$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b25b33b7-ad2d-32ef-ae01-94889d6a6f16.roa File: b25b33b7-ad2d-32ef-ae01-94889d6a6f16.roa (raw, json) Hash identifier: xZCARL4IWHo8rp4uztUswOkrNbJlzf1FOGokWG113pQ= Subject key identifier: 51:9F:C1:B1:83:AF:41:2A:29:3F:27:F9:E2:F3:0C:B9:9C:3D:BA:A9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE423409355A5A76AC6E1A900 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b25b33b7-ad2d-32ef-ae01-94889d6a6f16.roa Signing time: Wed 19 Aug 2026 18:03:51 +0000 ROA not before: Wed 19 Aug 2026 18:03:51 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 207.196.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:40:93:55:a5:a7:6a:c6:e1:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:51 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=f557a4c7-fe82-4529-a5d6-f842d1e6c739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:56:ea:4e:bb:bf:48:1b:74:51:0c:fe:dd: 50:ba:00:e4:29:11:24:2c:d3:3a:d5:d3:7c:6c:10: 59:5b:df:3d:08:33:bd:5e:b9:5a:ff:c6:58:58:59: 77:ad:6a:ac:eb:b6:61:3a:71:48:b7:3e:1f:e9:1b: fa:50:6c:b2:51:70:49:65:ac:01:5c:73:d2:9c:c5: 2c:19:9f:de:86:f2:a9:c3:ae:b7:b9:49:af:1e:4b: 9c:6e:31:62:44:9b:b3:72:bc:48:f1:48:7d:0b:d9: ac:c0:5b:07:c1:e4:37:40:34:e5:48:a7:61:e3:a8: 0b:6d:95:54:91:de:1d:2f:59:8a:95:35:a7:91:14: 90:fa:8d:30:11:55:09:e8:c0:8e:0d:1e:d1:95:e1: 8b:4b:6e:d3:51:d6:cf:1b:b6:43:8d:55:ec:5c:b8: 07:8b:a2:69:32:b6:c8:26:45:34:7f:70:e0:c2:a3: 76:08:96:91:cb:69:0d:00:4a:31:b2:cd:9b:db:29: 6f:10:3b:7b:fd:18:f1:9e:ee:b3:a5:0e:a2:ca:fa: 6a:37:77:46:b3:98:86:91:4b:e5:65:af:a7:19:24: e6:79:99:fc:b7:b6:e5:c9:43:48:dd:2b:6b:28:74: 11:4b:9a:90:94:36:e5:ff:88:30:8e:f8:e5:f6:e4: 95:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9F:C1:B1:83:AF:41:2A:29:3F:27:F9:E2:F3:0C:B9:9C:3D:BA:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b25b33b7-ad2d-32ef-ae01-94889d6a6f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.196.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:ad:83:c6:86:e5:3a:46:77:ea:6d:c5:fa:07:81:14:df:c6: b1:51:88:9c:5e:f4:21:8f:34:f5:51:37:99:8a:88:e0:29:6b: 9b:39:a6:da:c7:6b:c0:93:96:c0:c6:64:d2:f2:e7:db:f7:7b: f5:65:18:17:4e:7d:67:5a:2a:04:3d:a3:8b:87:87:c7:e3:1f: d5:9a:01:46:37:0d:4e:71:dd:79:6b:e9:11:a4:40:5f:54:c2: 82:3d:6c:f9:b6:49:1c:df:1d:16:ca:aa:33:36:b7:95:ad:ab: 77:29:d4:46:c8:85:69:e7:85:86:38:bf:9b:b4:6e:b6:16:46: f1:33:be:cf:a0:47:c9:8f:4e:7a:ad:25:f4:72:bb:68:b0:83: f7:40:ad:3d:2d:a1:61:05:4c:29:82:7d:39:51:8a:4a:a5:70: a8:51:2f:e0:29:75:df:64:eb:62:b0:7d:af:cf:31:5f:73:9f: 7a:20:12:a1:aa:d7:f4:6a:e3:61:6b:77:dc:34:3c:92:5a:a0: 3a:86:d6:f6:c0:f4:23:41:d1:86:ea:b0:08:0d:96:6d:93:35: cb:cb:e0:d8:0b:e1:d0:20:9b:60:59:7c:64:36:5f:a5:06:c0: 4d:0f:60:83:5f:17:0c:86:66:f4:4a:ac:3b:4e:6b:91:b0:08: 08:fb:bc:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0CTVaWnasbhqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ZjU1N2E0YzctZmU4Mi00NTI5LWE1ZDYtZjg0MmQxZTZjNzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL9W6k67v0gbdFEM/t1QugDkKREkLNM61dN8 bBBZW989CDO9Xrla/8ZYWFl3rWqs67ZhOnFItz4f6Rv6UGyyUXBJZawBXHPSnMUs GZ/ehvKpw663uUmvHkucbjFiRJuzcrxI8Uh9C9mswFsHweQ3QDTlSKdh46gLbZVU kd4dL1mKlTWnkRSQ+o0wEVUJ6MCODR7RleGLS27TUdbPG7ZDjVXsXLgHi6JpMrbI JkU0f3DgwqN2CJaRy2kNAEoxss2b2ylvEDt7/Rjxnu6zpQ6iyvpqN3dGs5iGkUvl Za+nGSTmeZn8t7blyUNI3StrKHQRS5qQlDbl/4gwjvjl9uSV8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGfwbGDr0EqKT8n+eLzDLmcPbqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjI1YjMzYjctYWQyZC0z MmVmLWFlMDEtOTQ4ODlkNmE2ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHz8QAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2tg8aG5TpGd+ptxfoHgRTfxrFRiJxe9CGPNPVRN5mKiOApa5s5ptrH a8CTlsDGZNLy59v3e/VlGBdOfWdaKgQ9o4uHh8fjH9WaAUY3DU5x3Xlr6RGkQF9U woI9bPm2SRzfHRbKqjM2t5Wtq3cp1EbIhWnnhYY4v5u0brYWRvEzvs+gR8mPTnqt JfRyu2iwg/dArT0toWEFTCmCfTlRikqlcKhRL+Apdd9k62Kwfa/PMV9zn3ogEqGq 1/Rq42Frd9w0PJJaoDqG1vbA9CNB0YbqsAgNlm2TNcvL4NgL4dAgm2BZfGQ2X6UG wE0PYINfFwyGZvRKrDtOa5GwCAj7vFA= -----END CERTIFICATE-----Generated at Thu Sep 17 19:19:59 2026 by rpki-client