$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9216999b-9069-3bc8-b34e-bad6c8912127.roa File: 9216999b-9069-3bc8-b34e-bad6c8912127.roa (raw, json) Hash identifier: VF0LhFVZCRZgeJS+LQa6PNv9DwuibDkxhQbT3v9NhRA= Subject key identifier: D7:56:E2:08:3A:7D:50:52:A5:7C:35:DE:03:69:62:9D:F0:AC:63:E3 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4234A6512A9DAD7AAE65A80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9216999b-9069-3bc8-b34e-bad6c8912127.roa Signing time: Wed 19 Aug 2026 18:03:55 +0000 ROA not before: Wed 19 Aug 2026 18:03:55 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 14717 IP address blocks: 204.141.184.0/21 maxlen: 24 206.166.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4a:65:12:a9:da:d7:aa:e6:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:55 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=e4cb3bda-15c2-46d6-9103-0664558a3e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:92:f6:c9:1b:08:ee:66:59:b9:d8:05:33: 8f:71:dc:3c:4a:00:a9:a7:75:64:03:db:91:fb:bc: 20:b1:ef:f0:49:56:fe:2a:a9:20:b9:85:d7:51:34: f3:83:df:88:03:99:5c:b7:97:c4:dc:72:25:1d:9f: 38:6e:1f:6c:08:e5:a8:07:0b:d0:41:f2:b0:3b:57: ce:34:80:a6:7e:20:09:79:0a:cf:c0:a8:ea:0b:d3: 3b:ba:55:91:33:8d:25:e5:a9:2d:ef:d7:93:ce:c6: 6a:67:74:62:ab:4c:e5:81:cf:dd:4c:a9:3e:c0:c9: 23:dd:fc:36:65:1f:53:57:b7:28:ae:fe:9d:c7:19: f2:60:c6:80:5f:7e:c1:6d:d7:12:83:9a:b1:fc:35: 79:68:a3:1c:a3:1a:e9:8b:d6:b2:2a:ad:4e:7e:67: 59:0b:75:1f:2a:01:0f:46:10:75:13:b7:c5:ee:b4: 23:3a:9c:ef:36:8c:b9:b9:6e:b3:c1:42:d2:40:57: 01:e5:c1:8a:85:26:85:ba:af:35:b0:56:54:aa:c8: ed:b9:e0:7a:ec:38:5d:ba:14:86:fa:f8:c0:48:30: 2f:95:f9:58:f3:fb:b4:30:2a:25:1b:cf:1c:e7:76: 82:33:70:2b:7f:e3:70:e9:22:2f:e1:7b:c6:ef:be: 21:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:56:E2:08:3A:7D:50:52:A5:7C:35:DE:03:69:62:9D:F0:AC:63:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9216999b-9069-3bc8-b34e-bad6c8912127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.184.0/21 206.166.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:74:d0:5d:cf:26:56:62:c9:c1:85:32:f8:f4:ed:10:85:23: 2c:0c:61:dc:61:10:8f:7f:4a:4b:d0:3c:53:29:25:d7:77:c5: a0:a5:04:33:2e:c9:1d:23:04:20:e7:c7:54:7a:0c:e5:93:c4: 01:cf:8d:c5:ad:f2:07:e9:1c:e5:42:1c:0a:88:36:4e:04:ce: 08:15:e4:fa:fa:62:5b:4e:ca:86:8e:22:ae:7d:73:a0:79:be: 56:c7:ce:da:9c:91:55:ad:9b:eb:cf:35:4f:e7:25:28:fb:5f: 70:47:07:bd:07:14:24:dc:46:4f:fe:d5:56:24:cf:15:8b:bf: f1:85:56:89:95:0c:dd:d3:58:83:dc:8a:0e:4a:42:df:e6:11: 5a:a5:71:77:30:ba:6d:da:74:1c:3e:2e:41:c0:40:bd:c9:97: ea:5e:24:60:9f:d4:b9:c0:6a:60:37:c0:b7:c3:b3:44:56:e6: 51:5d:14:15:e0:83:33:01:38:b7:8e:f1:52:f0:8b:c6:02:90: 55:67:83:64:f6:a2:4d:b3:e3:db:e6:ab:69:8d:17:9a:6d:ac: ad:15:20:66:45:d6:11:56:7a:13:23:ae:05:27:21:9d:94:a3: bf:26:92:19:26:95:eb:bc:76:b7:53:e8:d4:f4:0f:ff:b5:88: 1b:c9:d0:4e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7kI0plEqna16rmWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1NVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ZTRjYjNiZGEtMTVjMi00NmQ2LTkxMDMtMDY2NDU1OGEzZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNGS9skbCO5mWbnYBTOPcdw8SgCpp3VkA9uR +7wgse/wSVb+KqkguYXXUTTzg9+IA5lct5fE3HIlHZ84bh9sCOWoBwvQQfKwO1fO NICmfiAJeQrPwKjqC9M7ulWRM40l5akt79eTzsZqZ3Riq0zlgc/dTKk+wMkj3fw2 ZR9TV7corv6dxxnyYMaAX37BbdcSg5qx/DV5aKMcoxrpi9ayKq1OfmdZC3UfKgEP RhB1E7fF7rQjOpzvNoy5uW6zwULSQFcB5cGKhSaFuq81sFZUqsjtueB67DhduhSG +vjASDAvlflY8/u0MColG88c53aCM3Arf+Nw6SIv4XvG774hRwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNdW4gg6fVBSpXw13gNpYp3wrGPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTIxNjk5OWItOTA2OS0z YmM4LWIzNGUtYmFkNmM4OTEyMTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDzI24AwQC zqaMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABt00F3PJlZiycGFMvj07RCFIywMYdxhEI9/SkvQPFMpJdd3 xaClBDMuyR0jBCDnx1R6DOWTxAHPjcWt8gfpHOVCHAqINk4EzggV5Pr6YltOyoaO Iq59c6B5vlbHztqckVWtm+vPNU/nJSj7X3BHB70HFCTcRk/+1VYkzxWLv/GFVomV DN3TWIPcig5KQt/mEVqlcXcwum3adBw+LkHAQL3Jl+peJGCf1LnAamA3wLfDs0RW 5lFdFBXggzMBOLeO8VLwi8YCkFVng2T2ok2z49vmq2mNF5ptrK0VIGZF1hFWehMj rgUnIZ2Uo78mkhkmleu8drdT6NT0D/+1iBvJ0E4= -----END CERTIFICATE-----Generated at Fri Aug 28 00:43:44 2026 by rpki-client