$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a21d9ad4-59be-311d-b3c1-a13fc4e5d1a7.roa File: a21d9ad4-59be-311d-b3c1-a13fc4e5d1a7.roa (raw, json) Hash identifier: xt5uwdU+LhaMD+1Yefg4vUbbqnt+4/CYMWl2IicErKk= Subject key identifier: E8:2A:ED:EA:87:AD:B2:B3:0B:36:61:B0:D7:20:06:F9:C1:A9:30:C0 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233F63CADA279C75F7A780 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a21d9ad4-59be-311d-b3c1-a13fc4e5d1a7.roa Signing time: Wed 19 Aug 2026 18:03:50 +0000 ROA not before: Wed 19 Aug 2026 18:03:50 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 206.166.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3f:63:ca:da:27:9c:75:f7:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:50 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=31456cbd-c355-4f25-b58f-11eb3fbca36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:3d:87:bc:9b:bd:61:b3:35:c4:87:e2:a9: 17:e2:a4:34:e1:0f:bd:f8:b7:57:ab:2c:a7:19:83: b6:4e:17:9a:c7:25:57:59:19:2b:e5:fc:55:86:11: 6d:3b:2d:dd:d3:95:d3:d4:c5:84:4c:9f:b9:05:61: 60:ed:78:50:8b:d5:0f:1b:49:f0:7f:5c:37:c6:db: dc:d1:df:a3:aa:a1:79:72:0b:46:bd:a5:fb:a8:05: 9a:e3:e0:7d:d3:15:fd:51:98:f5:b2:df:b6:ab:45: 79:cf:d2:fe:24:43:94:07:5c:bb:fe:82:62:95:1e: 0a:91:18:ec:fb:90:2d:a4:0a:07:59:d3:84:f4:48: 09:47:a0:69:31:c5:2c:b4:db:7f:8a:09:2b:8d:e9: b0:91:81:b0:97:03:00:04:73:16:3d:66:28:5d:25: 20:2b:ce:8f:bd:04:04:3c:00:16:7d:f1:a9:04:1a: 5d:f4:1b:12:0d:51:54:db:c8:df:dd:4b:90:b4:7f: 63:7e:0b:95:c7:8a:40:e0:99:21:de:cc:07:5b:30: 08:04:7f:fc:bd:0e:f3:9b:b3:e5:f5:8e:25:32:d8: a8:8d:61:f3:16:30:41:f3:85:47:ca:e1:19:a4:e8: 44:b8:b8:0b:c7:6f:b3:b3:7b:4c:8e:fd:89:f3:10: 2f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2A:ED:EA:87:AD:B2:B3:0B:36:61:B0:D7:20:06:F9:C1:A9:30:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a21d9ad4-59be-311d-b3c1-a13fc4e5d1a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.166.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f8:85:cb:39:03:0a:4e:1e:b0:60:90:5f:15:fe:54:ba:8f: c6:eb:f2:87:29:44:88:b8:df:97:50:bf:9c:38:50:eb:76:dd: 56:86:35:32:c4:e6:ec:1b:c9:1c:c9:e8:32:e2:db:1f:fa:1a: 3f:fb:fc:41:95:76:9b:98:ba:2b:79:34:79:2a:51:e6:78:85: 99:ce:a1:49:8d:14:71:c1:ab:33:b5:73:c0:0f:2b:18:de:8f: f6:ea:2d:f1:ce:f6:ca:c9:40:98:28:04:1e:30:11:01:59:9a: e2:0a:ee:c5:2f:4b:43:64:9d:5f:16:b3:9e:72:f4:43:20:80: 83:c4:fd:24:c5:fd:71:3c:62:8c:76:6c:01:28:4d:c4:5c:77: 32:67:54:95:7b:e1:89:65:57:97:b2:31:0a:40:ac:46:b7:19: 97:29:6f:35:73:48:8a:ea:2a:56:af:5f:36:4a:f0:f7:59:33: 0f:95:06:28:e9:5b:51:1a:8c:26:71:59:fa:a5:f8:a4:f3:d9: e4:9a:18:8f:23:3f:4b:d2:0d:14:22:a5:d7:94:37:6f:e0:20: cc:84:a3:58:43:6d:16:71:e6:ae:76:cc:a3:05:42:4d:1e:ca: 23:7e:d5:ea:49:98:8b:b5:e3:55:d8:ff:f4:0d:b9:cc:dc:d6: dc:dd:e0:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIz9jytonnHX3p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk MzE0NTZjYmQtYzM1NS00ZjI1LWI1OGYtMTFlYjNmYmNhMzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWM9h7ybvWGzNcSH4qkX4qQ04Q+9+LdXqyyn GYO2TheaxyVXWRkr5fxVhhFtOy3d05XT1MWETJ+5BWFg7XhQi9UPG0nwf1w3xtvc 0d+jqqF5cgtGvaX7qAWa4+B90xX9UZj1st+2q0V5z9L+JEOUB1y7/oJilR4KkRjs +5AtpAoHWdOE9EgJR6BpMcUstNt/igkrjemwkYGwlwMABHMWPWYoXSUgK86PvQQE PAAWffGpBBpd9BsSDVFU28jf3UuQtH9jfguVx4pA4Jkh3swHWzAIBH/8vQ7zm7Pl 9Y4lMtiojWHzFjBB84VHyuEZpOhEuLgLx2+zs3tMjv2J8xAv0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgq7eqHrbKzCzZhsNcgBvnBqTDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTIxZDlhZDQtNTliZS0z MTFkLWIzYzEtYTEzZmM0ZTVkMWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzqaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb4hcs5AwpOHrBgkF8V/lS6j8br8ocpRIi435dQv5w4UOt23VaGNTLE 5uwbyRzJ6DLi2x/6Gj/7/EGVdpuYuit5NHkqUeZ4hZnOoUmNFHHBqzO1c8APKxje j/bqLfHO9srJQJgoBB4wEQFZmuIK7sUvS0NknV8Ws55y9EMggIPE/STF/XE8Yox2 bAEoTcRcdzJnVJV74YllV5eyMQpArEa3GZcpbzVzSIrqKlavXzZK8PdZMw+VBijp W1EajCZxWfql+KTz2eSaGI8jP0vSDRQipdeUN2/gIMyEo1hDbRZx5q52zKMFQk0e yiN+1epJmIu141XY//QNuczc1tzd4CM= -----END CERTIFICATE-----Generated at Thu Sep 17 12:11:34 2026 by rpki-client