$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a857aa9-7f6d-3b63-a6d8-5ef153494e6b.roa File: 8a857aa9-7f6d-3b63-a6d8-5ef153494e6b.roa (raw, json) Hash identifier: oube3kzyRJQudOi9a1MkKRIBlnS8SfksHP6OXhGp/Eo= Subject key identifier: 1F:C1:F1:C1:10:F8:02:1C:F4:01:94:3F:4E:02:2B:D3:47:32:4A:A5 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE42343F5A0671E9E04555840 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a857aa9-7f6d-3b63-a6d8-5ef153494e6b.roa Signing time: Wed 19 Aug 2026 18:03:52 +0000 ROA not before: Wed 19 Aug 2026 18:03:52 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 205.238.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:43:f5:a0:67:1e:9e:04:55:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:52 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=5ca74d84-317f-454b-9ab2-06b1df22a405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:68:5b:30:14:9f:e5:c6:53:89:c9:a7:87: a1:9d:06:1d:fa:6f:e0:81:0b:10:e6:a4:2d:cd:8a: a2:46:b7:ba:ad:0c:f8:3b:5b:f4:ae:2c:34:4b:99: ab:4d:32:90:81:c9:20:b3:70:d9:8f:97:21:73:b5: d5:f6:e0:1c:61:32:82:ee:fe:a9:4b:3f:67:0e:96: 63:b7:87:4d:8d:21:61:42:ef:23:87:43:83:a7:44: 39:a0:fa:df:ed:2c:af:a7:7b:4e:b4:20:27:c9:fa: 42:6e:52:70:fb:1e:b9:fc:c9:44:d0:d3:8f:78:84: 14:e3:88:53:66:3c:e2:c0:d1:92:ac:f1:20:05:55: 44:84:52:d2:8e:51:bd:49:ba:87:1b:39:9f:c6:ec: 6c:1f:7a:d7:af:b9:fb:55:c8:03:5e:33:74:bc:17: 29:4f:11:d0:ce:23:43:da:64:c1:f2:c1:57:00:0d: f9:6c:06:13:5e:a4:26:a7:c7:fa:ce:b4:53:36:1a: 6d:38:8f:cc:30:b1:8c:9c:2b:9d:ae:72:61:97:8d: 72:d1:c3:f2:6c:5b:2e:3a:d0:3a:e8:85:61:27:a6: e4:db:82:6c:ee:01:e1:ce:86:d1:7f:33:ef:73:4c: 25:de:62:5c:7c:ca:5b:5e:d3:9f:93:a1:33:05:d8: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C1:F1:C1:10:F8:02:1C:F4:01:94:3F:4E:02:2B:D3:47:32:4A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a857aa9-7f6d-3b63-a6d8-5ef153494e6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 205.238.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ae:92:c9:d2:37:ee:73:25:18:1e:31:00:b1:c3:41:42:fc: 46:51:a2:66:58:44:70:e6:f9:17:19:19:dc:90:98:d8:76:7f: e7:d0:8f:9d:cf:9e:44:12:a3:80:ed:93:4f:b6:86:60:9e:8b: 82:cd:7e:3e:1a:fa:5e:61:3d:4a:13:30:6c:bd:19:7e:d1:99: f4:fb:eb:45:22:7e:e2:ef:aa:59:96:69:5e:48:fc:86:49:af: d4:ef:f7:74:44:ef:38:29:c4:8c:6d:cc:10:1f:3a:13:16:47: 6f:8f:64:f3:63:df:25:2c:a2:96:3e:34:3e:a5:85:9a:d9:ec: ad:68:06:82:37:f9:29:aa:cd:6a:5d:0f:7c:16:a6:17:9c:aa: 40:f8:f2:4a:34:38:5e:e6:9e:25:8d:66:83:7f:aa:9d:07:9f: 09:3e:af:b2:14:a8:39:c3:26:77:7a:2c:59:9e:1e:9f:7a:0e: 6f:31:77:a2:93:89:51:53:86:27:5e:23:a9:42:48:37:9a:44: 50:9f:72:fc:8e:5b:78:d2:81:58:2d:52:da:46:d6:d0:86:8d: 8e:b3:0b:83:5d:72:0c:e8:ca:a8:88:ee:47:65:f5:93:92:2f: 34:10:b8:50:03:97:38:65:31:d4:ca:89:7e:cf:d4:a8:38:ad: 94:b2:e2:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0P1oGcengRVWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MloXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk NWNhNzRkODQtMzE3Zi00NTRiLTlhYjItMDZiMWRmMjJhNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyxoWzAUn+XGU4nJp4ehnQYd+m/ggQsQ5qQt zYqiRre6rQz4O1v0riw0S5mrTTKQgckgs3DZj5chc7XV9uAcYTKC7v6pSz9nDpZj t4dNjSFhQu8jh0ODp0Q5oPrf7Syvp3tOtCAnyfpCblJw+x65/MlE0NOPeIQU44hT ZjziwNGSrPEgBVVEhFLSjlG9SbqHGzmfxuxsH3rXr7n7VcgDXjN0vBcpTxHQziND 2mTB8sFXAA35bAYTXqQmp8f6zrRTNhptOI/MMLGMnCudrnJhl41y0cPybFsuOtA6 6IVhJ6bk24Js7gHhzobRfzPvc0wl3mJcfMpbXtOfk6EzBdj0wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/B8cEQ+AIc9AGUP04CK9NHMkqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGE4NTdhYTktN2Y2ZC0z YjYzLWE2ZDgtNWVmMTUzNDk0ZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGze4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiuksnSN+5zJRgeMQCxw0FC/EZRomZYRHDm+RcZGdyQmNh2f+fQj53P nkQSo4Dtk0+2hmCei4LNfj4a+l5hPUoTMGy9GX7RmfT760UifuLvqlmWaV5I/IZJ r9Tv93RE7zgpxIxtzBAfOhMWR2+PZPNj3yUsopY+ND6lhZrZ7K1oBoI3+SmqzWpd D3wWphecqkD48ko0OF7mniWNZoN/qp0Hnwk+r7IUqDnDJnd6LFmeHp96Dm8xd6KT iVFThideI6lCSDeaRFCfcvyOW3jSgVgtUtpG1tCGjY6zC4NdcgzoyqiI7kdl9ZOS LzQQuFADlzhlMdTKiX7P1Kg4rZSy4sU= -----END CERTIFICATE-----Generated at Thu Sep 17 12:12:18 2026 by rpki-client