:6d:fa: 56:d1:cd:49:f2:e0:44:3c:89:98:2c:ee:15:aa:11:d4:1b:2a: c0:01:48:8a:ea:ca:42:7b:f0:d9:3f:3c:73:aa:5a:3a:39:df: 89:f5:1b:12:ca:23:17:38:df:52:09:a8:65:1e:a4:7e:3b:2f: b2:6c:0c:49:96:48:4b:f0:3c:a1:e4:08:93:a0:47:76:3c:28: 92:56:b3:73:33:e9:0f:ef:8c:05:0b:44:fc:f4:43:d9:48:a9: 72:83:af:28:9d:07:ce:e9:d0:a2:5d:e1:32:ff:ec:eb:28:0b: 3a:cf:0e:93:be:5c:3a:b7:8a:2b:bf:23:df:3e:27:78:2c:ca: 82:af:98:77:56:bd:3e:eb:4e:18:d0:e2:7f:ab:6e:27:23:ce: 0b:63:b9:c9 -----BEGIN CERTIFICATE----- MIIG0jCCBbqgAwIBAgIUAQ0Mn0MoWE99Oaoa6r9Ec0Z/Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAxMzE0MDc0MVoXDTI3MDEwNjE3NDY1M1owLzEtMCsGA1UEAxMk ZWFiNTA1YjUtMWRjMC00ZWQwLTliZDctMWJkZGZiMjQ0NWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQlrW9mhRCMcvq+2ZzS9jdO2nmYKJTUqO1gD dK7fQG22Uhj1N/53y4yy51hlYoEfBiiVTwAOXOQVRqh7cHnlcQzGNTYbnhcBBTcs PxB6LeWSNeiDDGMiD9xvxHakLpx2N60TluUfL/aIkV/cgLX4yIiNQtMMOtUjbo8+ ATKTzc2BMKiR2eeIumkHpOWfg+Ujb2gCfqyfVg7/l9B0OfFSIoK/UcTdAJwHKPhb FrCtNfTpCRUEsWKCcwOxLTKSx3kSehgatjGOMhx3YZT93NjY16mL57FlBSHUSA+0 GtGw3IqMyutv7KDuDV/zIFI/3rKtPEw1FW33A3XyUNDQSt7YJQIDAQABo4ID5DCC A+AwHQYDVR0OBBYEFIURUU08sIQgkWLs8Ap/gCyuPIXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGUwOWI4MmQtYzQwZS0z MDdiLTkxYWMtNGJhODVlNjYwMzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAKA eQADBAKA8VQDBAKCXsQDBAKd7rQDBATGP+ADBATGWGADBATGaNADBATGa5ADBATG ijADBAPMj1ADBATMqyADBAPPFXADBAPPN5gDBAPPQ5gDBAPPR1gDBAPPW2gDBAPP b0ADBAPPiVgDBAPPmEgDBAPPxogDBAPP8RADBAPRa1gDBAPRqHADBAPYKpAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAf1L2CdAIZsHqySEAr3GJpPvWQoqlf98exs1MKHb5iewe9AKX2i8TMK4F k+vf7uqWUF0zXaoCXLV2JW3F8uq6DriacNuStXijc61ZrMxujDP9f220XsW5mStQ kSHXd6Ov4vB+qC97oRiPq236VtHNSfLgRDyJmCzuFaoR1BsqwAFIiurKQnvw2T88 c6paOjnfifUbEsojFzjfUgmoZR6kfjsvsmwMSZZIS/A8oeQIk6BHdjwoklazczPp D++MBQtE/PRD2UipcoOvKJ0HzunQol3hMv/s6ygLOs8Ok75cOreKK78j3z4neCzK gq+Yd1a9PutOGNDif6tuJyPOC2O5yQ== -----END CERTIFICATE-----Generated at Tue Oct 20 22:11:58 2026 by rpki-client