$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/97a4a599-438e-3d6c-af38-8d32eef7b4a5.roa File: 97a4a599-438e-3d6c-af38-8d32eef7b4a5.roa (raw, json) Hash identifier: 59r2wtjs/a9VFnCnWGYTe2pf3zfIX96G++poQsI2R3I= Subject key identifier: 8D:31:9F:05:95:DE:CE:63:06:5E:F9:A9:00:64:40:01:D3:6D:D7:96 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233E047BCE61379CB86340 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/97a4a599-438e-3d6c-af38-8d32eef7b4a5.roa Signing time: Wed 19 Aug 2026 18:03:49 +0000 ROA not before: Wed 19 Aug 2026 18:03:49 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 174 IP address blocks: 199.234.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3e:04:7b:ce:61:37:9c:b8:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:49 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=099b35ce-c87d-4db8-9a32-f8fcd4b73ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:b5:3d:c2:f9:8a:24:84:74:90:70:0d:e6: b6:5e:90:08:c3:bc:ec:1c:2a:28:c9:30:2c:c9:eb: b5:7c:51:22:ff:1f:1c:9d:28:10:d6:e3:6e:d3:0e: b4:b5:2d:bb:86:d5:f6:cf:ef:75:60:96:2d:b7:76: a4:12:ac:4a:bf:7d:0a:54:98:04:bb:5b:42:e1:77: 7b:42:ef:51:4f:47:7a:a7:b3:b7:13:14:8d:d6:11: 7d:22:99:03:f6:95:c9:13:ff:64:94:e8:c6:4c:3f: 71:21:78:fa:0d:6c:08:b6:67:72:58:f8:b8:c0:2b: 1d:91:3f:d9:25:e8:d6:6c:5c:4d:4a:c4:53:57:fc: fa:e7:bb:18:80:30:4a:dd:65:d1:4e:54:e7:5c:91: 69:7b:27:17:fc:d3:89:3b:19:c5:e4:7e:39:e3:01: 94:17:11:bd:c1:69:97:80:ba:03:e2:f1:8b:dd:98: 32:4b:a3:ef:79:9c:52:a2:cc:d2:6d:f2:74:bc:1b: 4d:4c:89:52:63:f7:d3:09:01:ce:cd:ff:5c:b3:1e: f2:12:49:d4:cb:ed:17:37:7f:79:ca:b3:2c:10:ac: 5d:ee:38:38:50:3b:78:15:48:96:07:e5:d1:2d:ce: 15:d1:77:47:20:6c:d0:44:cc:04:1b:b7:10:e4:63: 09:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:31:9F:05:95:DE:CE:63:06:5E:F9:A9:00:64:40:01:D3:6D:D7:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/97a4a599-438e-3d6c-af38-8d32eef7b4a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 199.234.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:87:7e:93:03:1a:5d:b8:6a:be:60:bc:de:93:ff:3a:30:3a: f7:65:46:84:fe:e5:77:f5:9b:3f:a5:97:57:6f:67:75:40:3e: 74:7d:20:de:93:d3:62:c9:b3:2b:e6:ed:a0:d7:61:41:b4:8f: 3e:19:7a:77:6f:5c:68:e3:50:fc:06:57:68:f1:e1:b8:d9:7a: 44:12:1e:69:2d:70:14:40:84:13:0f:da:6a:6b:36:97:2f:35: be:6e:e2:9d:ab:88:52:86:fb:8f:c0:3f:33:6c:d8:e4:a2:88: 8e:90:aa:c4:9e:7c:13:87:ed:f3:60:4a:98:e2:bb:a2:e1:ab: d5:11:d2:6c:f3:ba:f7:20:b2:9c:9b:cc:06:72:ca:95:08:c3: 6f:c2:bb:95:e7:16:9f:e6:d6:e3:a2:c0:5b:33:66:23:b0:c5: 2b:a9:78:61:96:64:22:a8:94:02:21:30:6c:10:db:0e:b9:8e: d9:17:25:57:33:af:43:48:c3:03:60:fa:f1:37:85:b5:5c:8a: a7:7c:16:86:7d:b0:0e:54:9b:35:08:29:00:62:b6:5d:f8:8c: 80:d3:d4:f6:79:12:b5:94:40:8e:ea:3d:89:c2:4e:ac:54:78: 13:12:78:cb:8e:09:d4:5c:c1:18:e9:0d:25:a8:8c:42:28:62: c5:ac:ca:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIz4Ee85hN5y4Y0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk MDk5YjM1Y2UtYzg3ZC00ZGI4LTlhMzItZjhmY2Q0YjczY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJy1PcL5iiSEdJBwDea2XpAIw7zsHCooyTAs yeu1fFEi/x8cnSgQ1uNu0w60tS27htX2z+91YJYtt3akEqxKv30KVJgEu1tC4Xd7 Qu9RT0d6p7O3ExSN1hF9IpkD9pXJE/9klOjGTD9xIXj6DWwItmdyWPi4wCsdkT/Z JejWbFxNSsRTV/z657sYgDBK3WXRTlTnXJFpeycX/NOJOxnF5H454wGUFxG9wWmX gLoD4vGL3ZgyS6PveZxSoszSbfJ0vBtNTIlSY/fTCQHOzf9csx7yEknUy+0XN395 yrMsEKxd7jg4UDt4FUiWB+XRLc4V0XdHIGzQRMwEG7cQ5GMJxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0xnwWV3s5jBl75qQBkQAHTbdeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTdhNGE1OTktNDM4ZS0z ZDZjLWFmMzgtOGQzMmVlZjdiNGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+r0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+HfpMDGl24ar5gvN6T/zowOvdlRoT+5Xf1mz+ll1dvZ3VAPnR9IN6T 02LJsyvm7aDXYUG0jz4ZendvXGjjUPwGV2jx4bjZekQSHmktcBRAhBMP2mprNpcv Nb5u4p2riFKG+4/APzNs2OSiiI6QqsSefBOH7fNgSpjiu6Lhq9UR0mzzuvcgspyb zAZyypUIw2/Cu5XnFp/m1uOiwFszZiOwxSupeGGWZCKolAIhMGwQ2w65jtkXJVcz r0NIwwNg+vE3hbVciqd8FoZ9sA5UmzUIKQBitl34jIDT1PZ5ErWUQI7qPYnCTqxU eBMSeMuOCdRcwRjpDSWojEIoYsWsyjM= -----END CERTIFICATE-----Generated at Thu Sep 3 09:24:34 2026 by rpki-client