$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/698378ea-eb96-3106-bf3b-072ca1df1254.roa File: 698378ea-eb96-3106-bf3b-072ca1df1254.roa (raw, json) Hash identifier: U2EuXRau6j80EWdtY+wIYV2Dv5Y5dBMBJmpY2gKzg3M= Subject key identifier: 8D:E2:F4:51:41:82:DC:84:63:2E:42:F6:1B:45:EA:AD:52:59:EA:CC Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE423272170A0CF53B75B40A0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/698378ea-eb96-3106-bf3b-072ca1df1254.roa Signing time: Wed 19 Aug 2026 18:03:39 +0000 ROA not before: Wed 19 Aug 2026 18:03:39 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 209.124.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:27:21:70:a0:cf:53:b7:5b:40:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:39 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=c780aecd-452d-489e-8aee-e3c620306beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f9:07:da:db:03:a2:b9:4c:63:55:83:46:10: 47:3b:72:bb:49:0e:c9:9d:e4:1a:67:40:67:2f:1d: 90:1b:c3:52:81:6f:bb:99:fe:15:51:66:19:b6:bc: 2c:4a:49:fe:8f:a4:84:b2:e8:c5:0d:0d:b4:b9:1b: dc:8d:af:82:6d:13:f4:c9:6b:44:2e:6f:00:c3:49: bc:76:dc:77:e2:b9:02:fa:0b:bd:17:ed:7b:b5:24: ef:6d:b2:d6:d2:38:64:b8:14:de:6d:17:33:21:25: 27:cd:37:2f:87:6e:9f:d7:67:01:d4:55:8a:b0:02: 21:7a:bc:f4:c1:3d:e8:ee:9d:13:57:b6:f3:47:b6: 23:cd:94:b1:af:8e:4d:d9:1d:3e:c3:d4:ce:2e:1b: b2:72:6d:b0:53:43:a6:33:ed:13:e0:87:6c:19:b1: fc:15:81:38:46:1c:7b:c2:ed:59:13:1d:58:d0:93: 3c:95:f4:ef:8f:eb:8f:d4:7b:8f:a7:8e:ee:15:a5: 3d:b6:43:38:c5:5c:8f:34:57:fc:15:24:de:b9:26: a2:5a:79:ba:dd:a6:ae:62:73:4f:1d:70:c6:7a:f9: 18:e0:d4:45:59:27:d7:39:7c:6b:3c:27:15:7a:67: 21:e0:30:11:cf:56:bb:d8:de:cc:6e:ec:99:ac:ef: d7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E2:F4:51:41:82:DC:84:63:2E:42:F6:1B:45:EA:AD:52:59:EA:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/698378ea-eb96-3106-bf3b-072ca1df1254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 209.124.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:24:c8:12:5a:b2:b4:a6:c6:19:19:7c:56:b8:18:af:6d:82: 74:47:d3:69:c2:61:e7:bf:5e:68:e2:a5:aa:d6:c9:26:f0:76: b2:10:d0:8e:93:a2:82:da:ab:38:f0:c1:d1:ff:e7:f6:b4:01: 5d:0c:9c:27:60:2c:6d:0f:4c:c4:b9:50:37:c1:0a:08:17:06: b5:7b:bb:36:68:e2:a0:42:11:7b:0f:46:72:64:fc:35:42:73: 88:94:4e:ee:3a:49:f9:84:04:d6:92:d6:83:52:b6:c1:43:62: 2b:5c:bb:a3:af:18:95:39:12:26:f5:9b:c7:cb:45:af:d2:97: 55:5c:a1:a8:d9:87:37:b2:17:32:bb:73:16:e0:13:5e:ce:1a: 96:7f:78:98:5e:61:36:41:0d:60:cf:ce:51:e3:a8:4e:2d:ed: b9:07:61:3c:46:82:6f:81:0b:6f:33:b6:3d:df:fd:d2:09:6f: aa:f8:6b:f5:75:ec:4e:2b:68:de:35:2c:2a:cd:42:46:f0:ff: 40:55:58:1d:c9:da:b6:bd:f8:43:ff:44:fe:f5:44:c0:65:56: a9:cc:ee:de:b9:14:40:7e:1b:51:44:d1:81:30:f6:2b:fc:9f: a7:b8:ae:67:6b:f7:78:39:4e:38:e4:2d:1f:a6:a9:64:4a:f7: 56:e9:d3:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIychcKDPU7dbQKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDMzOVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk Yzc4MGFlY2QtNDUyZC00ODllLThhZWUtZTNjNjIwMzA2YmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPkH2tsDorlMY1WDRhBHO3K7SQ7JneQaZ0Bn Lx2QG8NSgW+7mf4VUWYZtrwsSkn+j6SEsujFDQ20uRvcja+CbRP0yWtELm8Aw0m8 dtx34rkC+gu9F+17tSTvbbLW0jhkuBTebRczISUnzTcvh26f12cB1FWKsAIherz0 wT3o7p0TV7bzR7YjzZSxr45N2R0+w9TOLhuycm2wU0OmM+0T4IdsGbH8FYE4Rhx7 wu1ZEx1Y0JM8lfTvj+uP1HuPp47uFaU9tkM4xVyPNFf8FSTeuSaiWnm63aauYnNP HXDGevkY4NRFWSfXOXxrPCcVemch4DARz1a72N7MbuyZrO/XfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3i9FFBgtyEYy5C9htF6q1SWerMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjk4Mzc4ZWEtZWI5Ni0z MTA2LWJmM2ItMDcyY2ExZGYxMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0XwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAkyBJasrSmxhkZfFa4GK9tgnRH02nCYee/XmjiparWySbwdrIQ0I6T ooLaqzjwwdH/5/a0AV0MnCdgLG0PTMS5UDfBCggXBrV7uzZo4qBCEXsPRnJk/DVC c4iUTu46SfmEBNaS1oNStsFDYitcu6OvGJU5Eib1m8fLRa/Sl1VcoajZhzeyFzK7 cxbgE17OGpZ/eJheYTZBDWDPzlHjqE4t7bkHYTxGgm+BC28ztj3f/dIJb6r4a/V1 7E4raN41LCrNQkbw/0BVWB3J2ra9+EP/RP71RMBlVqnM7t65FEB+G1FE0YEw9iv8 n6e4rmdr93g5TjjkLR+mqWRK91bp00A= -----END CERTIFICATE-----Generated at Fri Aug 21 23:26:41 2026 by rpki-client