$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa293649-b9e0-3c9f-8c2b-74c1da2652c9.roa File: aa293649-b9e0-3c9f-8c2b-74c1da2652c9.roa (raw, json) Hash identifier: rKuvWYXwcQNhd5oD5Fz1Qk6mO90JSRsCvTcbFUshtJw= Subject key identifier: A3:57:57:AB:61:91:F4:3E:81:A6:A4:78:E3:E8:B9:0C:CC:46:01:A0 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232AA4445D7C35453DFF80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa293649-b9e0-3c9f-8c2b-74c1da2652c9.roa Signing time: Wed 19 Aug 2026 18:03:40 +0000 ROA not before: Wed 19 Aug 2026 18:03:40 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 30640 IP address blocks: 204.2.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:2a:a4:44:5d:7c:35:45:3d:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:40 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=aac359d9-608a-4071-9633-f3652cae711a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:ad:e4:69:32:70:7e:4f:7c:1f:38:d4:ed: 02:5e:1d:b4:b3:b0:ac:10:93:9c:b6:af:60:0e:5b: b2:94:c9:0a:b8:11:f4:4d:26:a6:6e:ab:9e:32:58: 5b:9c:28:8c:cd:ed:0c:24:d1:ec:02:72:e3:8a:b5: 08:12:c2:3a:57:a6:80:fc:93:f8:3f:33:b0:2d:8c: 1e:ca:bf:09:d3:57:6a:30:6e:17:3e:19:6b:f8:fa: c8:2e:ee:97:f7:2e:1b:66:de:ea:22:9b:4a:98:d2: 4e:64:15:6f:f5:d7:23:9e:7e:67:be:d3:2b:23:e1: 7a:d6:57:4e:da:48:7c:67:da:18:f3:e0:86:f5:c8: 2e:c8:2f:93:19:ee:0e:f9:47:f8:dc:0e:ba:6e:13: 0f:c3:8b:b0:ab:95:d9:39:14:e0:49:de:1a:33:c5: 25:c7:3a:2b:54:9d:9b:bb:f5:d4:37:1d:ff:9c:cd: 40:a1:6a:fc:47:a9:c0:0c:19:3e:9b:e9:a0:7b:24: 47:eb:82:c1:70:b2:f0:3d:0c:33:65:f3:09:33:d4: 90:e3:04:57:f5:86:88:31:32:22:ac:94:3c:9c:09: 3e:0e:50:29:2a:30:a6:c1:d2:cc:cf:90:3e:34:14: 50:a7:a2:f1:0b:2a:db:6c:b8:31:31:0f:56:84:1b: e5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:57:57:AB:61:91:F4:3E:81:A6:A4:78:E3:E8:B9:0C:CC:46:01:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa293649-b9e0-3c9f-8c2b-74c1da2652c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:df:c0:22:ba:94:4f:4c:16:28:c7:3f:b6:59:3b:71:59:50: b9:ed:10:d9:6e:bb:56:72:e0:e6:27:f6:3b:9c:28:9c:01:44: 7d:dd:de:46:1a:d3:62:62:c6:10:66:f4:31:84:b7:bd:6c:c1: 89:46:9f:86:91:6f:ea:b9:4e:5f:1f:40:22:fa:56:08:d0:f9: 71:95:4d:73:0a:db:b3:db:e3:b7:ea:1e:87:1d:a6:31:28:16: 62:f6:8c:86:ce:71:40:fa:63:a7:85:fe:b9:c9:5e:95:56:b5: f7:fe:70:05:24:a9:2a:0b:29:a9:ba:7a:50:30:47:d8:54:a1: a9:22:94:70:eb:24:77:e5:6f:af:62:8e:5a:0d:39:ba:80:b3: 02:2a:c6:33:f5:3c:20:c4:fe:7c:49:e5:36:3d:0e:4f:27:08: 68:bd:cd:3c:2b:6a:5f:6d:b1:88:6c:28:3f:18:5a:5a:df:76: b8:80:b0:6f:54:74:bb:39:92:7d:df:34:79:32:b1:ad:62:70: 0a:c4:1e:15:85:0e:06:a3:e9:5e:42:f2:88:c8:75:c7:92:ec: f7:f0:48:f7:f3:f5:72:e1:6b:67:af:95:7c:09:3e:f5:7b:36: a3:2b:14:a3:ad:e2:b2:15:bc:0c:37:06:38:7f:73:e6:c6:50: 23:d6:b5:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyqkRF18NUU9/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk YWFjMzU5ZDktNjA4YS00MDcxLTk2MzMtZjM2NTJjYWU3MTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhat5GkycH5PfB841O0CXh20s7CsEJOctq9g DluylMkKuBH0TSambqueMlhbnCiMze0MJNHsAnLjirUIEsI6V6aA/JP4PzOwLYwe yr8J01dqMG4XPhlr+PrILu6X9y4bZt7qIptKmNJOZBVv9dcjnn5nvtMrI+F61ldO 2kh8Z9oY8+CG9cguyC+TGe4O+Uf43A66bhMPw4uwq5XZORTgSd4aM8UlxzorVJ2b u/XUNx3/nM1AoWr8R6nADBk+m+mgeyRH64LBcLLwPQwzZfMJM9SQ4wRX9YaIMTIi rJQ8nAk+DlApKjCmwdLMz5A+NBRQp6LxCyrbbLgxMQ9WhBvlAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNXV6thkfQ+gaakeOPouQzMRgGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWEyOTM2NDktYjllMC0z YzlmLThjMmItNzRjMWRhMjY1MmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAKWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPfwCK6lE9MFijHP7ZZO3FZULntENluu1Zy4OYn9jucKJwBRH3d3kYa 02JixhBm9DGEt71swYlGn4aRb+q5Tl8fQCL6VgjQ+XGVTXMK27Pb47fqHocdpjEo FmL2jIbOcUD6Y6eF/rnJXpVWtff+cAUkqSoLKam6elAwR9hUoakilHDrJHflb69i jloNObqAswIqxjP1PCDE/nxJ5TY9Dk8nCGi9zTwral9tsYhsKD8YWlrfdriAsG9U dLs5kn3fNHkysa1icArEHhWFDgaj6V5C8ojIdceS7PfwSPfz9XLha2evlXwJPvV7 NqMrFKOt4rIVvAw3Bjh/c+bGUCPWtWQ= -----END CERTIFICATE-----Generated at Thu Sep 17 16:51:27 2026 by rpki-client