$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8943bd2e-5afe-3433-aefc-bc8c5e147a4c.roa File: 8943bd2e-5afe-3433-aefc-bc8c5e147a4c.roa (raw, json) Hash identifier: PRwayTMZWvw7IIaC3biQmbFKOZeLHI7w/wx+Wk77IcI= Subject key identifier: EB:47:74:87:03:2A:40:D8:92:DA:88:0A:A9:B2:76:D9:90:E5:EF:20 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584FACC2817B4959BA8102D91C50 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8943bd2e-5afe-3433-aefc-bc8c5e147a4c.roa Signing time: Fri 30 Oct 2026 14:46:23 +0000 ROA not before: Fri 30 Oct 2026 14:46:23 +0000 ROA not after: Thu 28 Jan 2027 15:46:23 +0000 asID: 6424 IP address blocks: 198.138.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ac:c2:81:7b:49:59:ba:81:02:d9:1c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 30 14:46:23 2026 GMT Not After : Jan 28 15:46:23 2027 GMT Subject: CN=4b60950a-3075-4778-b555-b75f841ee153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:50:15:5d:34:39:2a:30:cf:8e:24:ca:d8:ee: 78:04:8b:93:46:9b:7e:83:63:87:e7:08:0d:fd:ae: ca:96:55:ee:5b:53:f9:dc:53:a5:f1:28:d0:aa:5c: b1:a3:0c:23:ea:e1:59:8f:d2:b9:5b:85:d5:bb:a6: 97:e4:6a:4e:06:49:7b:c9:4b:e4:c2:c2:28:b9:3c: e7:00:3e:15:2c:a1:ae:15:20:b9:6e:58:1e:23:23: a9:11:39:de:e6:2f:a2:78:ab:04:2e:3d:b5:f5:37: 77:a5:e6:64:e6:88:b4:72:e9:10:85:f1:52:0d:03: 99:af:eb:bb:18:b6:08:1f:cd:68:37:9d:71:dd:46: ee:82:31:f6:22:89:c8:1e:6a:37:fc:30:27:4e:1a: 00:3b:86:13:a1:81:48:6d:2b:c9:99:6c:c4:22:7e: 6a:64:27:82:34:e5:76:14:31:52:03:68:1c:4d:6b: 53:de:c4:88:1a:cb:46:60:30:db:1e:f4:b2:28:11: 0f:39:e5:b2:7f:88:3f:67:bf:ce:a5:af:e7:f1:cd: 9b:7a:40:2f:22:e4:7d:ab:ea:d6:07:ae:3a:ea:ee: a0:93:2b:19:86:25:d1:4c:39:5d:db:08:21:80:84: 2d:16:7a:d8:29:2a:a3:e3:cb:4e:21:ee:e1:11:06: 79:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:47:74:87:03:2A:40:D8:92:DA:88:0A:A9:B2:76:D9:90:E5:EF:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8943bd2e-5afe-3433-aefc-bc8c5e147a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.138.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8c:8c:ae:f9:65:a6:de:3c:bc:19:c8:8a:9f:1d:72:45:52: f8:cd:67:da:65:3a:0d:d0:6a:6a:f0:ad:88:83:27:57:bc:13: 59:bd:be:fa:3a:56:b8:5e:dd:74:c8:e2:0c:d7:c8:6b:5b:57: 1c:60:ee:10:af:a1:d5:b5:0b:74:c0:f8:8f:bc:f0:c2:0b:41: e7:8c:89:1d:4f:04:e9:3c:09:a3:29:27:09:86:40:ea:91:88: 1f:78:40:2c:fd:3d:b7:f1:ae:b8:0e:55:82:6e:44:64:94:3b: 4f:66:4c:56:d5:fd:ff:34:dc:8a:93:b1:9f:f8:93:a5:9c:c5: 89:12:11:6a:35:b7:32:e8:28:2a:4b:f8:ac:08:18:c5:99:de: 79:44:db:b3:0c:d5:20:e0:0e:66:2c:68:73:12:59:0c:49:de: b9:2a:29:2f:3a:c9:21:c0:7e:84:80:cc:c6:82:e8:fd:32:de: 4c:a1:05:b4:7f:9b:4b:97:29:4e:1d:df:a2:52:f7:57:8f:46: 2a:a2:45:47:d0:ea:c1:3f:dd:05:b0:8d:9e:cd:44:06:fa:75: 2e:fd:8a:55:b4:20:fd:e1:be:0b:82:94:3c:0d:a0:47:49:d8: c0:e1:5d:96:38:e3:1a:dc:df:9d:6e:b5:90:86:8a:3c:03:96: 1e:8b:3d:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+swoF7SVm6gQLZHFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAzMDE0NDYyM1oXDTI3MDEyODE1NDYyM1owLzEtMCsGA1UEAxMk NGI2MDk1MGEtMzA3NS00Nzc4LWI1NTUtYjc1Zjg0MWVlMTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVAVXTQ5KjDPjiTK2O54BIuTRpt+g2OH5wgN /a7KllXuW1P53FOl8SjQqlyxowwj6uFZj9K5W4XVu6aX5GpOBkl7yUvkwsIouTzn AD4VLKGuFSC5blgeIyOpETne5i+ieKsELj219Td3peZk5oi0cukQhfFSDQOZr+u7 GLYIH81oN51x3UbugjH2IonIHmo3/DAnThoAO4YToYFIbSvJmWzEIn5qZCeCNOV2 FDFSA2gcTWtT3sSIGstGYDDbHvSyKBEPOeWyf4g/Z7/Opa/n8c2bekAvIuR9q+rW B6466u6gkysZhiXRTDld2wghgIQtFnrYKSqj48tOIe7hEQZ5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtHdIcDKkDYktqICqmydtmQ5e8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODk0M2JkMmUtNWFmZS0z NDMzLWFlZmMtYmM4YzVlMTQ3YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxoqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCMjK75ZabePLwZyIqfHXJFUvjNZ9plOg3QamrwrYiDJ1e8E1m9vvo6 Vrhe3XTI4gzXyGtbVxxg7hCvodW1C3TA+I+88MILQeeMiR1PBOk8CaMpJwmGQOqR iB94QCz9PbfxrrgOVYJuRGSUO09mTFbV/f803IqTsZ/4k6WcxYkSEWo1tzLoKCpL +KwIGMWZ3nlE27MM1SDgDmYsaHMSWQxJ3rkqKS86ySHAfoSAzMaC6P0y3kyhBbR/ m0uXKU4d36JS91ePRiqiRUfQ6sE/3QWwjZ7NRAb6dS79ilW0IP3hvguClDwNoEdJ 2MDhXZY44xrc351utZCGijwDlh6LPR8= -----END CERTIFICATE-----Generated at Sun Nov 1 08:30:55 2026 by rpki-client