$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d5a4e68-cc17-3c45-ab9c-5d66dbd3c30d.roa File: 8d5a4e68-cc17-3c45-ab9c-5d66dbd3c30d.roa (raw, json) Hash identifier: Q6SwfeZuvt892GVDjssKB6+SkiB3al3H9PAYcKoHGPs= Subject key identifier: 62:80:AB:6A:64:CA:91:78:6A:65:C1:54:88:5D:2E:5C:29:B7:05:C4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233DB18FB4CD44AF466780 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d5a4e68-cc17-3c45-ab9c-5d66dbd3c30d.roa Signing time: Wed 19 Aug 2026 18:03:49 +0000 ROA not before: Wed 19 Aug 2026 18:03:49 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 397537 IP address blocks: 209.168.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3d:b1:8f:b4:cd:44:af:46:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:49 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=0066f259-2960-4cca-9014-a1e55b8666d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0e:6e:fc:d8:a0:c7:53:5b:ff:62:2f:a1:0e: 52:49:70:0c:53:1f:7e:c0:4b:9b:35:0e:ce:f3:03: 58:d1:38:be:9f:6f:67:1e:f1:4a:f1:99:66:79:7f: 30:ca:e3:1a:e1:e5:54:09:23:a9:92:c1:a4:43:c7: 9a:d9:f0:7a:cc:76:b7:ee:18:55:e1:47:77:ff:9a: 53:a2:5c:1c:8e:e0:ce:e8:43:54:bf:cd:17:89:3c: bc:6b:09:c1:33:d5:e1:76:37:04:f1:da:9d:2e:94: 76:50:7d:ab:9e:7c:21:5e:d9:c0:54:95:26:38:f1: 4f:2c:bb:2f:c5:40:b2:92:52:8b:27:63:89:2a:12: 9a:53:d4:92:e6:9b:0e:df:fa:4c:eb:7b:c5:bb:ef: 50:ba:6b:a9:53:0d:70:d0:76:67:f2:37:d4:6b:aa: 94:a0:8e:c6:48:e3:36:00:16:99:e2:89:98:76:7e: f1:a5:d4:26:48:5f:2a:a2:35:60:0f:b3:0c:27:88: 3c:8a:84:3d:6b:b6:98:0b:f9:d7:fe:23:d0:30:bc: 17:f7:11:df:d3:ed:f4:5e:c5:e9:64:3a:77:83:d7: 7e:f5:ad:cd:24:f1:6b:5c:12:ad:58:2b:6e:74:4d: 82:5d:4a:77:9d:0d:d6:fa:05:e0:b1:e4:17:d0:87: db:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:80:AB:6A:64:CA:91:78:6A:65:C1:54:88:5D:2E:5C:29:B7:05:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8d5a4e68-cc17-3c45-ab9c-5d66dbd3c30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 209.168.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:6d:76:74:19:f8:1d:cb:93:a6:78:73:8a:56:9d:b4:bb:81: 49:3f:7b:b8:10:85:13:f2:87:d3:68:fb:02:93:d1:1f:cd:18: 25:9f:6f:fe:55:62:85:23:7c:e5:86:4a:4d:1b:76:f6:68:10: 88:7a:ea:f8:65:0c:e3:56:5a:a4:ba:87:15:45:0c:76:ae:83: 3f:52:dc:a2:d3:ee:3e:67:0d:a9:d7:34:aa:f2:00:73:5a:ba: ba:35:9e:b2:5b:f4:4c:5d:e6:7a:3b:1e:56:a3:09:c4:fe:30: 20:ea:1f:7a:40:e5:bd:9d:ae:4e:5c:9b:f2:de:90:dd:66:31: dd:cc:c9:03:c5:8e:16:42:d6:ba:74:32:93:f1:18:a4:ca:a5: eb:33:01:58:1e:1d:6a:ad:63:51:51:b4:8d:98:66:9b:07:21: 09:89:b7:03:78:37:b7:5f:c0:1f:a7:22:a6:65:1f:bb:df:ec: bb:ed:a1:3c:cd:99:93:ba:fa:be:b2:41:f8:cc:f2:51:2e:f3: ca:0d:a3:2d:bc:fd:37:21:03:5f:ba:6b:2c:f8:0c:28:91:f5: 28:53:cb:e6:a0:b3:c0:3c:7f:dd:1d:1f:f8:50:d4:24:9b:07: c6:6c:c0:c6:50:f6:37:b5:e0:7c:af:09:53:7d:e7:f8:d2:31: 85:5f:85:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIz2xj7TNRK9GZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk MDA2NmYyNTktMjk2MC00Y2NhLTkwMTQtYTFlNTViODY2NmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA5u/Nigx1Nb/2IvoQ5SSXAMUx9+wEubNQ7O 8wNY0Ti+n29nHvFK8ZlmeX8wyuMa4eVUCSOpksGkQ8ea2fB6zHa37hhV4Ud3/5pT olwcjuDO6ENUv80XiTy8awnBM9XhdjcE8dqdLpR2UH2rnnwhXtnAVJUmOPFPLLsv xUCyklKLJ2OJKhKaU9SS5psO3/pM63vFu+9QumupUw1w0HZn8jfUa6qUoI7GSOM2 ABaZ4omYdn7xpdQmSF8qojVgD7MMJ4g8ioQ9a7aYC/nX/iPQMLwX9xHf0+30XsXp ZDp3g9d+9a3NJPFrXBKtWCtudE2CXUp3nQ3W+gXgseQX0IfbHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKAq2pkypF4amXBVIhdLlwptwXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGQ1YTRlNjgtY2MxNy0z YzQ1LWFiOWMtNWQ2NmRiZDNjMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ah8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHttdnQZ+B3Lk6Z4c4pWnbS7gUk/e7gQhRPyh9No+wKT0R/NGCWfb/5V YoUjfOWGSk0bdvZoEIh66vhlDONWWqS6hxVFDHaugz9S3KLT7j5nDanXNKryAHNa uro1nrJb9Exd5no7HlajCcT+MCDqH3pA5b2drk5cm/LekN1mMd3MyQPFjhZC1rp0 MpPxGKTKpeszAVgeHWqtY1FRtI2YZpsHIQmJtwN4N7dfwB+nIqZlH7vf7LvtoTzN mZO6+r6yQfjM8lEu88oNoy28/TchA1+6ayz4DCiR9ShTy+ags8A8f90dH/hQ1CSb B8ZswMZQ9je14HyvCVN95/jSMYVfhfY= -----END CERTIFICATE-----Generated at Thu Sep 3 08:29:11 2026 by rpki-client