$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5317c311-b69c-3892-b288-522c8ee207cf.roa File: 5317c311-b69c-3892-b288-522c8ee207cf.roa (raw, json) Hash identifier: FQS3qbRW/9QAt995OLyx7ThwK8d4dLk7xWBy3JFxLE8= Subject key identifier: 94:1E:88:15:50:42:E3:A4:69:28:50:57:74:AD:C5:25:D9:DE:BB:1B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EAFE6F2EF325E400073F37C00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5317c311-b69c-3892-b288-522c8ee207cf.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 3949 IP address blocks: 204.2.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:f2:ef:32:5e:40:00:73:f3:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=643fd177-60a3-455e-b072-69b3f84f892f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:28:d2:da:9c:ef:5b:1e:e2:47:91:43:3c: 4e:f7:50:fd:c8:32:00:0f:dc:0f:33:ef:a9:72:6d: 1b:3c:cd:52:a5:71:22:ef:72:bf:36:2c:6c:42:54: df:7f:8a:90:1b:0a:7d:86:bb:38:7c:cb:2b:aa:96: f3:1d:9d:0a:d2:dc:78:b1:b2:0f:8c:0c:9c:98:4a: bd:8c:1d:fc:25:29:c7:f8:1a:01:d4:d5:df:9c:4b: cd:f5:de:b0:eb:af:34:d6:6d:22:c1:1c:67:82:3c: 96:f4:38:55:28:62:d8:7e:26:d2:76:04:b9:a4:13: 05:11:69:7c:35:ef:bf:b8:5e:23:de:de:73:24:50: 70:b9:4f:06:54:1b:bb:cc:e5:f6:e0:a4:77:c3:12: bf:75:fa:e2:09:04:6f:37:1e:d5:16:a0:9f:cb:5c: c4:06:53:6c:3d:b9:b6:a5:c1:61:39:a1:c8:1c:0f: 96:21:5f:1c:f7:c8:05:9d:e7:ab:ea:39:25:f0:55: 0f:cf:47:a8:2d:fd:e4:8f:0c:86:fb:0b:08:50:d2: 79:4f:09:4d:30:29:91:b7:b7:fc:80:ff:f3:f3:6b: 35:3e:53:ca:65:b5:75:56:e5:3b:c0:0f:57:06:94: a5:65:8e:bc:53:3e:f0:45:29:19:7d:a8:ab:6b:9c: de:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1E:88:15:50:42:E3:A4:69:28:50:57:74:AD:C5:25:D9:DE:BB:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5317c311-b69c-3892-b288-522c8ee207cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:94:e5:40:5f:ba:33:26:97:f7:30:19:73:0e:c5:1c:fa:95: f3:38:1d:97:41:0a:ec:3b:26:9c:39:d1:71:8e:90:76:09:7b: 4a:5c:3c:cd:4f:2e:64:ce:cf:23:34:cf:a3:d8:93:63:b6:a3: e6:7c:51:ce:5e:2b:91:6f:c8:5c:93:58:62:f7:ba:34:f2:a8: fb:81:c1:e5:62:e5:6a:23:9b:06:a0:fa:33:fc:e5:27:60:b2: 6d:61:7d:93:8b:24:29:c0:74:e4:d9:0b:eb:ca:93:88:92:54: 05:0f:6c:43:b5:93:fc:f2:d7:05:a5:f3:08:22:e8:4e:db:c1: ff:b2:2e:5a:4d:f2:4e:ff:00:a6:f8:f3:1e:61:1f:a1:62:f6: 18:1d:c7:63:07:99:1b:c3:9d:47:fb:3e:2b:5c:a7:b4:72:81: bf:c5:ef:c4:d9:83:b1:dd:6b:39:89:1b:98:dc:73:58:57:ac: fa:ac:1e:37:05:48:20:ce:98:19:9c:f8:96:48:b6:49:63:ee: ca:83:72:83:1d:27:c4:25:d0:56:e9:30:1d:6c:10:b7:97:22: 40:0f:c2:5e:8b:61:63:81:3e:b9:38:15:7d:87:60:a6:cf:b9: 83:d4:c9:d7:51:82:05:9f:d0:72:64:f6:7b:26:7e:0e:84:7d: 11:4b:c8:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vLvMl5AAHPzfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk NjQzZmQxNzctNjBhMy00NTVlLWIwNzItNjliM2Y4NGY4OTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonco0tqc71se4keRQzxO91D9yDIAD9wPM++p cm0bPM1SpXEi73K/NixsQlTff4qQGwp9hrs4fMsrqpbzHZ0K0tx4sbIPjAycmEq9 jB38JSnH+BoB1NXfnEvN9d6w66801m0iwRxngjyW9DhVKGLYfibSdgS5pBMFEWl8 Ne+/uF4j3t5zJFBwuU8GVBu7zOX24KR3wxK/dfriCQRvNx7VFqCfy1zEBlNsPbm2 pcFhOaHIHA+WIV8c98gFneer6jkl8FUPz0eoLf3kjwyG+wsIUNJ5TwlNMCmRt7f8 gP/z82s1PlPKZbV1VuU7wA9XBpSlZY68Uz7wRSkZfaira5zeyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQeiBVQQuOkaShQV3StxSXZ3rsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTMxN2MzMTEtYjY5Yy0z ODkyLWIyODgtNTIyYzhlZTIwN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAIdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2U5UBfujMml/cwGXMOxRz6lfM4HZdBCuw7Jpw50XGOkHYJe0pcPM1P LmTOzyM0z6PYk2O2o+Z8Uc5eK5FvyFyTWGL3ujTyqPuBweVi5Wojmwag+jP85Sdg sm1hfZOLJCnAdOTZC+vKk4iSVAUPbEO1k/zy1wWl8wgi6E7bwf+yLlpN8k7/AKb4 8x5hH6Fi9hgdx2MHmRvDnUf7Pitcp7Rygb/F78TZg7HdazmJG5jcc1hXrPqsHjcF SCDOmBmc+JZItklj7sqDcoMdJ8Ql0FbpMB1sELeXIkAPwl6LYWOBPrk4FX2HYKbP uYPUyddRggWf0HJk9nsmfg6EfRFLyMI= -----END CERTIFICATE-----Generated at Thu Sep 3 07:13:53 2026 by rpki-client