$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8bde6cb4-41e6-391c-9096-f9742650781d.roa File: 8bde6cb4-41e6-391c-9096-f9742650781d.roa (raw, json) Hash identifier: bmBNEeYYTj4ERSQe0hGbVImdpcn8E3i5nWswAvfJKpc= Subject key identifier: 64:56:6B:8E:40:22:B6:0A:0D:A3:36:6F:1D:86:2D:E3:C7:3A:EE:94 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE921F6081CA76BD4E0F4C080 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8bde6cb4-41e6-391c-9096-f9742650781d.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 214432 IP address blocks: 157.238.172.0/24 maxlen: 24 157.238.173.0/24 maxlen: 24 157.238.174.0/24 maxlen: 24 157.238.175.0/24 maxlen: 24 157.238.244.0/24 maxlen: 24 157.238.245.0/24 maxlen: 24 157.238.246.0/24 maxlen: 24 157.238.247.0/24 maxlen: 24 168.143.116.0/24 maxlen: 24 168.143.117.0/24 maxlen: 24 168.143.118.0/24 maxlen: 24 168.143.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:f6:08:1c:a7:6b:d4:e0:f4:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=9b9d2e2c-9813-4999-8638-da38a3d279ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3c:5b:d6:45:86:cf:c1:96:a1:dc:79:a4:40: ef:5f:c5:33:da:55:b0:20:27:39:ef:44:91:94:78: 1e:23:c5:b5:16:12:99:05:c4:f8:14:43:a1:61:1d: bf:6b:21:20:2b:10:a7:d0:f6:31:12:6e:7c:6a:7e: e0:73:19:a1:27:c4:80:8e:9d:b6:0c:a9:de:f7:80: ad:46:c4:cf:2b:78:78:29:14:84:ad:f7:df:bd:74: 52:3a:f9:85:16:c2:f3:4f:6d:62:6a:af:38:0a:26: 77:f4:e9:eb:18:00:cb:21:e6:b5:72:53:f3:a4:6a: 3f:3a:63:a6:36:a2:de:86:13:1e:86:1f:6e:38:9d: e1:1f:a7:72:04:ec:fe:be:5a:d0:45:57:3c:a5:f4: 7c:23:42:40:ee:57:c6:b6:74:59:4f:7e:0f:2e:54: 4e:45:0e:e5:18:e0:a3:8c:28:66:ae:97:70:fd:92: 75:a5:b9:a0:f2:ba:53:91:d9:7e:be:ca:8e:e7:4b: 80:93:f4:b5:1a:90:81:d9:f4:21:39:8b:22:6f:a1: 09:92:eb:cc:20:7f:67:2a:b1:37:c3:8b:73:fc:c1: dd:71:a1:ed:bb:19:d4:fe:fd:2c:69:bb:ed:e1:0a: 49:f5:dd:49:44:66:e3:44:8e:68:cd:38:ac:45:bd: 8c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:56:6B:8E:40:22:B6:0A:0D:A3:36:6F:1D:86:2D:E3:C7:3A:EE:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8bde6cb4-41e6-391c-9096-f9742650781d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 157.238.172.0/22 157.238.244.0/22 168.143.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:16:25:f5:8f:5b:d5:e6:78:12:87:af:c0:b7:b3:15:3c:9b: 6b:2f:38:ec:05:1b:a6:8a:65:b1:01:cb:9e:f9:39:45:8c:a6: 03:97:5e:39:fd:ac:94:13:55:a1:7e:c0:ca:f1:a6:f6:c0:17: f7:5d:1a:2a:de:e0:10:6f:69:d3:c2:a0:e1:87:32:1c:16:81: 0e:79:56:29:dd:62:bb:d5:ab:7b:00:37:7e:a8:14:e0:6f:a6: e3:11:8c:ff:d7:88:e6:b1:fa:b1:d7:34:d7:4d:4e:b5:48:b7: d4:c3:e4:53:db:86:5c:2b:b8:ed:ce:1d:0d:c6:0f:0d:de:1e: ba:f5:60:5c:43:0f:f0:6d:eb:0a:8a:8b:56:ac:26:ea:fc:1c: 38:d2:4d:12:1c:11:33:e9:cb:67:8c:43:56:1f:19:da:cf:74: 59:95:aa:4d:2c:1f:d3:64:1c:a8:c5:4f:21:12:6b:4c:76:6b: 54:ad:c3:74:2a:fc:39:82:dd:bf:0b:50:fa:7e:49:e2:de:46: a0:92:99:50:f0:09:da:f3:b3:c3:97:73:ae:5a:ea:54:fb:6c: a0:08:86:ea:ed:af:eb:64:b6:7b:e0:2b:46:5c:43:c5:35:f3: 9b:c0:a4:9a:6a:a8:52:4e:8d:4c:c7:e5:21:43:83:e4:d7:f6: c8:58:47:7d -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE7pIfYIHKdr1OD0wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk OWI5ZDJlMmMtOTgxMy00OTk5LTg2MzgtZGEzOGEzZDI3OWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjxb1kWGz8GWodx5pEDvX8Uz2lWwICc570SR lHgeI8W1FhKZBcT4FEOhYR2/ayEgKxCn0PYxEm58an7gcxmhJ8SAjp22DKne94Ct RsTPK3h4KRSErfffvXRSOvmFFsLzT21iaq84CiZ39OnrGADLIea1clPzpGo/OmOm NqLehhMehh9uOJ3hH6dyBOz+vlrQRVc8pfR8I0JA7lfGtnRZT34PLlRORQ7lGOCj jChmrpdw/ZJ1pbmg8rpTkdl+vsqO50uAk/S1GpCB2fQhOYsib6EJkuvMIH9nKrE3 w4tz/MHdcaHtuxnU/v0sabvt4QpJ9d1JRGbjRI5ozTisRb2M7wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGRWa45AIrYKDaM2bx2GLePHOu6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGJkZTZjYjQtNDFlNi0z OTFjLTkwOTYtZjk3NDI2NTA3ODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCne6sAwQC ne70AwQCqI90MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIkWJfWPW9XmeBKHr8C3sxU8m2svOOwFG6aKZbEB y575OUWMpgOXXjn9rJQTVaF+wMrxpvbAF/ddGire4BBvadPCoOGHMhwWgQ55Vind YrvVq3sAN36oFOBvpuMRjP/XiOax+rHXNNdNTrVIt9TD5FPbhlwruO3OHQ3GDw3e Hrr1YFxDD/Bt6wqKi1asJur8HDjSTRIcETPpy2eMQ1YfGdrPdFmVqk0sH9NkHKjF TyESa0x2a1Stw3Qq/DmC3b8LUPp+SeLeRqCSmVDwCdrzs8OXc65a6lT7bKAIhurt r+tktnvgK0ZcQ8U185vApJpqqFJOjUzH5SFDg+TX9shYR30= -----END CERTIFICATE-----Generated at Thu Sep 10 13:24:48 2026 by rpki-client