$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6465f0aa-68e5-3254-8d35-3c6fb8929d2a.roa File: 6465f0aa-68e5-3254-8d35-3c6fb8929d2a.roa (raw, json) Hash identifier: Xn8semb2ulPg0P69uTeNw5kx4cVGGtih3KxOj6p34wg= Subject key identifier: 00:25:27:32:29:3A:88:BC:7D:B7:E1:6D:A7:73:D2:09:58:F2:A1:58 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE42341DE94447BD99792DC00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6465f0aa-68e5-3254-8d35-3c6fb8929d2a.roa Signing time: Wed 19 Aug 2026 18:03:51 +0000 ROA not before: Wed 19 Aug 2026 18:03:51 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 31769 IP address blocks: 204.141.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:41:de:94:44:7b:d9:97:92:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:51 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=67d1eec5-4c5d-4052-9a25-158183adc10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:43:e6:58:33:46:3d:a9:a6:18:eb:37:d3:a6: d8:1c:28:09:b3:e7:74:a8:02:52:7c:93:ab:96:b6: 92:15:46:1c:5a:d6:bb:7f:79:d8:f1:7d:9c:1f:b1: aa:a3:87:30:79:1a:0a:a7:60:e1:ad:7e:dc:0b:e4: 1b:bd:cc:6d:42:c6:6d:b6:09:18:d8:9a:3a:7c:56: 4d:81:9b:d0:2c:08:d0:23:b2:2f:74:15:52:d4:64: 60:81:10:13:e7:a3:74:20:69:25:8b:ae:92:38:9b: b8:41:57:94:c5:94:2e:08:1e:13:b6:56:42:8b:44: 3f:27:a3:6b:a7:dc:64:a0:15:8f:41:5e:90:96:fb: 8f:9d:2b:d1:e2:bb:94:53:38:0f:94:71:dd:89:62: 15:0d:78:e5:dc:68:81:b3:26:3d:fb:24:7f:27:2d: 24:db:9c:ad:3a:d4:16:21:b3:ec:98:a1:6b:9f:da: 30:e7:d3:75:ce:fb:c0:22:a6:4b:60:6d:d5:cb:3a: 8d:55:a4:d0:1f:64:14:ee:c2:87:72:6a:27:f0:2a: a3:dc:83:6b:d4:6f:1a:8d:73:e4:b0:54:30:16:33: 31:f6:f2:28:e3:3c:4f:b4:ed:5e:62:2a:bb:2a:63: fb:81:80:70:37:c9:6f:e5:1c:d6:6d:af:35:a2:bb: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:25:27:32:29:3A:88:BC:7D:B7:E1:6D:A7:73:D2:09:58:F2:A1:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6465f0aa-68e5-3254-8d35-3c6fb8929d2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:eb:cc:c8:3d:7b:67:dd:3c:74:e7:28:7f:e8:f3:3f:85:93: 26:28:de:8e:d6:a8:9a:df:79:22:a1:77:85:73:95:bc:29:e4: 1b:1f:57:19:bc:fa:38:a3:9e:1a:72:fe:c3:e5:d3:ce:96:74: 41:89:12:d6:b2:f6:1b:7a:9f:42:87:82:64:2b:ab:e5:34:ed: ec:90:5f:5a:61:06:54:2b:20:ce:7c:cf:90:b4:90:da:b1:0b: 48:e1:1a:2d:b7:bd:36:c9:07:08:4c:a4:0a:1f:4c:c8:bd:c6: 36:35:6c:30:f7:78:de:37:44:e6:5c:cb:c6:ce:70:21:83:06: 3a:c4:42:16:33:e8:96:bc:20:8f:5a:a6:ec:17:10:e9:e2:f9: 58:ff:62:18:2c:73:40:88:9d:d0:72:fb:ff:e2:ce:8a:67:1f: b1:82:05:85:9b:a0:26:27:c3:c6:23:93:4c:cf:01:dd:ff:0d: a8:6a:6d:42:b6:33:54:c9:bc:8d:d1:cc:40:ac:81:d8:c1:1c: 76:87:c5:42:72:a0:82:a5:db:36:df:4b:dc:18:f0:5e:51:41: 98:c3:f5:08:b2:9c:3d:e6:89:24:4d:11:79:f0:81:71:97:61: 75:ff:d1:f4:6d:73:62:4e:0e:f2:12:fe:07:bc:01:2a:c1:67: a1:de:ba:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0HelER72ZeS3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk NjdkMWVlYzUtNGM1ZC00MDUyLTlhMjUtMTU4MTgzYWRjMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykPmWDNGPammGOs306bYHCgJs+d0qAJSfJOr lraSFUYcWta7f3nY8X2cH7Gqo4cweRoKp2DhrX7cC+QbvcxtQsZttgkY2Jo6fFZN gZvQLAjQI7IvdBVS1GRggRAT56N0IGkli66SOJu4QVeUxZQuCB4TtlZCi0Q/J6Nr p9xkoBWPQV6QlvuPnSvR4ruUUzgPlHHdiWIVDXjl3GiBsyY9+yR/Jy0k25ytOtQW IbPsmKFrn9ow59N1zvvAIqZLYG3VyzqNVaTQH2QU7sKHcmon8Cqj3INr1G8ajXPk sFQwFjMx9vIo4zxPtO1eYiq7KmP7gYBwN8lv5RzWba81orvhEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAlJzIpOoi8fbfhbadz0glY8qFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjQ2NWYwYWEtNjhlNS0z MjU0LThkMzUtM2M2ZmI4OTI5ZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzI3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7rzMg9e2fdPHTnKH/o8z+FkyYo3o7WqJrfeSKhd4Vzlbwp5BsfVxm8 +jijnhpy/sPl086WdEGJEtay9ht6n0KHgmQrq+U07eyQX1phBlQrIM58z5C0kNqx C0jhGi23vTbJBwhMpAofTMi9xjY1bDD3eN43ROZcy8bOcCGDBjrEQhYz6Ja8II9a puwXEOni+Vj/Yhgsc0CIndBy+//izopnH7GCBYWboCYnw8Yjk0zPAd3/DahqbUK2 M1TJvI3RzECsgdjBHHaHxUJyoIKl2zbfS9wY8F5RQZjD9QiynD3miSRNEXnwgXGX YXX/0fRtc2JODvIS/ge8ASrBZ6HeurA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:24:16 2026 by rpki-client