$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5f879923-3248-3286-a55b-276f3a4ff7c8.roa File: 5f879923-3248-3286-a55b-276f3a4ff7c8.roa (raw, json) Hash identifier: LzY7+nskMlQQhexk/alp31UNblOkTjxchjxMTR9W+II= Subject key identifier: AF:85:05:27:49:95:7F:CD:0A:6A:D2:E5:83:85:08:10:15:51:61:6F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F428DC372D0B4E22098618080 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5f879923-3248-3286-a55b-276f3a4ff7c8.roa Signing time: Tue 22 Sep 2026 13:44:26 +0000 ROA not before: Tue 22 Sep 2026 13:44:26 +0000 ROA not after: Sun 20 Dec 2026 20:38:06 +0000 asID: 148996 IP address blocks: 199.234.72.0/21 maxlen: 24 204.42.96.0/21 maxlen: 24 204.42.240.0/21 maxlen: 24 204.142.184.0/21 maxlen: 24 204.143.48.0/21 maxlen: 24 204.170.40.0/21 maxlen: 24 205.238.0.0/20 maxlen: 24 205.238.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:8d:c3:72:d0:b4:e2:20:98:61:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 22 13:44:26 2026 GMT Not After : Dec 20 20:38:06 2026 GMT Subject: CN=a676537e-f048-487d-a175-c9def80f60b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c0:00:0f:04:6c:23:f1:9c:06:e6:31:a8:08: 20:3e:1d:d8:c6:df:2a:bb:f5:6d:41:47:86:8a:71: 18:8d:3c:19:5f:6e:a0:91:14:e3:bc:a9:09:b5:7f: 3d:db:eb:8b:fd:5f:3d:d4:1b:b3:f4:b1:2a:33:93: 62:8e:3b:1b:68:d2:6a:3b:cd:7d:45:04:2e:f5:25: c3:6f:34:7a:ab:49:1d:b8:7e:ca:a6:f7:ac:da:8c: ec:89:2e:37:ee:c9:38:ad:32:4b:c4:9c:b1:13:8f: 14:6d:d9:8d:82:ca:10:8e:3a:ab:d0:c4:bd:8c:94: a8:07:89:de:8c:75:17:69:5c:8d:17:bc:e4:d1:ff: 0c:84:f2:50:f1:cb:09:e8:1a:97:ea:ca:90:d9:f4: 89:3e:4a:b4:ae:44:a3:84:8b:f1:37:c2:e6:a9:0b: e9:e1:da:a4:7b:5f:c7:87:24:08:25:2e:05:c7:87: 16:b1:37:0f:0e:8e:8e:6e:a2:63:3b:6e:18:bd:f3: 39:0d:c1:7e:d7:22:01:3e:9f:23:e2:16:c4:93:4c: 60:9d:2b:62:36:93:e2:da:ef:f5:8e:09:12:90:0c: f8:50:79:70:e0:4a:88:21:2f:3a:b5:9a:b1:e8:21: d1:b9:bc:22:30:77:2c:7c:3c:5e:3b:5d:01:d5:93: 15:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:85:05:27:49:95:7F:CD:0A:6A:D2:E5:83:85:08:10:15:51:61:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5f879923-3248-3286-a55b-276f3a4ff7c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 199.234.72.0/21 204.42.96.0/21 204.42.240.0/21 204.142.184.0/21 204.143.48.0/21 204.170.40.0/21 205.238.0.0/20 205.238.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:80:55:ca:0e:fa:e6:19:5f:66:f1:df:2c:be:c3:55:ac:83: a2:15:94:45:04:f7:11:7b:7f:61:31:bb:0a:d6:99:24:fb:5b: df:3a:3a:cb:19:9e:26:e8:e7:ca:15:7b:f6:f8:a0:ac:8d:77: de:12:33:4f:29:a2:71:cf:83:6c:a7:93:8b:0d:84:8e:39:43: 1d:42:b0:4b:ab:c7:e5:14:ba:f9:16:8a:7f:f3:d9:9a:37:bf: 3d:a6:7c:b6:43:ab:af:90:4a:eb:22:69:00:68:8e:96:ba:5b: 3b:e1:04:bd:8b:24:79:83:b9:e8:17:2d:2d:8e:a7:50:df:e5: c5:d6:a6:02:8c:e6:d2:17:93:5e:a0:37:a8:cf:74:d6:64:67: dd:68:73:52:7a:5c:4d:d9:33:9b:fe:16:16:89:c2:eb:94:dc: 13:03:9f:de:e6:c4:47:a1:4d:df:3c:ad:de:a7:06:d8:8a:3d: 14:c1:af:67:c2:2a:fe:62:c0:e4:fd:43:17:30:50:c8:51:57: b3:39:1b:33:00:34:c5:dd:4a:f3:ea:be:8a:8e:99:5e:50:df: 58:16:e4:9b:7a:63:18:9e:ff:43:f9:66:44:80:eb:ff:1b:2d: 01:dd:53:5c:35:13:2c:83:9c:03:22:5b:8a:84:81:42:69:ba: 6d:3c:c3:b7 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWE9CjcNy0LTiIJhhgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkyMjEzNDQyNloXDTI2MTIyMDIwMzgwNlowLzEtMCsGA1UEAxMk YTY3NjUzN2UtZjA0OC00ODdkLWExNzUtYzlkZWY4MGY2MGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMAADwRsI/GcBuYxqAggPh3Yxt8qu/VtQUeG inEYjTwZX26gkRTjvKkJtX892+uL/V891Buz9LEqM5NijjsbaNJqO819RQQu9SXD bzR6q0kduH7Kpves2ozsiS437sk4rTJLxJyxE48UbdmNgsoQjjqr0MS9jJSoB4ne jHUXaVyNF7zk0f8MhPJQ8csJ6BqX6sqQ2fSJPkq0rkSjhIvxN8LmqQvp4dqke1/H hyQIJS4Fx4cWsTcPDo6ObqJjO24YvfM5DcF+1yIBPp8j4hbEk0xgnStiNpPi2u/1 jgkSkAz4UHlw4EqIIS86tZqx6CHRubwiMHcsfDxeO10B1ZMV2wIDAQABo4IDfzCC A3swHQYDVR0OBBYEFK+FBSdJlX/NCmrS5YOFCBAVUWFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWY4Nzk5MjMtMzI0OC0z Mjg2LWE1NWItMjc2ZjNhNGZmN2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQDx+pIAwQD zCpgAwQDzCrwAwQDzI64AwQDzI8wAwQDzKooAwQEze4AAwQFze4gMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIWAVcoO+uYZX2bx3yy+w1Wsg6IVlEUE9xF7f2ExuwrWmST7W986OssZnibo58oV e/b4oKyNd94SM08ponHPg2ynk4sNhI45Qx1CsEurx+UUuvkWin/z2Zo3vz2mfLZD q6+QSusiaQBojpa6WzvhBL2LJHmDuegXLS2Op1Df5cXWpgKM5tIXk16gN6jPdNZk Z91oc1J6XE3ZM5v+FhaJwuuU3BMDn97mxEehTd88rd6nBtiKPRTBr2fCKv5iwOT9 QxcwUMhRV7M5GzMANMXdSvPqvoqOmV5Q31gW5Jt6Yxie/0P5ZkSA6/8bLQHdU1w1 EyyDnAMiW4qEgUJpum08w7c= -----END CERTIFICATE-----Generated at Thu Sep 24 23:36:52 2026 by rpki-client