$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ae946b04-5fa8-391a-ae0b-1e59377a3679.roa File: ae946b04-5fa8-391a-ae0b-1e59377a3679.roa (raw, json) Hash identifier: yAvheeYCIboIdKBSNaFMxxXk83JBivjVpb0B9XHYLy8= Subject key identifier: 9B:89:47:9F:03:A8:36:5C:E2:5C:1C:23:4A:29:93:31:4F:61:3B:1E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233F9EE29B51377C618100 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ae946b04-5fa8-391a-ae0b-1e59377a3679.roa Signing time: Wed 19 Aug 2026 18:03:50 +0000 ROA not before: Wed 19 Aug 2026 18:03:50 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 19693 IP address blocks: 216.42.131.0/24 maxlen: 24 216.42.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3f:9e:e2:9b:51:37:7c:61:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:50 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=b15b1cd6-feef-41d7-93b9-1be3354f69cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:d5:27:6f:6c:79:60:8c:53:a0:2d:2b:7c: a0:85:c6:bc:62:1a:8b:f8:1f:a6:9e:9e:fa:72:13: 63:20:55:85:0d:17:da:4f:71:2a:5d:51:40:64:1f: ea:d5:38:a9:ee:7e:a4:6e:60:55:34:47:d9:08:fd: 5a:03:ad:0b:c7:9f:10:53:78:ab:1c:c6:a9:72:33: 63:2c:51:90:a7:aa:7f:6b:78:ac:4a:14:81:d7:36: 85:f7:93:10:3c:d2:c8:e3:d6:82:7f:7f:7a:1f:47: b9:2c:ab:81:96:29:5d:14:ef:04:18:8e:04:ff:6b: 3b:b8:e7:16:a3:b5:cf:89:d2:6e:20:3d:45:af:47: 2f:ca:6a:98:f1:1e:81:c0:08:e3:2d:cd:21:67:7e: 61:05:dc:16:62:e3:5a:2e:f1:0e:8b:4d:b1:d8:07: 01:16:86:98:97:c4:ca:26:9e:13:fc:c1:e7:cc:24: 2c:bb:15:ac:b2:4d:58:01:8b:7d:02:7c:fe:71:ad: d4:97:fa:6a:27:b0:eb:03:e6:20:c5:8e:1d:47:71: c4:f0:10:81:46:16:a3:18:38:0c:06:d1:86:eb:7f: 1b:6e:73:c1:2e:8d:6d:aa:e2:50:cf:0c:a1:ea:f4: a8:c2:53:28:c2:94:fa:0b:a2:31:81:5b:c9:20:c8: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:89:47:9F:03:A8:36:5C:E2:5C:1C:23:4A:29:93:31:4F:61:3B:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ae946b04-5fa8-391a-ae0b-1e59377a3679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 216.42.131.0-216.42.132.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a6:cb:3b:80:d6:4c:4a:13:4c:a4:96:0d:87:d9:45:69:9e: d1:73:69:ed:75:84:0e:17:12:f9:73:e5:83:a6:b8:d6:68:24: 61:bf:d0:b6:55:35:a0:5d:b9:7b:6e:f5:42:72:5c:d1:1a:06: 6e:0d:ed:40:9e:22:4c:b5:65:ea:ce:d8:f4:fe:ba:04:06:ac: d8:a4:c0:9c:90:4d:11:58:b9:83:07:19:13:c8:5c:0e:f2:f8: 0c:65:e4:b1:16:6b:2c:61:41:12:e2:6b:b8:85:cc:5e:05:8d: d7:b4:c4:17:24:c9:07:04:5e:bf:87:c0:31:64:e1:35:ac:71: ee:fa:36:3e:cc:b7:e0:de:f3:58:f7:12:98:c0:41:2d:d2:d7: a9:d6:f0:23:ee:10:28:ab:a8:08:1e:54:dc:14:be:6a:0a:ae: 15:e8:5f:27:71:80:ad:a0:e4:a6:be:1c:8e:89:51:a2:07:0f: 5d:21:81:2e:17:4a:78:e4:39:cc:28:69:c4:91:1b:c5:b5:1b: e2:be:de:e2:e6:b4:d0:a6:0c:ee:5a:35:6c:25:03:11:fe:34: 77:d3:e3:55:2e:f3:bd:31:ff:4c:d3:b8:75:d2:49:db:07:7c: 29:72:be:41:99:a4:00:ff:13:57:e4:46:7e:d6:9d:93:3b:94: 50:8c:5c:83 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7kIz+e4ptRN3xhgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk YjE1YjFjZDYtZmVlZi00MWQ3LTkzYjktMWJlMzM1NGY2OWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9LVJ29seWCMU6AtK3yghca8YhqL+B+mnp76 chNjIFWFDRfaT3EqXVFAZB/q1Tip7n6kbmBVNEfZCP1aA60Lx58QU3irHMapcjNj LFGQp6p/a3isShSB1zaF95MQPNLI49aCf396H0e5LKuBlildFO8EGI4E/2s7uOcW o7XPidJuID1Fr0cvymqY8R6BwAjjLc0hZ35hBdwWYuNaLvEOi02x2AcBFoaYl8TK Jp4T/MHnzCQsuxWssk1YAYt9Anz+ca3Ul/pqJ7DrA+YgxY4dR3HE8BCBRhajGDgM BtGG638bbnPBLo1tquJQzwyh6vSowlMowpT6C6IxgVvJIMiN4QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJuJR58DqDZc4lwcI0opkzFPYTseMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWU5NDZiMDQtNWZhOC0z OTFhLWFlMGItMWU1OTM3N2EzNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYKoMD BADYKoQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAFqbLO4DWTEoTTKSWDYfZRWme0XNp7XWEDhcS+XPlg6a4 1mgkYb/QtlU1oF25e271QnJc0RoGbg3tQJ4iTLVl6s7Y9P66BAas2KTAnJBNEVi5 gwcZE8hcDvL4DGXksRZrLGFBEuJruIXMXgWN17TEFyTJBwRev4fAMWThNaxx7vo2 Psy34N7zWPcSmMBBLdLXqdbwI+4QKKuoCB5U3BS+agquFehfJ3GAraDkpr4cjolR ogcPXSGBLhdKeOQ5zChpxJEbxbUb4r7e4ua00KYM7lo1bCUDEf40d9PjVS7zvTH/ TNO4ddJJ2wd8KXK+QZmkAP8TV+RGftadkzuUUIxcgw== -----END CERTIFICATE-----Generated at Thu Sep 17 16:05:11 2026 by rpki-client