$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7eff1495-965e-3de4-b883-3d23d19fb28d.roa File: 7eff1495-965e-3de4-b883-3d23d19fb28d.roa (raw, json) Hash identifier: 77T6FHvhXeJTwY5iNR0HuDra6WhplsTWNArPbKNOr1s= Subject key identifier: 00:2D:FA:E8:68:E0:64:C1:4A:AF:E7:C1:FE:CF:9A:02:BF:B0:64:F1 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE42325A1A9D66BF9968B6D80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7eff1495-965e-3de4-b883-3d23d19fb28d.roa Signing time: Wed 19 Aug 2026 18:03:38 +0000 ROA not before: Wed 19 Aug 2026 18:03:38 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 192.67.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:25:a1:a9:d6:6b:f9:96:8b:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:38 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=17c59dd7-9c7a-4806-b2d8-029c37351d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:97:fe:c9:77:76:da:4e:1e:c6:f4:02:6b:b5: 90:ea:ca:88:82:41:d5:79:29:d7:3f:3d:74:e3:76: c5:1e:ed:ee:f9:e4:e5:58:96:6b:f6:6c:d7:3d:c2: 2b:4f:89:5c:c1:9e:c2:70:d4:ea:8c:d3:1f:0d:31: 0b:c1:6d:cc:c1:ac:5e:01:8d:21:52:a4:1a:c1:77: 48:10:1e:bd:c8:a0:88:b9:83:34:4f:26:29:8b:47: ac:78:82:a5:4d:b8:8a:f2:47:cf:b7:c0:52:9b:4b: 1c:25:75:6a:df:e7:36:af:3a:94:4e:1e:af:7b:a8: d9:9a:d7:f6:09:ab:19:df:6c:9e:fa:32:04:f0:35: 09:5c:6e:ac:07:ab:06:4e:95:87:b9:64:63:49:00: 32:ce:1c:01:e5:c6:fe:63:0f:38:cc:9f:8b:1a:0e: 10:23:1e:07:e2:58:7b:5b:7c:ac:72:12:67:9e:50: 48:b0:61:3d:ff:71:5f:81:ee:ed:c8:a3:ee:87:75: 7e:30:29:4e:a1:07:a1:78:8f:94:f8:07:07:2a:8d: 27:52:61:c9:35:b6:9c:56:75:a0:6f:ed:9b:96:3f: 40:2e:c8:2d:43:d1:d1:9a:00:4e:30:07:69:ae:b0: 08:e1:dc:0f:6c:ad:06:27:2c:de:d4:ec:0b:9b:11: e7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2D:FA:E8:68:E0:64:C1:4A:AF:E7:C1:FE:CF:9A:02:BF:B0:64:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7eff1495-965e-3de4-b883-3d23d19fb28d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.67.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:89:bc:67:0d:39:22:34:2d:65:ce:ea:e5:aa:74:52:5b:b6: b8:a2:56:54:a8:82:98:6a:db:5f:1f:8c:10:9a:62:91:5f:41: 0a:df:ff:6c:c6:4d:34:ba:fb:1b:06:b8:40:3b:8f:e2:d4:7b: 3d:71:d2:dd:ef:82:b1:78:98:eb:94:46:16:c2:4f:bd:2e:4e: 59:f9:b0:17:ba:6a:2f:f3:b6:82:20:6b:3b:0f:bd:86:24:f1: 49:85:52:a6:bc:f6:b3:f9:72:10:4f:32:08:8c:d8:f5:62:71: 4b:de:27:bb:25:e5:19:ca:cd:59:c3:37:df:77:fa:bb:90:a7: 7b:c6:23:6d:0f:5d:07:86:8d:83:77:b1:fc:39:d7:2b:69:f6: ea:d8:af:0b:b4:51:81:67:ec:ca:1b:35:dc:34:a1:50:2a:a9: 23:2d:78:07:3e:35:99:fa:1d:3a:e7:ad:e6:3f:cd:10:59:ed: d7:08:4f:0a:e6:1e:50:3b:2f:1c:20:5d:4d:88:6b:32:b2:cb: e0:ee:41:e3:ce:55:a4:2a:dd:c0:56:68:46:e5:a0:1d:5f:f9: d9:6d:63:ba:d8:e0:f5:5d:40:9f:25:2d:5b:d9:25:5f:fb:94: 39:43:19:b2:20:0b:3f:68:f3:4f:e8:ab:8e:e1:a8:27:f2:f6: 47:0c:35:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyWhqdZr+ZaLbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDMzOFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk MTdjNTlkZDctOWM3YS00ODA2LWIyZDgtMDI5YzM3MzUxZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZf+yXd22k4exvQCa7WQ6sqIgkHVeSnXPz10 43bFHu3u+eTlWJZr9mzXPcIrT4lcwZ7CcNTqjNMfDTELwW3MwaxeAY0hUqQawXdI EB69yKCIuYM0TyYpi0eseIKlTbiK8kfPt8BSm0scJXVq3+c2rzqUTh6ve6jZmtf2 CasZ32ye+jIE8DUJXG6sB6sGTpWHuWRjSQAyzhwB5cb+Yw84zJ+LGg4QIx4H4lh7 W3yschJnnlBIsGE9/3Ffge7tyKPuh3V+MClOoQeheI+U+AcHKo0nUmHJNbacVnWg b+2blj9ALsgtQ9HRmgBOMAdprrAI4dwPbK0GJyze1OwLmxHnPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAt+uho4GTBSq/nwf7PmgK/sGTxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvN2VmZjE0OTUtOTY1ZS0z ZGU0LWI4ODMtM2QyM2QxOWZiMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwEPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2JvGcNOSI0LWXO6uWqdFJbtriiVlSogphq218fjBCaYpFfQQrf/2zG TTS6+xsGuEA7j+LUez1x0t3vgrF4mOuURhbCT70uTln5sBe6ai/ztoIgazsPvYYk 8UmFUqa89rP5chBPMgiM2PVicUveJ7sl5RnKzVnDN993+ruQp3vGI20PXQeGjYN3 sfw51ytp9urYrwu0UYFn7MobNdw0oVAqqSMteAc+NZn6HTrnreY/zRBZ7dcITwrm HlA7LxwgXU2IazKyy+DuQePOVaQq3cBWaEbloB1f+dltY7rY4PVdQJ8lLVvZJV/7 lDlDGbIgCz9o80/oq47hqCfy9kcMNeo= -----END CERTIFICATE-----Generated at Thu Sep 3 09:24:18 2026 by rpki-client