$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e7847cf-1ca3-3820-85be-905ee6db8681.roa File: 6e7847cf-1ca3-3820-85be-905ee6db8681.roa (raw, json) Hash identifier: mYv6JQ+dAqYCGzvrygJh6hqxKELXkgVgtMZZ3uKVkfM= Subject key identifier: 3A:7C:50:3D:90:D8:85:16:BE:08:BE:17:CA:DD:C8:9C:2C:DC:6E:D3 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACCE20FED74BEB7DECDB40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e7847cf-1ca3-3820-85be-905ee6db8681.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 20940 IP address blocks: 168.143.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:ce:20:fe:d7:4b:eb:7d:ec:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=126c3ecf-ec9d-4232-a413-5c7362e7d2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:0a:56:bd:82:14:5c:a2:c9:fc:66:f3:04: fc:72:ad:ec:52:ee:d5:bb:2f:29:9f:65:53:1c:b8: 2c:1c:16:18:8d:c8:c9:6f:12:00:32:e0:46:92:6a: 3c:be:46:cd:0a:f5:65:58:50:bd:37:03:3f:0d:f2: 1f:8f:ab:f2:51:d0:37:30:5e:3f:4f:52:fe:f4:15: 71:b2:58:6c:8c:02:e1:de:4a:cf:76:18:1a:db:dc: 53:2f:34:51:55:b6:d7:9b:9e:41:25:ed:e1:0e:89: 5b:c0:56:9c:82:71:72:b9:85:66:b7:a5:e3:c2:6e: 6b:7a:d9:61:05:b0:e2:3c:19:1e:25:1f:31:b3:3c: 54:b4:cc:cf:b8:46:3c:55:7d:3b:94:ce:6b:8f:1a: 9c:ef:2e:c2:64:d4:31:a6:fa:6f:df:31:b2:36:30: 5b:88:2d:2b:fb:f8:ed:57:c8:16:4a:d4:96:8a:16: 82:59:1a:14:9a:7c:61:a0:76:58:30:9f:36:c2:36: ba:10:f4:e8:af:80:5c:3c:cb:7f:ec:f2:68:d3:10: 59:1b:a8:55:c9:d6:b6:61:3e:66:f0:14:e7:4b:d4: 29:25:8e:fd:28:84:ff:44:89:36:c0:03:0a:30:c8: cd:54:c2:ac:cc:ca:08:3e:23:ac:71:91:9c:ab:ef: e1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7C:50:3D:90:D8:85:16:BE:08:BE:17:CA:DD:C8:9C:2C:DC:6E:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6e7847cf-1ca3-3820-85be-905ee6db8681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d3:96:5b:ca:a9:25:76:b3:8c:d4:40:9c:89:5c:f1:58:84: f9:0a:6a:8f:92:8d:01:80:d0:fb:0b:5d:24:54:2e:08:96:8c: e0:ff:d4:07:3d:bd:27:8d:2d:ad:50:f2:6b:db:73:56:7a:bb: 00:65:df:a6:ed:1f:0b:13:33:6a:d7:6b:4c:75:43:d1:0e:ff: 7a:58:11:bd:aa:53:58:88:6c:c0:fa:1d:fb:77:dc:1e:97:be: 44:5a:e4:f8:91:5b:f7:3e:95:fc:45:21:af:d6:b4:1a:1c:12: 6a:0b:0e:d6:0e:47:1d:1a:b7:c4:0b:08:77:4b:26:f1:27:2f: 2c:54:0b:5c:88:ea:52:b5:20:48:ea:41:8d:b1:3a:be:c2:d7: 37:0a:a1:dc:f6:3c:db:61:37:fe:47:a5:52:8a:41:ab:33:ab: 8b:18:d8:12:ad:01:2e:f2:8e:30:fb:f6:03:9c:e3:bd:b3:75: 0a:04:23:ed:2a:d5:d4:1e:bf:1b:51:0d:41:da:4f:74:ba:1d: 00:0b:cb:7d:a1:2b:76:df:87:23:00:e8:dd:3e:03:71:3d:38: b3:11:79:3e:bb:ca:da:b4:71:a9:37:af:8d:f0:1e:39:93:30: cb:5b:52:6a:0a:0c:71:c2:d5:27:04:c3:c8:33:b4:d2:84:19: 22:87:ce:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rM4g/tdL633s20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MTI2YzNlY2YtZWM5ZC00MjMyLWE0MTMtNWM3MzYyZTdkMmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP8KVr2CFFyiyfxm8wT8cq3sUu7Vuy8pn2VT HLgsHBYYjcjJbxIAMuBGkmo8vkbNCvVlWFC9NwM/DfIfj6vyUdA3MF4/T1L+9BVx slhsjALh3krPdhga29xTLzRRVbbXm55BJe3hDolbwFacgnFyuYVmt6Xjwm5retlh BbDiPBkeJR8xszxUtMzPuEY8VX07lM5rjxqc7y7CZNQxpvpv3zGyNjBbiC0r+/jt V8gWStSWihaCWRoUmnxhoHZYMJ82wja6EPTor4BcPMt/7PJo0xBZG6hVyda2YT5m 8BTnS9QpJY79KIT/RIk2wAMKMMjNVMKszMoIPiOscZGcq+/h6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp8UD2Q2IUWvgi+F8rdyJws3G7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNmU3ODQ3Y2YtMWNhMy0z ODIwLTg1YmUtOTA1ZWU2ZGI4NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqI/WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHTllvKqSV2s4zUQJyJXPFYhPkKao+SjQGA0PsLXSRULgiWjOD/1Ac9 vSeNLa1Q8mvbc1Z6uwBl36btHwsTM2rXa0x1Q9EO/3pYEb2qU1iIbMD6Hft33B6X vkRa5PiRW/c+lfxFIa/WtBocEmoLDtYORx0at8QLCHdLJvEnLyxUC1yI6lK1IEjq QY2xOr7C1zcKodz2PNthN/5HpVKKQaszq4sY2BKtAS7yjjD79gOc472zdQoEI+0q 1dQevxtRDUHaT3S6HQALy32hK3bfhyMA6N0+A3E9OLMReT67ytq0cak3r43wHjmT MMtbUmoKDHHC1ScEw8gztNKEGSKHzjM= -----END CERTIFICATE-----Generated at Thu Sep 3 20:47:43 2026 by rpki-client