$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8b689cd5-478c-384f-aae2-5952f84246c8.roa File: 8b689cd5-478c-384f-aae2-5952f84246c8.roa (raw, json) Hash identifier: wm9PmMk3XZOV/7AZ2ttQCpZwOOPC/Ce8joyGdgjf7i4= Subject key identifier: 3C:4A:AF:E9:46:09:A0:51:3D:CB:AA:02:B0:F5:8A:DF:FB:09:F6:5B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E8DEF9B9E46AFF5C336457AC0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8b689cd5-478c-384f-aae2-5952f84246c8.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 393560 IP address blocks: 168.143.255.66/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:9b:9e:46:af:f5:c3:36:45:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=0cd00050-21b3-407d-9174-47e507fd6866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:69:01:e3:e2:96:e8:17:99:6a:31:64:46: b4:80:36:5c:d9:f5:1e:9f:cb:72:6d:82:01:c8:dd: 89:a3:e8:5e:93:7e:6c:64:84:77:b7:71:39:c1:fe: a7:b3:5f:da:70:04:63:63:8c:d1:f0:23:15:e7:d1: 72:79:60:28:3e:06:f3:19:d3:f5:00:fd:55:72:33: a9:af:7f:d9:f8:a6:16:2d:dc:1a:7c:00:3d:7c:14: bd:cc:d7:0d:06:f2:74:b6:63:57:64:37:af:af:6f: ce:87:96:b0:47:34:ea:4e:4d:0c:c3:a5:87:36:c2: 72:b5:9f:2d:9f:ce:e8:10:41:8f:1c:31:10:51:8c: 0e:48:47:2b:4f:6c:8e:78:2c:5a:8f:42:46:54:55: f3:fd:81:5d:51:41:5a:cb:f3:b2:fd:bc:64:34:51: 46:75:75:81:ef:8b:08:f7:30:84:ee:b7:03:32:dd: 8d:42:be:d9:2a:7f:2d:63:b2:5c:0b:7d:a2:d0:a6: 16:10:1b:c6:b2:15:e6:3b:ba:3c:e5:fd:a9:09:0c: 64:14:60:99:11:d3:b5:39:e8:69:65:4f:5c:4e:bc: 49:b9:c9:7f:29:67:d2:9d:2c:7d:df:d0:32:28:7c: 6f:e0:d7:16:3f:04:ae:64:87:4d:1c:9d:28:d2:ef: 91:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4A:AF:E9:46:09:A0:51:3D:CB:AA:02:B0:F5:8A:DF:FB:09:F6:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8b689cd5-478c-384f-aae2-5952f84246c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.255.66/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f2:9c:c8:70:93:a0:68:a8:41:c8:73:11:7c:69:2a:41:8b: c0:e6:21:19:3e:96:fa:90:e4:e2:1d:c8:17:98:e5:60:e6:c1: a4:34:22:9c:28:86:a8:ab:a4:ea:e2:33:60:f9:3b:66:f9:c6: a4:bc:40:5c:9f:aa:7e:86:70:9e:64:ba:1f:29:6f:24:d0:dc: 17:56:09:77:72:ee:4e:1c:4d:e1:e6:be:c6:72:3e:64:8b:73: 60:3e:6b:b7:8b:c0:65:be:90:da:47:3a:22:3c:05:7d:19:31: 8e:7d:88:14:61:ab:d9:34:3d:97:7d:83:bc:96:95:e5:0b:90: 94:8c:cb:69:5a:29:99:1a:6b:32:4a:74:71:5e:b6:50:fb:d7: 0e:29:0a:53:1d:67:1c:d6:61:41:ee:54:e0:59:84:43:13:bc: 71:0a:ed:f4:6c:c3:80:37:9c:0a:3e:c0:86:22:46:57:03:a9: 47:54:2f:93:63:e5:1e:df:27:45:43:59:2d:a3:3d:71:fd:78: 5d:58:c7:5d:87:a6:60:88:b5:de:71:ed:83:31:74:eb:98:2a: b2:43:ba:fe:b6:f9:58:84:74:28:94:62:f2:5e:ab:74:cc:c9: 2c:5e:5c:73:44:2e:2b:39:40:4f:f3:5c:b5:ca:2a:3b:ad:f7: c9:b3:64:ab -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6N75ueRq/1wzZFesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk MGNkMDAwNTAtMjFiMy00MDdkLTkxNzQtNDdlNTA3ZmQ2ODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/NpAePilugXmWoxZEa0gDZc2fUen8tybYIB yN2Jo+hek35sZIR3t3E5wf6ns1/acARjY4zR8CMV59FyeWAoPgbzGdP1AP1VcjOp r3/Z+KYWLdwafAA9fBS9zNcNBvJ0tmNXZDevr2/Oh5awRzTqTk0Mw6WHNsJytZ8t n87oEEGPHDEQUYwOSEcrT2yOeCxaj0JGVFXz/YFdUUFay/Oy/bxkNFFGdXWB74sI 9zCE7rcDMt2NQr7ZKn8tY7JcC32i0KYWEBvGshXmO7o85f2pCQxkFGCZEdO1Oehp ZU9cTrxJucl/KWfSnSx939AyKHxv4NcWPwSuZIdNHJ0o0u+RMwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDxKr+lGCaBRPcuqArD1it/7CfZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGI2ODljZDUtNDc4Yy0z ODRmLWFhZTItNTk1MmY4NDI0NmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAqI//QjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAk8pzIcJOgaKhByHMRfGkqQYvA5iEZPpb6kOTiHcgXmOVg5sGkNCKc KIaoq6Tq4jNg+Ttm+cakvEBcn6p+hnCeZLofKW8k0NwXVgl3cu5OHE3h5r7Gcj5k i3NgPmu3i8BlvpDaRzoiPAV9GTGOfYgUYavZND2XfYO8lpXlC5CUjMtpWimZGmsy SnRxXrZQ+9cOKQpTHWcc1mFB7lTgWYRDE7xxCu30bMOAN5wKPsCGIkZXA6lHVC+T Y+Ue3ydFQ1ktoz1x/XhdWMddh6ZgiLXece2DMXTrmCqyQ7r+tvlYhHQolGLyXqt0 zMksXlxzRC4rOUBP81y1yio7rffJs2Sr -----END CERTIFICATE-----Generated at Tue Jul 21 23:02:19 2026 by rpki-client