$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/711946ce-db3c-3307-bb07-7ae1f1c5481d.roa File: 711946ce-db3c-3307-bb07-7ae1f1c5481d.roa (raw, json) Hash identifier: ECp5EaGcdHs4+gMMzE3AVdMz5ic4fqa3TIpVS9hs+DM= Subject key identifier: 1F:BA:F7:01:53:57:0B:63:6D:48:24:02:DB:34:CF:D9:68:C0:C5:89 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACEBDFE53BF929BC8E43A0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/711946ce-db3c-3307-bb07-7ae1f1c5481d.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 22691 IP address blocks: 204.141.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:eb:df:e5:3b:f9:29:bc:8e:43:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=cfbf102c-d6bf-4d0c-9cbd-8c70c0fb441c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:ec:06:e1:da:11:b0:b4:ea:56:d9:d8:15: 57:0b:9d:1e:9d:09:f8:93:4f:41:4f:cc:5d:55:b7: ae:ae:0f:93:f6:ed:00:14:4c:bf:d6:4b:1c:b4:01: a4:41:a5:2a:43:e6:37:7c:c9:34:73:d8:2a:b7:3f: 50:07:df:ca:25:41:d8:e1:c6:b4:db:1b:58:b4:ba: 7d:f8:d5:4e:e6:a3:e3:ad:e9:ee:d6:e6:51:66:4d: 6f:81:1a:e5:32:ea:aa:a1:89:e4:33:e0:96:48:e6: b8:29:1a:ba:43:fd:f6:d1:6d:70:e5:fc:73:8c:e7: b4:b9:83:14:ac:02:fa:a1:7b:fc:08:f3:66:f6:c5: e2:d5:40:4c:c0:df:39:f7:0b:93:54:bd:e8:88:6e: 40:c1:fc:75:02:76:36:17:8b:89:02:6a:5f:60:6e: c0:be:1f:89:25:ab:01:f8:4c:58:7d:f1:05:ea:60: 89:57:ab:17:64:2d:ac:58:e0:3b:01:ec:f7:07:53: 18:db:cf:28:46:9a:2b:12:2a:9d:97:f9:51:c5:b3: 44:ed:67:25:c5:fd:47:b1:38:2b:f5:b7:fe:66:ce: 99:bb:71:19:bf:1d:a8:48:c8:3f:e9:da:26:b5:75: f8:ff:bb:df:05:2f:d5:8d:55:3d:be:fa:d0:6f:04: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BA:F7:01:53:57:0B:63:6D:48:24:02:DB:34:CF:D9:68:C0:C5:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/711946ce-db3c-3307-bb07-7ae1f1c5481d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ef:88:0c:0d:c2:e4:e0:ab:39:55:fd:bb:f0:79:af:e4:11: 31:0c:37:d4:36:23:46:cb:ee:3e:4e:73:7b:01:fc:c2:57:cc: e1:2d:98:5d:58:cf:0f:eb:76:f0:12:54:0d:ba:78:ad:50:17: 21:5b:1f:6e:c6:32:73:0c:c3:f2:e5:45:03:62:38:3d:aa:fc: 11:3f:d9:4d:95:78:61:db:ff:2c:d1:ca:9c:36:12:ea:26:05: c5:57:7f:bd:13:6e:41:6d:8f:3e:83:0d:79:da:70:f3:6c:65: ec:87:a3:b1:20:4b:5e:39:77:b8:cc:52:89:dd:2e:c1:bd:d1: b2:11:da:70:0d:90:04:6c:8c:2f:ab:8c:46:e3:35:75:87:6b: d9:8a:58:84:5f:09:0c:fa:ff:8e:65:c1:b3:7e:c3:1c:16:b7: 4d:9b:03:59:14:06:1b:ca:fe:46:27:f9:73:e6:22:32:1e:83: 81:8f:60:8f:83:4f:24:1b:84:73:5a:fe:b7:cf:db:b6:0f:de: 68:b8:86:a1:ac:c0:33:ad:d5:14:57:b2:94:df:37:96:12:8d: ab:97:42:ce:58:07:bc:89:2a:31:ee:53:c1:be:fd:89:1a:c8: a0:3b:ee:bc:09:f5:16:72:d6:9f:70:b2:a0:ea:5d:20:15:1b: 2d:1b:b7:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rOvf5Tv5KbyOQ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2ZiZjEwMmMtZDZiZi00ZDBjLTljYmQtOGM3MGMwZmI0NDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcPsBuHaEbC06lbZ2BVXC50enQn4k09BT8xd Vbeurg+T9u0AFEy/1ksctAGkQaUqQ+Y3fMk0c9gqtz9QB9/KJUHY4ca02xtYtLp9 +NVO5qPjrenu1uZRZk1vgRrlMuqqoYnkM+CWSOa4KRq6Q/320W1w5fxzjOe0uYMU rAL6oXv8CPNm9sXi1UBMwN859wuTVL3oiG5Awfx1AnY2F4uJAmpfYG7Avh+JJasB +ExYffEF6mCJV6sXZC2sWOA7Aez3B1MY288oRporEiqdl/lRxbNE7Wclxf1HsTgr 9bf+Zs6Zu3EZvx2oSMg/6domtXX4/7vfBS/VjVU9vvrQbwR32QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+69wFTVwtjbUgkAts0z9lowMWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzExOTQ2Y2UtZGIzYy0z MzA3LWJiMDctN2FlMWYxYzU0ODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzI0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3viAwNwuTgqzlV/bvwea/kETEMN9Q2I0bL7j5Oc3sB/MJXzOEtmF1Y zw/rdvASVA26eK1QFyFbH27GMnMMw/LlRQNiOD2q/BE/2U2VeGHb/yzRypw2Euom BcVXf70TbkFtjz6DDXnacPNsZeyHo7EgS145d7jMUondLsG90bIR2nANkARsjC+r jEbjNXWHa9mKWIRfCQz6/45lwbN+wxwWt02bA1kUBhvK/kYn+XPmIjIeg4GPYI+D TyQbhHNa/rfP27YP3mi4hqGswDOt1RRXspTfN5YSjauXQs5YB7yJKjHuU8G+/Yka yKA77rwJ9RZy1p9wsqDqXSAVGy0btxE= -----END CERTIFICATE-----Generated at Thu Sep 17 12:12:38 2026 by rpki-client