$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/875ebc50-c722-3b91-894b-bc800c4ac3c5.roa File: 875ebc50-c722-3b91-894b-bc800c4ac3c5.roa (raw, json) Hash identifier: lVdHF+rB4x2nq4U3iyfnP2K3N61S41dYSRMs0E0gWDs= Subject key identifier: 41:58:0F:83:3F:E6:07:4D:71:8B:6B:92:3D:31:AD:4F:6D:14:BD:D4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233D0C3442801672C68800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/875ebc50-c722-3b91-894b-bc800c4ac3c5.roa Signing time: Wed 19 Aug 2026 18:03:49 +0000 ROA not before: Wed 19 Aug 2026 18:03:49 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 174 IP address blocks: 198.64.168.32/28 maxlen: 28 198.65.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3d:0c:34:42:80:16:72:c6:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:49 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=a5e746af-ca10-4db7-96b8-245e9c402bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f4:a4:de:a5:1d:8d:7a:89:f8:3d:8d:17:58: 95:ce:c6:5f:b8:81:73:17:33:07:78:22:22:20:94: 6d:06:e8:e2:b0:5c:6e:40:c8:d3:b8:4d:53:42:25: e6:08:3c:2a:80:c0:96:ed:1b:50:2b:0c:5c:0b:56: 22:f4:8e:b3:4e:7c:de:0b:2e:e4:5e:2f:1c:ce:40: 95:8c:6b:bf:31:2c:e2:77:ff:7b:45:26:79:0a:87: 15:0d:65:5f:aa:56:62:fd:43:38:74:1e:54:9e:73: 3a:66:33:94:c5:33:b3:ba:c9:95:f3:e6:fe:6d:36: cd:33:12:26:19:f0:81:9e:48:90:31:fb:83:b2:d9: 38:fc:50:d2:b9:60:f1:3f:23:9e:7c:ff:61:c4:2b: f5:d3:93:0a:63:e6:64:99:c8:50:49:4a:2f:48:07: bc:dd:b6:c0:b2:37:39:f9:53:56:e1:ba:18:13:96: 8f:b5:d2:2f:06:fb:46:2d:6b:74:0c:9d:e5:8a:11: 86:ef:60:5c:90:3d:1b:c9:7b:9e:bc:21:b9:4e:78: 3b:60:bd:68:37:98:fa:a4:b1:12:55:99:14:2e:a5: 5e:9d:7a:56:6b:ce:b0:ee:ff:84:bd:18:2d:cf:f2: af:32:c8:d9:06:2c:bd:e1:28:2f:a5:18:91:d1:9c: b9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:58:0F:83:3F:E6:07:4D:71:8B:6B:92:3D:31:AD:4F:6D:14:BD:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/875ebc50-c722-3b91-894b-bc800c4ac3c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.64.168.32/28 198.65.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:78:e7:6e:88:40:00:d0:fd:d8:cb:7f:cf:f5:e5:a9:39:5e: 53:e1:7d:2c:c1:23:a7:c4:ca:3c:da:58:b5:ff:6e:ed:37:61: 80:76:1b:a3:a9:1a:e5:1e:1d:8b:2a:85:b6:59:ce:07:7f:10: 14:7b:df:fa:e6:0f:72:3f:cc:e0:ad:59:55:40:83:03:08:54: d6:14:72:18:8d:82:4e:cd:80:51:a7:7a:40:0c:62:d8:dc:40: a7:ee:dc:74:bd:c1:cc:a2:6f:61:1e:a9:da:d7:89:10:2d:05: 44:ed:a8:8a:97:a6:42:12:7a:d5:81:d7:50:6f:08:77:bb:10: ca:54:ac:30:06:a1:a9:f4:c1:60:e2:9e:05:1b:dc:66:50:53: 73:d3:f3:38:16:cf:be:2d:b9:26:95:d1:6c:38:cc:1f:5b:32: c6:ef:11:57:9e:c6:27:93:86:bf:9f:15:ea:46:f4:33:30:f2: 01:88:d2:35:28:d2:07:f4:db:9d:a4:0b:ef:be:98:ce:ea:46: 73:eb:75:1d:49:4e:cd:c3:71:6e:63:e3:e4:77:38:01:ce:a2: a7:86:06:8d:c5:a5:c0:eb:46:ea:d6:81:5c:e4:46:28:ad:96: 49:f8:35:a0:fc:18:63:44:d3:5a:f6:5b:de:e0:83:df:55:6c: c4:aa:0d:b0 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE7kIz0MNEKAFnLGiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk YTVlNzQ2YWYtY2ExMC00ZGI3LTk2YjgtMjQ1ZTljNDAyYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvSk3qUdjXqJ+D2NF1iVzsZfuIFzFzMHeCIi IJRtBujisFxuQMjTuE1TQiXmCDwqgMCW7RtQKwxcC1Yi9I6zTnzeCy7kXi8czkCV jGu/MSzid/97RSZ5CocVDWVfqlZi/UM4dB5UnnM6ZjOUxTOzusmV8+b+bTbNMxIm GfCBnkiQMfuDstk4/FDSuWDxPyOefP9hxCv105MKY+ZkmchQSUovSAe83bbAsjc5 +VNW4boYE5aPtdIvBvtGLWt0DJ3lihGG72BckD0byXuevCG5Tng7YL1oN5j6pLES VZkULqVenXpWa86w7v+EvRgtz/KvMsjZBiy94SgvpRiR0Zy5RwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFEFYD4M/5gdNcYtrkj0xrU9tFL3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODc1ZWJjNTAtYzcyMi0z YjkxLTg5NGItYmM4MDBjNGFjM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUExkCoIAME AMZBzDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCMeOduiEAA0P3Yy3/P9eWpOV5T4X0swSOnxMo82li1/27t N2GAdhujqRrlHh2LKoW2Wc4HfxAUe9/65g9yP8zgrVlVQIMDCFTWFHIYjYJOzYBR p3pADGLY3ECn7tx0vcHMom9hHqna14kQLQVE7aiKl6ZCEnrVgddQbwh3uxDKVKww BqGp9MFg4p4FG9xmUFNz0/M4Fs++LbkmldFsOMwfWzLG7xFXnsYnk4a/nxXqRvQz MPIBiNI1KNIH9NudpAvvvpjO6kZz63UdSU7Nw3FuY+PkdzgBzqKnhgaNxaXA60bq 1oFc5EYorZZJ+DWg/BhjRNNa9lve4IPfVWzEqg2w -----END CERTIFICATE-----Generated at Thu Sep 3 07:13:49 2026 by rpki-client