$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66eb98d5-9828-355f-90e8-e3d0a8720072.roa File: 66eb98d5-9828-355f-90e8-e3d0a8720072.roa (raw, json) Hash identifier: Wg2UeKUruXS7i6FQnv9cD9AUzoopnJATCaTlW3/IS5g= Subject key identifier: D2:5B:39:D5:0E:E5:8C:AB:7C:06:63:30:B6:55:D8:3C:A6:9D:BF:A1 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233D31111FF9090CDDFB40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66eb98d5-9828-355f-90e8-e3d0a8720072.roa Signing time: Wed 19 Aug 2026 18:03:49 +0000 ROA not before: Wed 19 Aug 2026 18:03:49 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 174 IP address blocks: 198.88.233.40/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3d:31:11:1f:f9:09:0c:dd:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:49 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=41aabfaf-e006-4586-bc5c-fa6a13059a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:ae:fa:61:9a:27:53:51:5e:d7:d5:e8:11: 08:69:87:00:01:9b:82:5f:30:ae:5e:57:ee:60:c2: 67:1b:27:ec:41:69:7e:b3:02:fb:a4:7a:ee:cb:30: 92:3f:54:68:7a:60:1c:a5:41:1d:9c:54:1e:46:bb: 65:ac:74:3c:f6:03:72:a9:7a:7f:35:08:a4:b8:eb: cb:4c:64:ec:ab:88:3b:57:43:ff:0e:b2:34:fb:a1: b4:af:6d:a9:40:27:0e:73:35:d4:f5:3e:ad:bd:23: 0e:bf:b5:40:e5:08:61:ce:b8:07:4e:90:73:50:1a: d3:26:53:da:46:15:5c:2b:fb:ff:2d:ef:36:0e:59: a0:63:ff:49:fe:10:87:a2:d6:78:36:40:c8:29:de: e7:1e:a7:f9:ff:b1:50:3d:c7:6a:96:c6:93:54:16: 68:e6:7c:fb:62:6d:38:aa:3e:f4:1f:95:c4:d5:73: 99:33:4f:cd:f8:31:3e:74:fe:c1:25:dc:e9:73:15: 00:db:8c:f8:3e:13:1e:b6:96:42:0a:81:7c:b5:63: d8:00:29:86:40:44:98:73:a9:75:0a:51:d0:6f:7c: ac:0d:c2:0c:e1:6c:4e:82:d1:13:07:fe:da:8d:3c: af:9d:2d:55:e3:2f:2e:95:27:99:65:cb:ad:6f:bb: 4d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5B:39:D5:0E:E5:8C:AB:7C:06:63:30:B6:55:D8:3C:A6:9D:BF:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66eb98d5-9828-355f-90e8-e3d0a8720072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.88.233.40/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:57:4e:d2:9a:74:f2:4b:82:9c:cb:c4:5b:9d:8e:55:81:b9: 3e:da:5a:d9:25:e0:7c:d7:96:8c:57:a1:07:9f:22:5c:90:31: 69:37:0f:8c:64:aa:84:ea:86:5a:47:7a:ea:45:44:50:f2:47: db:25:0b:df:0f:c6:48:ba:8c:62:38:32:dd:18:56:20:1b:7a: c4:43:86:2e:ac:82:e8:ce:0c:42:19:19:67:f2:f1:12:0d:75: 24:ae:25:4b:6e:01:ec:57:a7:95:c7:78:a5:e3:34:46:fc:09: a9:24:c5:23:a3:9d:ff:8c:87:cb:31:4d:f8:2e:70:e6:06:9f: a5:fe:eb:cf:bb:65:33:07:80:32:f1:27:cd:f6:50:db:bc:71: 5a:16:65:e7:0f:26:10:e6:fb:68:a7:dd:8a:1c:7f:e0:69:b6: ad:8a:5b:64:ca:2e:04:2f:24:96:4d:be:b3:05:e5:2b:d1:ec: a7:a6:20:13:7e:59:a5:e9:58:f1:97:53:53:c0:9e:61:97:a9: 77:65:a1:45:79:31:73:99:20:58:07:ab:cc:b9:55:60:9e:38: f3:a6:9d:f3:c5:5f:ed:30:bc:cb:94:be:3c:5e:44:b5:64:f5: aa:25:6e:4b:ea:0d:52:b9:c8:36:a7:de:48:c3:b9:99:fd:3c: 58:31:37:bb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7kIz0xER/5CQzd+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk NDFhYWJmYWYtZTAwNi00NTg2LWJjNWMtZmE2YTEzMDU5YTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEuu+mGaJ1NRXtfV6BEIaYcAAZuCXzCuXlfu YMJnGyfsQWl+swL7pHruyzCSP1RoemAcpUEdnFQeRrtlrHQ89gNyqXp/NQikuOvL TGTsq4g7V0P/DrI0+6G0r22pQCcOczXU9T6tvSMOv7VA5QhhzrgHTpBzUBrTJlPa RhVcK/v/Le82DlmgY/9J/hCHotZ4NkDIKd7nHqf5/7FQPcdqlsaTVBZo5nz7Ym04 qj70H5XE1XOZM0/N+DE+dP7BJdzpcxUA24z4PhMetpZCCoF8tWPYACmGQESYc6l1 ClHQb3ysDcIM4WxOgtETB/7ajTyvnS1V4y8ulSeZZcutb7tNrQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNJbOdUO5YyrfAZjMLZV2Dymnb+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjZlYjk4ZDUtOTgyOC0z NTVmLTkwZTgtZTNkMGE4NzIwMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDxljpKDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBV07SmnTyS4Kcy8RbnY5Vgbk+2lrZJeB815aMV6EHnyJckDFpNw+M ZKqE6oZaR3rqRURQ8kfbJQvfD8ZIuoxiODLdGFYgG3rEQ4YurILozgxCGRln8vES DXUkriVLbgHsV6eVx3il4zRG/AmpJMUjo53/jIfLMU34LnDmBp+l/uvPu2UzB4Ay 8SfN9lDbvHFaFmXnDyYQ5vtop92KHH/gabatiltkyi4ELySWTb6zBeUr0eynpiAT flml6Vjxl1NTwJ5hl6l3ZaFFeTFzmSBYB6vMuVVgnjjzpp3zxV/tMLzLlL48XkS1 ZPWqJW5L6g1Sucg2p95Iw7mZ/TxYMTe7 -----END CERTIFICATE-----Generated at Thu Sep 3 12:58:54 2026 by rpki-client