$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/51196373-e8e5-3da2-b26d-ca7b769252d4.roa File: 51196373-e8e5-3da2-b26d-ca7b769252d4.roa (raw, json) Hash identifier: NCnQ9O+7ozFsi9IA318YF1zPKJYhuIO6tu1N1U3k8SE= Subject key identifier: D0:BA:1D:A0:21:0F:35:21:78:AB:7F:14:B3:00:85:4D:A4:1B:FF:51 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584FACC17D11DF48691BEDE53C00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/51196373-e8e5-3da2-b26d-ca7b769252d4.roa Signing time: Fri 30 Oct 2026 14:44:20 +0000 ROA not before: Fri 30 Oct 2026 14:44:20 +0000 ROA not after: Thu 28 Jan 2027 15:44:20 +0000 asID: 4826 IP address blocks: 198.87.160.0/20 maxlen: 24 198.107.208.0/20 maxlen: 24 198.170.208.0/20 maxlen: 24 199.4.112.0/20 maxlen: 24 204.42.0.0/20 maxlen: 24 204.170.48.0/20 maxlen: 24 207.111.80.0/20 maxlen: 24 207.137.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ac:c1:7d:11:df:48:69:1b:ed:e5:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 30 14:44:20 2026 GMT Not After : Jan 28 15:44:20 2027 GMT Subject: CN=bff1cf13-16cd-4e76-b1e3-e1c4d79a6a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d4:d5:eb:c0:6f:c3:58:ae:4c:da:4f:e7:2d: c9:65:03:7d:d8:d7:c5:88:9d:78:07:e4:12:69:8a: d2:c3:fb:a7:0b:09:ce:fe:a4:69:51:b4:61:18:7e: 48:07:77:cc:9e:b2:54:03:c1:ee:9a:09:e2:83:0f: f9:17:8c:01:f1:ab:4d:46:c4:95:0e:2b:72:d3:45: 10:0b:80:67:4f:db:3e:1a:44:6b:79:9c:0b:bf:5a: 38:2b:a9:d9:cd:68:ac:3c:46:7c:33:52:f3:36:55: 4c:9a:84:6f:b5:70:a1:0b:2b:eb:09:4f:14:30:c5: 14:b6:e1:bd:90:b9:bc:2c:d2:36:f5:2b:99:d3:63: 2c:3e:7f:00:d7:f5:57:ca:bd:80:8e:18:bf:7a:c1: 2b:9f:e5:a7:33:dc:37:83:45:aa:5e:e5:a9:e7:ed: dd:0a:4d:42:8a:68:79:63:59:a8:54:4c:ff:ab:ff: 20:3f:18:00:7b:77:7a:a6:fc:45:f5:1e:0d:68:e4: 11:b4:fb:03:d9:cf:37:6f:13:6e:11:35:8e:cd:db: 2e:2a:4e:60:58:da:b0:f5:7e:09:3b:71:63:b8:ff: b1:b0:83:d3:c1:e0:6c:6f:57:32:c5:52:5b:bb:d9: 94:52:46:62:40:f7:e1:8a:cf:fc:18:d1:25:5c:68: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BA:1D:A0:21:0F:35:21:78:AB:7F:14:B3:00:85:4D:A4:1B:FF:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/51196373-e8e5-3da2-b26d-ca7b769252d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.87.160.0/20 198.107.208.0/20 198.170.208.0/20 199.4.112.0/20 204.42.0.0/20 204.170.48.0/20 207.111.80.0/20 207.137.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ba:e9:ae:d6:18:b5:03:1b:40:cb:b5:11:b2:fc:ee:2d:b4: 62:37:b1:6c:41:89:37:04:ae:bc:3f:80:a6:1a:f8:06:b6:5c: f1:0f:0a:13:d2:aa:82:f5:c2:61:e1:30:04:0f:7d:6d:1c:af: 6c:c0:3b:95:08:50:d3:6f:82:1a:81:11:aa:7e:6b:8d:eb:68: f8:e6:94:9d:c8:98:ee:16:54:27:db:94:62:98:3b:d4:5c:a2: 44:93:7a:f2:75:51:88:f8:2a:c9:11:6c:c5:dd:c4:cf:77:8b: 35:dc:58:2b:96:44:b3:bc:5e:54:8e:5a:f7:c4:61:6d:fc:59: 68:ac:66:6b:18:61:9b:f8:66:fa:9d:b3:ce:f2:e1:3f:df:94: 04:1d:ce:46:d9:63:b1:7e:66:d0:59:3b:c2:7c:11:ca:68:f9: a2:57:b5:37:31:3c:c3:2e:74:da:94:0c:43:06:2a:1d:14:12: ed:95:76:21:11:3c:2f:ad:f4:a3:b1:31:90:c5:37:0e:3e:c9: 5a:76:1e:d8:d1:52:77:72:d5:56:d0:73:45:07:dc:7f:5b:42: c1:b9:03:4c:1c:a1:07:5b:5a:7d:89:fd:43:f0:26:6f:51:ba: 52:21:96:43:a6:b0:8a:b2:19:e1:18:a6:b8:db:55:a8:38:d9: a0:eb:ff:a4 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWE+swX0R30hpG+3lPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAzMDE0NDQyMFoXDTI3MDEyODE1NDQyMFowLzEtMCsGA1UEAxMk YmZmMWNmMTMtMTZjZC00ZTc2LWIxZTMtZTFjNGQ3OWE2YTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitTV68Bvw1iuTNpP5y3JZQN92NfFiJ14B+QS aYrSw/unCwnO/qRpUbRhGH5IB3fMnrJUA8Humgnigw/5F4wB8atNRsSVDity00UQ C4BnT9s+GkRreZwLv1o4K6nZzWisPEZ8M1LzNlVMmoRvtXChCyvrCU8UMMUUtuG9 kLm8LNI29SuZ02MsPn8A1/VXyr2Ajhi/esErn+WnM9w3g0WqXuWp5+3dCk1Cimh5 Y1moVEz/q/8gPxgAe3d6pvxF9R4NaOQRtPsD2c83bxNuETWOzdsuKk5gWNqw9X4J O3FjuP+xsIPTweBsb1cyxVJbu9mUUkZiQPfhis/8GNElXGgNgQIDAQABo4IDfzCC A3swHQYDVR0OBBYEFNC6HaAhDzUheKt/FLMAhU2kG/9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTExOTYzNzMtZThlNS0z ZGEyLWIyNmQtY2E3Yjc2OTI1MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQExlegAwQE xmvQAwQExqrQAwQExwRwAwQEzCoAAwQEzKowAwQEz29QAwQEz4kQMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABq66a7WGLUDG0DLtRGy/O4ttGI3sWxBiTcErrw/gKYa+Aa2XPEPChPSqoL1wmHh MAQPfW0cr2zAO5UIUNNvghqBEap+a43raPjmlJ3ImO4WVCfblGKYO9RcokSTevJ1 UYj4KskRbMXdxM93izXcWCuWRLO8XlSOWvfEYW38WWisZmsYYZv4Zvqds87y4T/f lAQdzkbZY7F+ZtBZO8J8Ecpo+aJXtTcxPMMudNqUDEMGKh0UEu2VdiERPC+t9KOx MZDFNw4+yVp2HtjRUndy1VbQc0UH3H9bQsG5A0wcoQdbWn2J/UPwJm9RulIhlkOm sIqyGeEYprjbVag42aDr/6Q= -----END CERTIFICATE-----Generated at Sat Oct 31 21:32:05 2026 by rpki-client