$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/72590a81-0372-3494-a8c9-c4c50e29c4e4.roa File: 72590a81-0372-3494-a8c9-c4c50e29c4e4.roa (raw, json) Hash identifier: 0RVeTji/4FCAqits/ijKTej2EW0IGaOvpuE8TVQflLU= Subject key identifier: 79:18:8E:32:F5:4C:93:E5:41:4C:D8:DA:86:63:F5:2F:3F:38:D7:00 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F173249D71E73145FBECFD860 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/72590a81-0372-3494-a8c9-c4c50e29c4e4.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 210187 IP address blocks: 128.242.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:49:d7:1e:73:14:5f:be:cf:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=98f2f4a1-39ad-4f95-b456-e48ca401798e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:11:85:24:0a:bf:1e:cb:89:99:66:89:ab:27: f2:97:c8:2f:a8:2f:a0:84:ec:a3:88:14:6d:41:49: 61:a6:6e:2f:ed:24:9a:59:ce:34:08:2e:d1:42:c3: 6c:d5:a2:91:36:60:6e:dd:57:78:fd:d4:3b:74:a7: e9:c8:14:d7:57:f5:35:0c:a4:f5:36:51:ee:07:3a: de:37:a9:00:a4:be:f6:b9:b6:6e:74:a2:96:41:92: 8a:ee:f6:c4:9c:0f:36:4d:2c:58:17:06:5c:5c:ab: 85:4a:43:fa:01:c6:b1:06:a1:2f:d9:db:f8:88:21: 27:82:62:7c:6d:9b:dc:f6:fe:a5:17:6b:3a:27:8d: 06:de:b5:a2:72:1f:11:81:bf:02:b3:72:6d:7f:67: 98:52:65:b2:e2:27:79:f9:90:1a:d7:a7:c6:37:62: 58:48:d5:ca:ef:52:81:8c:01:8e:38:4e:01:4c:72: f0:1b:72:ba:82:58:4d:52:38:da:01:b8:e9:bb:4e: 98:10:02:22:25:c7:2c:38:a2:a1:dc:03:0b:eb:94: 82:0f:24:26:b4:4e:91:05:6e:d8:b9:e8:cc:e0:6e: fc:27:63:e8:72:29:47:f5:7a:64:b9:fd:d1:2c:86: f9:d6:3a:27:30:41:9b:06:70:28:b7:aa:57:1e:4f: 32:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:18:8E:32:F5:4C:93:E5:41:4C:D8:DA:86:63:F5:2F:3F:38:D7:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/72590a81-0372-3494-a8c9-c4c50e29c4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:b8:0f:9a:78:11:db:cb:55:bd:82:54:f8:2c:de:26:c7:a6: 54:c1:da:56:1d:f8:d2:2a:8a:3e:c2:7e:12:8f:2e:3a:12:5b: 85:ac:f4:0c:9f:2c:94:2d:03:2f:d8:84:35:14:cc:49:cd:8f: 82:ce:80:14:a9:b6:e1:e1:59:c9:6a:09:aa:e4:73:62:2c:b9: da:91:07:b3:75:1f:93:ab:dc:c8:69:46:a9:d7:2f:bc:26:23: c2:41:91:be:de:d7:9d:56:b7:b7:98:62:83:63:9a:ee:97:8a: 7a:10:9c:34:56:09:25:94:18:8e:a3:9f:dd:2c:e6:6d:48:6a: 3f:4a:70:0f:15:00:c9:2a:17:ed:ae:50:ac:fa:1e:8e:fc:a7: e5:c4:bd:35:9e:31:15:70:79:f1:dd:a4:f1:65:3e:a1:c4:79: cb:a1:1a:f7:27:47:98:23:98:87:8a:6b:47:e0:a2:8b:26:1d: a0:ec:bd:1b:96:c6:d9:5b:c0:48:ca:9c:da:e1:58:98:95:1a: c0:01:0a:4e:10:7d:76:a4:ce:34:a3:94:4c:98:01:29:eb:da: 75:a0:5f:46:27:a2:09:cd:30:a9:20:d8:5e:bd:b1:97:d6:7f: be:cd:96:3a:ac:ac:54:45:23:98:ec:87:95:f6:e8:4c:f9:7a: 6b:c8:81:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMknXHnMUX77P2GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk OThmMmY0YTEtMzlhZC00Zjk1LWI0NTYtZTQ4Y2E0MDE3OThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxGFJAq/HsuJmWaJqyfyl8gvqC+ghOyjiBRt QUlhpm4v7SSaWc40CC7RQsNs1aKRNmBu3Vd4/dQ7dKfpyBTXV/U1DKT1NlHuBzre N6kApL72ubZudKKWQZKK7vbEnA82TSxYFwZcXKuFSkP6AcaxBqEv2dv4iCEngmJ8 bZvc9v6lF2s6J40G3rWich8Rgb8Cs3Jtf2eYUmWy4id5+ZAa16fGN2JYSNXK71KB jAGOOE4BTHLwG3K6glhNUjjaAbjpu06YEAIiJccsOKKh3AML65SCDyQmtE6RBW7Y uejM4G78J2PocilH9Xpkuf3RLIb51jonMEGbBnAot6pXHk8yfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkYjjL1TJPlQUzY2oZj9S8/ONcAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzI1OTBhODEtMDM3Mi0z NDk0LWE4YzktYzRjNTBlMjljNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgPK9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALO4D5p4EdvLVb2CVPgs3ibHplTB2lYd+NIqij7CfhKPLjoSW4Ws9Ayf LJQtAy/YhDUUzEnNj4LOgBSptuHhWclqCarkc2IsudqRB7N1H5Or3MhpRqnXL7wm I8JBkb7e151Wt7eYYoNjmu6XinoQnDRWCSWUGI6jn90s5m1Iaj9KcA8VAMkqF+2u UKz6Ho78p+XEvTWeMRVwefHdpPFlPqHEecuhGvcnR5gjmIeKa0fgoosmHaDsvRuW xtlbwEjKnNrhWJiVGsABCk4QfXakzjSjlEyYASnr2nWgX0YnognNMKkg2F69sZfW f77NljqsrFRFI5jsh5X26Ez5emvIgVw= -----END CERTIFICATE-----Generated at Fri Sep 11 05:09:26 2026 by rpki-client