$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/65401d12-d0db-3cf1-a960-533133f3631e.roa File: 65401d12-d0db-3cf1-a960-533133f3631e.roa (raw, json) Hash identifier: hyy+4hnfLMLsqcKEZdSSGw0u0mZWh0qKMNBnw/RTo+U= Subject key identifier: C4:53:4E:D6:4F:51:27:43:53:4F:B0:2E:B1:3F:C0:92:E2:DC:94:2D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232A3CB4CE3B6FAEFE5520 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/65401d12-d0db-3cf1-a960-533133f3631e.roa Signing time: Wed 19 Aug 2026 18:03:40 +0000 ROA not before: Wed 19 Aug 2026 18:03:40 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 393536 IP address blocks: 204.2.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:2a:3c:b4:ce:3b:6f:ae:fe:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:40 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=8da607c2-a6a7-4c95-bf30-8a57d25a2c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:c3:a6:4b:05:a7:16:9f:c4:1f:ab:90:2b: 6f:9b:8a:dc:47:57:3b:8d:2b:81:57:fd:c3:27:bc: 1d:12:65:39:be:0d:e6:83:f3:ce:0f:53:6c:ad:13: 5a:03:66:7b:b6:4e:8d:ff:b8:52:e1:fa:35:87:49: 12:62:a8:9e:99:42:d5:45:41:33:59:9e:cc:97:f3: 35:af:6b:7e:b8:bb:9c:5f:25:f2:d0:53:44:8b:22: 40:be:34:fb:38:3b:6d:54:f0:44:40:9b:32:4c:d6: cc:3f:c5:20:8f:c4:91:87:4a:af:c0:b9:b8:6e:14: d9:09:f9:75:58:76:72:11:f0:a5:0d:de:c4:0e:66: dd:5d:31:ff:02:cf:83:ad:f5:5e:54:10:f4:e2:65: 03:ee:b3:9a:c3:a6:54:f5:e9:c3:0c:68:ee:e1:c7: c2:3b:33:be:56:12:86:10:fb:01:35:9e:89:db:07: 0c:28:20:ad:9a:0f:17:53:58:ca:b2:b3:c9:52:29: b7:62:1e:a3:a6:e9:21:a2:e5:75:ec:18:9d:97:9d: 16:6c:a0:ee:04:4c:40:fb:7a:68:fc:44:45:40:f0: 60:a3:62:6f:58:9d:80:65:c3:43:d6:31:9a:4d:9c: e6:fe:1f:db:8e:b8:3f:55:bd:01:00:82:64:28:8a: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:53:4E:D6:4F:51:27:43:53:4F:B0:2E:B1:3F:C0:92:E2:DC:94:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/65401d12-d0db-3cf1-a960-533133f3631e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b5:26:e0:9b:74:4b:2f:b0:d1:ea:17:9a:37:91:f6:e8:03: ff:cc:a7:81:e4:c1:9c:a1:55:4d:46:9b:03:62:29:f8:59:3d: c0:46:1b:0b:00:f7:cd:d8:c0:7f:ea:1c:7d:74:e9:27:c1:7b: 05:ae:3e:d0:a4:a0:c6:6e:f0:63:20:bd:5d:22:6d:64:f2:0c: e8:07:a1:a5:e0:f1:54:51:8d:2d:ce:c0:ac:7c:28:43:f2:67: 19:5d:ad:54:6d:7c:4d:d7:9a:08:db:b2:b2:13:00:02:7d:be: c4:9b:53:26:53:e8:27:9e:10:6a:11:dd:01:bb:85:f3:e8:a7: f0:85:86:69:4c:3a:99:b2:04:38:15:86:5e:85:a0:c7:71:10: f5:90:fb:18:02:b7:c5:fc:20:91:1e:68:a1:9e:a5:78:dc:b6: c5:6b:8a:1e:9c:a3:96:d6:1c:82:24:f2:e8:09:f5:22:40:2f: 8f:dd:c8:63:5e:b4:d0:74:6a:96:da:52:3e:0c:95:26:18:0f: 28:4b:50:d7:95:7a:6c:a7:15:b5:d0:bb:2c:04:1b:1d:16:70: 32:fd:91:7f:a5:84:47:8d:8d:35:6a:56:1b:8f:39:58:91:e2: 3e:37:47:0c:e5:0a:d2:84:97:41:b3:88:8e:85:0a:ba:ba:4e: 34:5b:25:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyo8tM47b67+VSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk OGRhNjA3YzItYTZhNy00Yzk1LWJmMzAtOGE1N2QyNWEyYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLnDpksFpxafxB+rkCtvm4rcR1c7jSuBV/3D J7wdEmU5vg3mg/POD1NsrRNaA2Z7tk6N/7hS4fo1h0kSYqiemULVRUEzWZ7Ml/M1 r2t+uLucXyXy0FNEiyJAvjT7ODttVPBEQJsyTNbMP8Ugj8SRh0qvwLm4bhTZCfl1 WHZyEfClDd7EDmbdXTH/As+DrfVeVBD04mUD7rOaw6ZU9enDDGju4cfCOzO+VhKG EPsBNZ6J2wcMKCCtmg8XU1jKsrPJUim3Yh6jpukhouV17Bidl50WbKDuBExA+3po /ERFQPBgo2JvWJ2AZcND1jGaTZzm/h/bjrg/Vb0BAIJkKIqOrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRTTtZPUSdDU0+wLrE/wJLi3JQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjU0MDFkMTItZDBkYi0z Y2YxLWE5NjAtNTMzMTMzZjM2MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAK2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO1JuCbdEsvsNHqF5o3kfboA//Mp4HkwZyhVU1GmwNiKfhZPcBGGwsA 983YwH/qHH106SfBewWuPtCkoMZu8GMgvV0ibWTyDOgHoaXg8VRRjS3OwKx8KEPy ZxldrVRtfE3XmgjbsrITAAJ9vsSbUyZT6CeeEGoR3QG7hfPop/CFhmlMOpmyBDgV hl6FoMdxEPWQ+xgCt8X8IJEeaKGepXjctsVrih6co5bWHIIk8ugJ9SJAL4/dyGNe tNB0apbaUj4MlSYYDyhLUNeVemynFbXQuywEGx0WcDL9kX+lhEeNjTVqVhuPOViR 4j43RwzlCtKEl0GziI6FCrq6TjRbJXk= -----END CERTIFICATE-----Generated at Thu Sep 17 14:59:11 2026 by rpki-client