$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/88447e22-5afd-37a2-8f83-565773ec44c2.roa File: 88447e22-5afd-37a2-8f83-565773ec44c2.roa (raw, json) Hash identifier: KVPKmNt5idBlr3+ubMXdOI+KJyeG79dG0JfB2Juzsr4= Subject key identifier: 6E:78:B1:52:F2:DD:77:51:2E:DD:D8:B9:8E:5B:64:98:67:C0:07:83 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233E1C53D397D42D1858E0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/88447e22-5afd-37a2-8f83-565773ec44c2.roa Signing time: Wed 19 Aug 2026 18:03:50 +0000 ROA not before: Wed 19 Aug 2026 18:03:50 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 199.239.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3e:1c:53:d3:97:d4:2d:18:58:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:50 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=a2b1f07f-ca2d-444f-924b-e51bfd6db749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2b:81:ef:81:fe:69:e4:91:e4:f7:bd:0c:61: 76:77:c1:3d:f4:9a:e9:f1:d3:a5:08:18:2c:a6:cc: 8c:72:13:ef:9e:03:ed:4a:2f:08:45:c8:9b:57:4a: 18:75:37:95:72:36:a4:a8:e0:3e:63:22:a0:f2:e7: 4a:21:a1:e0:c6:83:40:48:81:46:24:2e:00:d8:0c: 4f:73:09:0c:3b:b2:c7:7a:89:54:d1:c0:1c:0b:a8: 0a:b0:1b:d5:ae:37:dc:b8:ac:4b:4e:9d:d8:d9:dd: 58:f3:63:e9:02:ba:55:fc:7e:4e:db:40:c7:82:50: ea:ec:cd:10:58:62:1c:e5:b0:f4:bb:2b:bd:c3:5d: 4e:36:84:7e:43:73:d7:eb:8f:0c:b7:29:18:e1:06: e8:a7:a1:eb:e9:6c:82:86:4b:25:93:4d:80:00:b2: 0a:ff:39:02:50:d6:34:2d:01:c6:0b:87:0f:8a:9e: 08:3e:26:9d:12:29:53:72:59:28:e6:5a:1d:72:9a: 19:54:c4:01:94:a0:87:12:67:af:67:88:be:f2:89: 1a:bd:7f:e3:de:04:53:05:59:11:4e:e9:b2:88:5b: 2c:ce:81:eb:08:2d:66:5b:0b:a1:c9:b7:fc:ec:9e: e4:b7:71:be:15:41:93:24:3c:84:fb:c4:81:cc:3c: 4c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:78:B1:52:F2:DD:77:51:2E:DD:D8:B9:8E:5B:64:98:67:C0:07:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/88447e22-5afd-37a2-8f83-565773ec44c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 199.239.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a4:fd:b6:2b:fb:fb:55:55:2c:58:9d:69:80:91:bb:39:34: 8b:89:81:d9:8f:24:d2:ff:bf:aa:e8:d2:9f:0c:2e:f3:53:72: 16:d3:0e:f9:9d:e2:6c:dd:3f:be:3c:ed:0e:79:01:81:e1:8c: e8:ae:42:7f:23:cd:80:97:b9:ed:5c:36:df:c9:8e:20:cc:70: 7e:2f:2c:18:55:14:58:1c:91:05:47:61:09:9f:d7:f7:ba:52: fe:ce:f7:75:20:aa:16:e0:51:a6:33:55:3b:a2:93:4a:91:54: c5:48:39:c0:a2:58:bf:8c:34:7b:61:ee:13:c4:98:97:74:27: e7:a8:d6:07:05:6c:d9:07:13:a7:4a:b5:8b:bc:96:76:ae:aa: 5a:98:65:4e:97:0f:ec:85:70:74:33:56:1f:45:a0:14:96:2b: e4:5a:de:9a:86:1d:b5:84:5c:bf:ec:1a:83:55:3c:af:b3:50: d0:19:b9:2a:11:71:26:fb:76:04:fa:c2:ba:a7:d7:58:2a:e5: db:b7:22:ea:9f:2c:4a:c9:1d:59:2b:5f:1a:9d:0f:d8:fc:db: f9:4f:78:e7:69:ed:87:b4:5c:91:07:2e:57:6a:fd:4b:6f:8d: b6:8b:14:7b:70:e2:75:c5:08:cf:bb:38:22:21:08:2d:33:6c: ae:46:35:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIz4cU9OX1C0YWOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk YTJiMWYwN2YtY2EyZC00NDRmLTkyNGItZTUxYmZkNmRiNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSuB74H+aeSR5Pe9DGF2d8E99Jrp8dOlCBgs psyMchPvngPtSi8IRcibV0oYdTeVcjakqOA+YyKg8udKIaHgxoNASIFGJC4A2AxP cwkMO7LHeolU0cAcC6gKsBvVrjfcuKxLTp3Y2d1Y82PpArpV/H5O20DHglDq7M0Q WGIc5bD0uyu9w11ONoR+Q3PX648MtykY4Qbop6Hr6WyChkslk02AALIK/zkCUNY0 LQHGC4cPip4IPiadEilTclko5lodcpoZVMQBlKCHEmevZ4i+8okavX/j3gRTBVkR TumyiFsszoHrCC1mWwuhybf87J7kt3G+FUGTJDyE+8SBzDxMIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG54sVLy3XdRLt3YuY5bZJhnwAeDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODg0NDdlMjItNWFmZC0z N2EyLThmODMtNTY1NzczZWM0NGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx++IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmk/bYr+/tVVSxYnWmAkbs5NIuJgdmPJNL/v6ro0p8MLvNTchbTDvmd 4mzdP7487Q55AYHhjOiuQn8jzYCXue1cNt/JjiDMcH4vLBhVFFgckQVHYQmf1/e6 Uv7O93UgqhbgUaYzVTuik0qRVMVIOcCiWL+MNHth7hPEmJd0J+eo1gcFbNkHE6dK tYu8lnauqlqYZU6XD+yFcHQzVh9FoBSWK+Ra3pqGHbWEXL/sGoNVPK+zUNAZuSoR cSb7dgT6wrqn11gq5du3IuqfLErJHVkrXxqdD9j82/lPeOdp7Ye0XJEHLldq/Utv jbaLFHtw4nXFCM+7OCIhCC0zbK5GNTY= -----END CERTIFICATE-----Generated at Thu Sep 17 12:13:22 2026 by rpki-client