$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a66a24e-bb89-3495-8eab-69765250b89c.roa File: 5a66a24e-bb89-3495-8eab-69765250b89c.roa (raw, json) Hash identifier: k/jgYbjQZFHFVTrBDeN3J2/MzX4zBJt2iCo7IkWofu4= Subject key identifier: 9C:EF:62:0C:88:7A:C2:1D:04:5A:74:BC:FB:D7:DF:63:47:E7:CF:9B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EA790031E320A54082D4F7540 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a66a24e-bb89-3495-8eab-69765250b89c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 140224 IP address blocks: 207.57.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:03:1e:32:0a:54:08:2d:4f:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bda6dd33-dcbb-4eeb-a6f9-405565207705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:dc:33:c0:ca:e7:72:d1:25:88:8a:a9:7f: b2:a9:2d:65:48:eb:90:29:d7:2a:c1:64:03:c7:ab: 64:77:e8:a4:e2:76:d5:41:96:95:15:6a:59:4e:0f: d6:37:c4:7d:70:92:d3:a7:f0:df:72:4a:8b:03:e7: 43:6f:07:38:77:c8:b4:8a:61:1d:00:14:63:c5:4d: 61:7a:5b:ea:ba:4b:23:00:f9:9a:a4:1b:35:cb:54: 51:19:cb:c4:07:c6:f9:03:d8:53:45:93:24:ab:3e: 73:b8:2e:fa:21:ec:57:fd:b9:5d:5e:16:63:ad:91: b7:39:47:d0:1a:ef:aa:ea:4a:17:29:da:0c:a4:22: b2:b0:ed:55:3d:e1:fc:15:a1:62:03:73:53:a9:62: 25:f7:c9:0d:b9:4f:f5:2f:aa:5b:0f:8b:d1:84:6a: e4:bd:70:31:75:f5:51:ea:92:54:d8:7f:d2:14:a2: 99:1c:33:26:64:f6:2b:29:cd:fb:43:01:a7:14:22: 0d:6f:06:39:7b:06:56:22:a0:7c:14:18:69:62:9f: 51:08:4c:ea:02:c6:56:d0:0a:0d:fa:c8:52:2d:09: c9:19:cf:dd:50:5e:8b:3c:4e:26:44:5b:11:a8:2d: 44:04:dc:b5:8e:70:32:54:6f:e0:72:f1:5b:58:a7: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EF:62:0C:88:7A:C2:1D:04:5A:74:BC:FB:D7:DF:63:47:E7:CF:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a66a24e-bb89-3495-8eab-69765250b89c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.57.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:96:e8:e6:d3:0d:38:0f:66:98:0d:c7:05:bf:b4:46:62:de: b8:4f:c9:fe:00:21:34:9a:45:d0:81:8e:22:17:cf:ab:fd:d5: f9:d2:a3:69:86:d1:05:c6:cb:f2:ec:2a:6b:5b:c4:f2:1a:25: f9:51:5e:68:17:04:ff:e8:a1:2b:2e:d5:1f:ae:08:80:c6:53: db:16:f0:41:e5:40:56:38:8a:ac:b6:c5:37:66:e8:37:16:95: c8:00:90:7b:ca:13:4d:40:57:24:9a:ca:06:bd:62:66:d7:84: 77:59:09:b1:5f:05:17:8a:e5:6c:5c:36:0f:ca:ca:2b:4a:16: 84:e9:78:0f:f4:42:3e:ac:3b:24:1d:02:e3:ee:3d:d3:e2:31: eb:57:d9:af:14:97:cc:49:45:c6:d6:1d:f5:96:c7:51:d6:97: 18:ba:50:b8:b5:53:ab:fd:3f:a5:9e:bb:e3:1e:0b:69:ce:82: d1:38:c7:30:37:f5:27:46:9d:81:00:0e:a1:8d:10:ed:4d:81: 32:15:ed:9a:26:c2:c0:ae:22:cb:d5:f7:7e:60:0f:77:05:ff: 79:de:74:51:b0:8f:52:93:c5:44:6f:ea:20:33:8a:02:75:46: 82:6e:f3:1c:fc:4d:39:3f:6b:f1:04:46:e6:bb:f2:e7:99:6f: bf:3f:c5:cc -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nkAMeMgpUCC1PdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmRhNmRkMzMtZGNiYi00ZWViLWE2ZjktNDA1NTY1MjA3NzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkbcM8DK53LRJYiKqX+yqS1lSOuQKdcqwWQD x6tkd+ik4nbVQZaVFWpZTg/WN8R9cJLTp/DfckqLA+dDbwc4d8i0imEdABRjxU1h elvquksjAPmapBs1y1RRGcvEB8b5A9hTRZMkqz5zuC76IexX/bldXhZjrZG3OUfQ Gu+q6koXKdoMpCKysO1VPeH8FaFiA3NTqWIl98kNuU/1L6pbD4vRhGrkvXAxdfVR 6pJU2H/SFKKZHDMmZPYrKc37QwGnFCINbwY5ewZWIqB8FBhpYp9RCEzqAsZW0AoN +shSLQnJGc/dUF6LPE4mRFsRqC1EBNy1jnAyVG/gcvFbWKcuSQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJzvYgyIesIdBFp0vPvX32NH58+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWE2NmEyNGUtYmI4OS0z NDk1LThlYWItNjk3NjUyNTBiODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzzkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAyJbo5tMNOA9mmA3HBb+0RmLeuE/J/gAhNJpF0IGOIhfPq/3V+dKjaYbR BcbL8uwqa1vE8hol+VFeaBcE/+ihKy7VH64IgMZT2xbwQeVAVjiKrLbFN2boNxaV yACQe8oTTUBXJJrKBr1iZteEd1kJsV8FF4rlbFw2D8rKK0oWhOl4D/RCPqw7JB0C 4+490+Ix61fZrxSXzElFxtYd9ZbHUdaXGLpQuLVTq/0/pZ674x4Lac6C0TjHMDf1 J0adgQAOoY0Q7U2BMhXtmibCwK4iy9X3fmAPdwX/ed50UbCPUpPFRG/qIDOKAnVG gm7zHPxNOT9r8QRG5rvy55lvvz/FzA== -----END CERTIFICATE-----Generated at Thu Sep 3 20:47:42 2026 by rpki-client