$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5dbadcd1-5d98-3a9b-b45e-6a8d81bdb81d.roa File: 5dbadcd1-5d98-3a9b-b45e-6a8d81bdb81d.roa (raw, json) Hash identifier: JL6pNuke5yt8s4J+ujsN/yl/ZRpYd6r73XjZ1Vbj6Dg= Subject key identifier: 2F:5E:8C:24:20:FF:45:AE:0A:24:B7:3F:CB:FF:7F:B4:70:21:E4:61 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE423483742BCD44BFB507300 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5dbadcd1-5d98-3a9b-b45e-6a8d81bdb81d.roa Signing time: Wed 19 Aug 2026 18:03:54 +0000 ROA not before: Wed 19 Aug 2026 18:03:54 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 204.156.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:48:37:42:bc:d4:4b:fb:50:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:54 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=af3c9905-c20f-4095-b72f-45dbb09507dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:33:15:aa:8b:f9:f9:53:0b:23:48:c7:dc:b2: a8:3d:38:b5:b2:de:de:0a:29:af:f2:50:50:26:69: c4:57:14:1f:fd:2c:8a:da:84:ab:b3:22:07:97:5d: 44:35:8f:9f:c3:ca:ab:07:a0:f5:8f:2b:e0:bc:11: 92:64:01:ca:83:20:22:33:b4:e9:f3:71:ce:0a:8a: 68:5c:be:d0:aa:5a:20:5c:72:cc:76:87:57:3e:c1: bc:24:e7:14:67:ef:a1:a1:ea:fc:dc:77:bf:ef:c3: cd:34:c8:e5:fd:4a:8e:ff:8c:64:cd:e7:95:43:97: 5c:5a:6a:8c:30:11:50:16:56:72:7a:72:ed:ec:14: 0c:a7:f2:28:88:77:84:a4:82:d0:13:b2:3a:16:1b: 47:e4:8f:fc:0b:8f:50:60:2f:e7:dd:85:a2:bd:8c: 99:92:33:0c:a1:e0:f5:cc:46:ea:0a:93:5a:c3:05: 66:4a:10:a7:77:f3:b5:30:43:5c:2d:f5:9a:f5:f9: 47:67:c8:c9:f2:ef:f9:98:7a:6f:b1:54:f3:0b:c7: 60:7e:be:64:60:aa:c1:d1:3d:55:af:b5:18:f8:cd: d5:07:21:d1:13:e6:9b:8e:f5:f0:52:73:fe:09:be: 64:eb:50:54:b9:cd:79:44:69:ad:08:a2:83:04:7e: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5E:8C:24:20:FF:45:AE:0A:24:B7:3F:CB:FF:7F:B4:70:21:E4:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5dbadcd1-5d98-3a9b-b45e-6a8d81bdb81d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.156.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:2a:d3:00:f9:d9:05:10:60:cd:a0:ab:1a:1f:8a:c8:4d:ca: 91:e0:69:aa:df:d3:d7:8c:3c:2a:55:de:2f:cb:37:d7:2d:11: c8:84:5e:46:f4:9e:5a:2f:f8:dc:ff:8a:3c:9d:85:db:94:2e: 37:fc:c3:53:02:47:d9:e4:48:e9:65:07:b7:08:a2:7d:fa:17: da:b9:5b:dc:76:e8:a7:37:4d:f9:95:af:73:1a:dd:72:76:d1: 12:ba:96:a5:b9:15:f2:ef:61:2f:ec:47:68:df:f8:16:53:58: 7c:b8:00:9c:d5:65:03:36:3b:a1:8c:da:92:2a:3b:14:6b:18: 31:06:d4:f9:90:9b:6c:bb:e0:b4:bb:d6:5a:6a:17:d0:27:db: 4e:3c:95:e3:12:ba:c4:09:9b:fc:88:62:04:b1:da:7b:98:6f: a6:29:96:4b:27:9d:d6:ca:29:0e:4c:8a:66:38:8e:96:30:e6: 4b:d6:c6:bd:e7:4e:d2:99:57:72:c2:8b:39:bb:c6:89:97:6d: 1a:bb:5f:b6:0c:5a:d6:d2:5c:09:28:05:0c:f3:85:83:86:52: ec:9b:69:21:1f:87:0f:7a:dc:68:2a:7d:da:8e:49:63:02:13: b1:0d:f1:d5:3b:25:49:ce:fd:fb:9a:0f:4f:96:b7:95:19:44: 0f:64:fe:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0g3QrzUS/tQcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1NFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk YWYzYzk5MDUtYzIwZi00MDk1LWI3MmYtNDVkYmIwOTUwN2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzMVqov5+VMLI0jH3LKoPTi1st7eCimv8lBQ JmnEVxQf/SyK2oSrsyIHl11ENY+fw8qrB6D1jyvgvBGSZAHKgyAiM7Tp83HOCopo XL7QqlogXHLMdodXPsG8JOcUZ++hoer83He/78PNNMjl/UqO/4xkzeeVQ5dcWmqM MBFQFlZyenLt7BQMp/IoiHeEpILQE7I6FhtH5I/8C49QYC/n3YWivYyZkjMMoeD1 zEbqCpNawwVmShCnd/O1MENcLfWa9flHZ8jJ8u/5mHpvsVTzC8dgfr5kYKrB0T1V r7UY+M3VByHRE+abjvXwUnP+Cb5k61BUuc15RGmtCKKDBH435QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9ejCQg/0WuCiS3P8v/f7RwIeRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWRiYWRjZDEtNWQ5OC0z YTliLWI0NWUtNmE4ZDgxYmRiODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzJwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEq0wD52QUQYM2gqxofishNypHgaarf09eMPCpV3i/LN9ctEciEXkb0 nlov+Nz/ijydhduULjf8w1MCR9nkSOllB7cIon36F9q5W9x26Kc3TfmVr3Ma3XJ2 0RK6lqW5FfLvYS/sR2jf+BZTWHy4AJzVZQM2O6GM2pIqOxRrGDEG1PmQm2y74LS7 1lpqF9An2048leMSusQJm/yIYgSx2nuYb6YplksnndbKKQ5MimY4jpYw5kvWxr3n TtKZV3LCizm7xomXbRq7X7YMWtbSXAkoBQzzhYOGUuybaSEfhw963GgqfdqOSWMC E7EN8dU7JUnO/fuaD0+Wt5UZRA9k/tw= -----END CERTIFICATE-----Generated at Thu Sep 17 12:11:39 2026 by rpki-client