$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b0d0237d-f4b9-32ad-beb9-80096b13efa9.roa File: b0d0237d-f4b9-32ad-beb9-80096b13efa9.roa (raw, json) Hash identifier: 6f7mrtxp7DLZ9Bzh/5CR/iSoXSe/4cGlVPbx39Evj3U= Subject key identifier: B9:31:35:6A:C8:5F:17:2C:38:13:63:C6:BC:1D:92:6A:9F:64:66:44 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233BB36AC829A4BBDAA280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b0d0237d-f4b9-32ad-beb9-80096b13efa9.roa Signing time: Wed 19 Aug 2026 18:03:48 +0000 ROA not before: Wed 19 Aug 2026 18:03:48 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 35916 IP address blocks: 140.174.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3b:b3:6a:c8:29:a4:bb:da:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:48 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=0ae2a0e5-03c9-4ccd-89a4-21c7abaa3ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ba:df:7a:cc:db:a2:36:ec:ff:a1:34:f6:8e: 17:b5:92:ea:99:94:74:44:ec:26:07:71:da:5b:a3: 0b:3c:b7:a8:ee:ac:4b:72:19:ed:0b:53:e6:5e:14: 54:b0:d3:d6:1e:22:67:ac:37:fc:f8:9a:4f:64:86: ef:0f:05:37:ac:42:8a:09:41:8a:68:f6:da:31:fd: 89:97:92:71:e4:f6:9b:8d:13:fe:fd:57:cb:8d:54: ba:52:f3:1b:a0:87:f7:23:97:bd:59:a6:00:f8:c3: 07:87:9a:6b:e6:e6:19:97:71:88:79:33:6d:b3:f4: 21:5c:c8:b4:dd:e3:35:3a:a5:79:84:f3:7b:2f:a4: 07:0c:c2:fd:14:37:9e:99:e3:54:69:c0:c5:59:e9: d1:eb:36:9c:22:50:87:dd:7a:3c:f5:cd:23:6f:30: 56:ef:e3:7b:22:36:9b:8e:5c:82:64:5e:5f:cc:bb: 02:1c:cd:9b:4c:b8:be:70:ba:2c:2c:c3:10:06:a6: 0f:c6:8b:c4:5f:2b:4a:8d:b1:c2:c5:e5:b2:2c:7d: cc:b3:cf:3c:90:4d:74:9f:e9:38:f4:99:c0:52:37: 03:95:65:66:b3:f4:bc:71:09:26:fc:e3:69:e5:77: d8:ed:54:2f:d5:c9:7e:38:80:93:a7:3c:95:6d:70: 8c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:31:35:6A:C8:5F:17:2C:38:13:63:C6:BC:1D:92:6A:9F:64:66:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b0d0237d-f4b9-32ad-beb9-80096b13efa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:34:85:03:db:28:46:f0:1c:08:eb:5f:ad:7b:77:fa:28:b0: 4f:92:cd:15:cb:89:49:65:b3:d1:5b:2c:c3:06:92:3c:73:58: e9:d5:84:a9:81:44:20:b1:41:8e:8f:0a:cc:61:1a:bf:72:5e: 0c:5e:a8:e9:d8:ad:1b:18:d1:83:26:8c:21:2b:9a:f9:c2:00: b6:9e:a9:b7:cb:18:60:e7:46:45:80:70:ad:09:cb:52:31:f8: 91:4b:0f:93:27:0a:f7:16:45:38:3e:5b:c2:14:78:de:66:19: 70:e1:b8:54:8e:4f:91:f2:bb:de:fb:e6:b5:46:a9:73:e1:17: 6c:42:87:70:62:9b:dc:76:4a:01:f3:01:29:54:f4:2e:e4:ff: 2b:60:96:fd:26:e4:0d:bb:0e:37:9e:ff:3a:22:60:9f:5f:8e: 76:be:61:16:79:f3:75:8c:b0:cf:3e:14:64:73:57:5b:96:4c: 14:20:2c:0e:f5:fb:17:a6:77:80:b9:78:48:8b:d6:f9:af:61: e5:90:02:35:91:66:08:20:a5:46:8f:62:94:ce:73:fc:bb:aa: 81:ac:77:00:10:23:c6:b1:b1:34:74:f9:b5:cd:01:19:22:58: 28:72:42:ba:87:62:e7:e1:13:96:d1:c5:68:92:40:10:04:87: 2f:bc:f3:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIzuzasgppLvaooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk MGFlMmEwZTUtMDNjOS00Y2NkLTg5YTQtMjFjN2FiYWEzZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rrfeszbojbs/6E09o4XtZLqmZR0ROwmB3Ha W6MLPLeo7qxLchntC1PmXhRUsNPWHiJnrDf8+JpPZIbvDwU3rEKKCUGKaPbaMf2J l5Jx5PabjRP+/VfLjVS6UvMboIf3I5e9WaYA+MMHh5pr5uYZl3GIeTNts/QhXMi0 3eM1OqV5hPN7L6QHDML9FDeemeNUacDFWenR6zacIlCH3Xo89c0jbzBW7+N7Ijab jlyCZF5fzLsCHM2bTLi+cLosLMMQBqYPxovEXytKjbHCxeWyLH3Ms888kE10n+k4 9JnAUjcDlWVms/S8cQkm/ONp5XfY7VQv1cl+OICTpzyVbXCMywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkxNWrIXxcsOBNjxrwdkmqfZGZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjBkMDIzN2QtZjRiOS0z MmFkLWJlYjktODAwOTZiMTNlZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjK4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI0hQPbKEbwHAjrX617d/oosE+SzRXLiUlls9FbLMMGkjxzWOnVhKmB RCCxQY6PCsxhGr9yXgxeqOnYrRsY0YMmjCErmvnCALaeqbfLGGDnRkWAcK0Jy1Ix +JFLD5MnCvcWRTg+W8IUeN5mGXDhuFSOT5Hyu9775rVGqXPhF2xCh3Bim9x2SgHz ASlU9C7k/ytglv0m5A27Djee/zoiYJ9fjna+YRZ583WMsM8+FGRzV1uWTBQgLA71 +xemd4C5eEiL1vmvYeWQAjWRZgggpUaPYpTOc/y7qoGsdwAQI8axsTR0+bXNARki WChyQrqHYufhE5bRxWiSQBAEhy+88/A= -----END CERTIFICATE-----Generated at Thu Sep 17 16:05:37 2026 by rpki-client