$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/888b57f7-0bbe-33b6-90e2-27327f3625bc.roa File: 888b57f7-0bbe-33b6-90e2-27327f3625bc.roa (raw, json) Hash identifier: ciOlMGjKSmjXo2CKtLU7YX7oKRUfnmiFTUOFEBhVK2M= Subject key identifier: 1E:A5:6F:93:24:AE:23:1E:9E:2C:51:E7:C4:57:20:F9:D6:68:91:2E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F5E62EB90AEE1D09CB34B5C80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/888b57f7-0bbe-33b6-90e2-27327f3625bc.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 55034 IP address blocks: 204.141.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:eb:90:ae:e1:d0:9c:b3:4b:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=b3f77c72-cad4-4926-9fc2-f9c8f84e0106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e4:0e:96:2f:45:aa:5e:4d:00:bc:87:2f:af: 17:d8:15:a3:2a:ca:c1:4d:6b:dd:18:f4:15:33:83: b0:6d:58:d1:44:d5:6e:10:e8:b8:6c:14:3a:b1:fd: da:21:63:f8:be:64:0c:05:8c:ff:85:01:d8:51:b4: dc:74:ba:be:d8:d7:ea:2d:09:2a:c0:b5:33:ac:4d: 10:df:a3:9a:30:34:59:f8:cf:0e:8c:04:aa:fc:30: 32:84:12:ac:dd:66:2e:08:34:cf:14:b2:27:75:1b: 4a:41:f6:06:b3:1f:9c:f0:c9:d4:55:d7:a0:2c:4f: 16:05:31:81:de:e5:ba:ab:67:f3:3f:a8:79:f0:9c: ca:c3:d2:ad:ca:c1:ed:75:a2:b5:ee:e0:18:cf:91: 14:5a:bb:09:f0:2d:60:c2:6c:90:4e:93:68:18:2c: 7a:4d:09:81:31:f7:54:3c:a9:0c:25:8b:4b:c8:19: 52:71:ae:fb:3a:7e:bf:10:53:e5:e9:24:a2:61:d7: 9f:82:79:8d:d2:cc:22:b2:25:65:95:8d:fc:9c:29: 4a:af:59:01:b4:ef:32:fa:f6:57:a6:11:d2:9f:4f: 52:52:79:fa:c8:3a:de:4f:ce:84:d9:68:e1:eb:87: 3c:4b:50:bf:42:64:c2:a7:9d:af:1e:e9:c9:55:33: 57:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A5:6F:93:24:AE:23:1E:9E:2C:51:E7:C4:57:20:F9:D6:68:91:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/888b57f7-0bbe-33b6-90e2-27327f3625bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b1:c9:02:f6:f7:8b:c3:21:6f:b0:03:9a:47:be:d3:3b:c2: c8:20:02:a9:0c:2d:6f:51:40:5a:dc:ab:03:1a:b7:ab:cc:15: 77:69:ec:dd:e4:21:53:46:12:56:ae:1e:a5:4d:e0:40:fa:6b: 12:2c:3b:e9:80:83:0d:f2:0d:50:dc:4a:d8:8c:2c:92:15:5f: c8:ab:45:dd:28:b1:6d:b8:a8:94:a2:ef:e2:3a:4b:3c:1c:46: f4:98:b5:17:2d:df:34:dc:fb:70:7a:de:10:49:dd:7e:09:0e: 16:e5:07:fe:1a:dd:5b:f0:29:f4:a0:d1:3f:bc:09:4d:74:d2: 37:ca:2c:cf:a9:1a:81:79:31:f0:5f:fe:73:4d:e7:1c:a2:9b: 2c:c9:b1:72:ba:f4:77:62:f4:cc:16:74:e2:59:79:ac:d5:32: 74:10:70:fb:29:1b:59:ce:f4:09:c3:bf:ca:2a:37:59:aa:df: 72:6c:00:22:30:59:53:17:66:eb:51:e7:64:52:52:0e:53:a1: ce:05:44:2e:7f:3b:ae:90:35:fc:e2:c8:57:e9:64:8b:81:82: a1:db:32:57:1f:60:8e:d2:09:ce:93:a0:87:9c:77:14:e6:1f: 35:08:75:59:bb:c1:e4:a2:b9:9f:87:4c:50:d5:96:bf:f7:10: c6:93:10:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuuQruHQnLNLXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YjNmNzdjNzItY2FkNC00OTI2LTlmYzItZjljOGY4NGUwMTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OQOli9Fql5NALyHL68X2BWjKsrBTWvdGPQV M4OwbVjRRNVuEOi4bBQ6sf3aIWP4vmQMBYz/hQHYUbTcdLq+2NfqLQkqwLUzrE0Q 36OaMDRZ+M8OjASq/DAyhBKs3WYuCDTPFLIndRtKQfYGsx+c8MnUVdegLE8WBTGB 3uW6q2fzP6h58JzKw9KtysHtdaK17uAYz5EUWrsJ8C1gwmyQTpNoGCx6TQmBMfdU PKkMJYtLyBlSca77On6/EFPl6SSiYdefgnmN0swisiVllY38nClKr1kBtO8y+vZX phHSn09SUnn6yDreT86E2Wjh64c8S1C/QmTCp52vHunJVTNXowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6lb5MkriMenixR58RXIPnWaJEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODg4YjU3ZjctMGJiZS0z M2I2LTkwZTItMjczMjdmMzYyNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzI2sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmxyQL294vDIW+wA5pHvtM7wsggAqkMLW9RQFrcqwMat6vMFXdp7N3k IVNGElauHqVN4ED6axIsO+mAgw3yDVDcStiMLJIVX8irRd0osW24qJSi7+I6Szwc RvSYtRct3zTc+3B63hBJ3X4JDhblB/4a3VvwKfSg0T+8CU100jfKLM+pGoF5MfBf /nNN5xyimyzJsXK69Hdi9MwWdOJZeazVMnQQcPspG1nO9AnDv8oqN1mq33JsACIw WVMXZutR52RSUg5Toc4FRC5/O66QNfziyFfpZIuBgqHbMlcfYI7SCc6ToIecdxTm HzUIdVm7weSiuZ+HTFDVlr/3EMaTEFM= -----END CERTIFICATE-----Generated at Fri Oct 2 22:10:59 2026 by rpki-client