$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6871de3a-abd8-381f-b6b8-59bec0b9fc82.roa File: 6871de3a-abd8-381f-b6b8-59bec0b9fc82.roa (raw, json) Hash identifier: DhmymCvGesAxeRHX507B539JXbcbq5IsBo5pGz61JnU= Subject key identifier: 43:59:AA:7F:12:38:28:0F:5D:32:DE:11:1B:06:9F:B1:47:84:5B:94 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233F879347D8AAFB25D900 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6871de3a-abd8-381f-b6b8-59bec0b9fc82.roa Signing time: Wed 19 Aug 2026 18:03:50 +0000 ROA not before: Wed 19 Aug 2026 18:03:50 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 207.71.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3f:87:93:47:d8:aa:fb:25:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:50 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=db6af48a-c538-420f-8ca3-ce05dea10309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:15:d2:e8:cc:f6:27:87:18:5e:3f:8c:0f:60: 17:70:e6:de:1b:58:3a:12:d5:66:b5:43:8a:87:a7: 02:ab:f8:a6:e6:0e:3c:01:e6:ef:47:b6:6f:d2:d2: 7a:10:0a:30:a3:82:e1:d2:57:4f:24:3f:94:50:95: c8:d4:59:e9:5d:80:64:1e:bd:af:3f:a7:96:62:31: e7:07:18:06:d6:00:63:3d:48:fb:ad:48:b1:f6:21: be:e1:cf:ec:53:67:86:fa:c2:4a:b1:65:d4:76:67: e0:37:b2:c7:84:5c:b5:ae:f1:1f:12:d2:76:76:4e: 4e:ed:42:c3:87:b5:3e:4e:0b:1c:cf:10:ba:3d:7e: 4e:1a:75:fe:16:63:be:c3:24:17:82:0b:bd:1d:3e: 7c:15:75:c6:7e:24:51:c1:77:f5:de:c3:18:17:40: 49:d8:7a:ed:9e:79:71:09:cb:06:d1:50:da:b8:44: 67:f9:80:2b:5a:bc:48:9b:a0:c7:56:47:2e:d6:8a: 33:75:c0:fe:51:58:55:c8:21:63:62:35:58:99:20: 82:14:08:1d:20:23:f0:ba:07:2e:a5:1e:b3:ab:5c: 8a:0d:08:6f:16:59:4c:d9:8e:94:c4:60:ac:87:9e: eb:dd:c2:68:42:1f:6b:ec:01:9f:69:f8:03:f1:c6: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:59:AA:7F:12:38:28:0F:5D:32:DE:11:1B:06:9F:B1:47:84:5B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6871de3a-abd8-381f-b6b8-59bec0b9fc82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.71.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:e3:4d:52:07:db:e9:68:27:d1:6f:0e:75:83:9e:56:68:df: a7:6d:42:e8:1d:e1:9c:48:fd:91:25:ed:55:dd:23:10:fc:77: 58:1c:b1:e8:0f:c2:c7:84:75:df:4c:fa:8c:f6:f5:c9:9b:04: a5:eb:98:5d:a4:40:c5:20:e2:94:bb:d5:39:f9:8e:1b:8e:82: 44:89:38:69:ac:7e:1e:d0:25:7d:3a:08:80:ea:ea:c7:c8:8d: 45:49:58:72:ad:5a:df:4f:c7:58:40:49:57:1a:04:fd:90:0d: 65:d5:ef:c8:c8:70:da:92:b3:aa:25:bc:bb:cb:d6:56:45:0c: 32:1a:e1:a4:66:27:a6:8c:49:b6:2a:d1:d0:4a:2d:68:46:ec: 3f:90:08:da:7a:ac:2a:a6:8e:78:46:3c:62:b3:5d:85:da:ae: c7:f6:68:60:8e:45:95:b5:f0:00:bd:35:4e:c5:a3:05:ba:d8: 40:83:bb:5c:1e:97:35:06:a9:b8:5e:62:b8:d7:b7:31:b3:fb: c7:bc:6d:0d:f6:f8:b6:eb:e4:fc:d9:18:b4:30:6f:4a:cf:be: 3d:a2:27:5f:73:80:fe:64:45:f1:51:f2:67:7b:25:f5:22:74: 7c:37:25:a2:cd:44:49:70:91:a9:0e:f7:3e:a5:09:52:44:e6: c2:b9:94:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIz+Hk0fYqvsl2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ZGI2YWY0OGEtYzUzOC00MjBmLThjYTMtY2UwNWRlYTEwMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxXS6Mz2J4cYXj+MD2AXcObeG1g6EtVmtUOK h6cCq/im5g48AebvR7Zv0tJ6EAowo4Lh0ldPJD+UUJXI1FnpXYBkHr2vP6eWYjHn BxgG1gBjPUj7rUix9iG+4c/sU2eG+sJKsWXUdmfgN7LHhFy1rvEfEtJ2dk5O7ULD h7U+TgsczxC6PX5OGnX+FmO+wyQXggu9HT58FXXGfiRRwXf13sMYF0BJ2Hrtnnlx CcsG0VDauERn+YArWrxIm6DHVkcu1oozdcD+UVhVyCFjYjVYmSCCFAgdICPwugcu pR6zq1yKDQhvFllM2Y6UxGCsh57r3cJoQh9r7AGfafgD8cbbfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENZqn8SOCgPXTLeERsGn7FHhFuUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjg3MWRlM2EtYWJkOC0z ODFmLWI2YjgtNTliZWMwYjlmYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz0dAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHjTVIH2+loJ9FvDnWDnlZo36dtQugd4ZxI/ZEl7VXdIxD8d1gcsegP wseEdd9M+oz29cmbBKXrmF2kQMUg4pS71Tn5jhuOgkSJOGmsfh7QJX06CIDq6sfI jUVJWHKtWt9Px1hASVcaBP2QDWXV78jIcNqSs6olvLvL1lZFDDIa4aRmJ6aMSbYq 0dBKLWhG7D+QCNp6rCqmjnhGPGKzXYXarsf2aGCORZW18AC9NU7FowW62ECDu1we lzUGqbheYrjXtzGz+8e8bQ32+Lbr5PzZGLQwb0rPvj2iJ19zgP5kRfFR8md7JfUi dHw3JaLNRElwkakO9z6lCVJE5sK5lP8= -----END CERTIFICATE-----Generated at Tue Sep 15 23:48:58 2026 by rpki-client