$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5373736-66b4-3bf9-ae7e-e0120507f188.roa File: b5373736-66b4-3bf9-ae7e-e0120507f188.roa (raw, json) Hash identifier: q7SfpUb88BGxhyQyh+6nKuSbO0dDMwlrGjq2x6r2nDU= Subject key identifier: 1E:38:31:1B:D2:13:93:90:29:56:B4:65:72:9E:45:AA:24:29:5B:C1 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE423232F8481998F1671F240 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5373736-66b4-3bf9-ae7e-e0120507f188.roa Signing time: Wed 19 Aug 2026 18:03:37 +0000 ROA not before: Wed 19 Aug 2026 18:03:37 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 198.17.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:23:2f:84:81:99:8f:16:71:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:37 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=bbdbea23-9957-4872-8a19-3a6d269676d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:dc:57:0a:43:64:dd:2c:6c:6f:4f:6a:40: 92:6b:53:a2:64:01:8b:c9:f4:b1:27:8c:17:24:8a: fa:0b:b5:bf:b9:87:9f:9d:e1:06:c0:ad:93:64:5a: b1:70:f6:a5:30:74:2a:6a:e7:97:38:60:24:a7:97: 4d:94:8c:18:92:bd:d7:f5:41:f4:47:12:f6:09:e1: 9b:c0:96:ce:0f:88:df:36:bd:e5:63:4a:e6:7f:57: dc:96:25:22:20:30:6f:2a:12:48:a5:ae:70:5d:5a: 58:f7:41:07:b3:bc:c9:48:a0:a4:db:5a:ff:e2:3e: 5d:01:39:2f:3e:78:0a:ae:19:ed:88:87:a9:fb:0d: ae:03:8d:1d:2d:db:af:41:56:db:d9:70:b4:ce:8b: 4b:82:fc:fa:cc:49:da:bd:da:41:0c:8e:7f:3e:8b: 75:64:3c:80:24:c4:12:8c:cf:52:a9:fa:f3:0e:c4: 83:e4:4a:cc:fb:fd:6b:76:64:5d:0d:06:0a:d2:e4: 38:35:87:08:c7:10:c2:d1:d2:63:3a:c5:40:af:34: 86:e3:40:6e:01:37:a4:29:26:a9:9b:59:76:72:9c: 35:2d:5a:e9:1d:59:32:e4:40:c7:3c:c9:f6:f1:1f: 15:a2:7a:57:27:36:cd:2f:38:3e:6f:50:cb:0c:ac: 3d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:38:31:1B:D2:13:93:90:29:56:B4:65:72:9E:45:AA:24:29:5B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5373736-66b4-3bf9-ae7e-e0120507f188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.17.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:af:87:29:62:3f:28:3a:df:36:19:12:ec:38:da:35:47:7e: d9:f4:8a:26:7d:a3:11:a8:50:fd:3b:cd:b0:2a:4b:0a:de:3f: 0e:1f:ec:40:e6:f9:7b:10:7a:a7:62:53:fa:02:cf:05:08:91: 26:77:2f:ce:1b:7d:43:b4:85:f9:02:5a:45:02:58:9c:49:51: 3d:56:08:dc:35:a6:a0:3e:bf:90:fe:3e:10:24:11:98:a1:ca: f0:ce:b9:77:7c:34:d5:2d:5d:b7:7b:cf:3a:86:cf:f4:1e:54: c6:36:94:a3:5d:0e:92:4a:d0:72:cb:20:2f:18:1d:71:af:a2: d3:c4:09:a2:96:03:0a:4a:ff:0f:5d:5b:39:57:f6:9c:08:3a: 96:90:ad:b3:c3:cc:70:76:17:a3:35:0e:32:d9:a8:8a:4b:a0: f1:cc:30:5b:88:b5:9c:7f:4e:b6:37:d6:a3:32:fc:fe:0a:46: a2:f3:f6:92:5d:ce:8b:53:7d:cd:12:e3:59:f3:5a:83:95:f9: 64:0e:97:2f:35:a6:e5:e7:ae:e6:0a:b2:1c:7c:e9:46:a5:a1: ad:b6:dc:28:bd:d7:b7:39:5a:43:b5:85:49:28:14:30:4c:57: 7d:89:89:17:80:4b:5f:c8:45:c8:47:bb:56:7c:15:ea:fa:8f: 9b:3c:85:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyMvhIGZjxZx8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDMzN1oXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk YmJkYmVhMjMtOTk1Ny00ODcyLThhMTktM2E2ZDI2OTY3NmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUDcVwpDZN0sbG9PakCSa1OiZAGLyfSxJ4wX JIr6C7W/uYefneEGwK2TZFqxcPalMHQqaueXOGAkp5dNlIwYkr3X9UH0RxL2CeGb wJbOD4jfNr3lY0rmf1fcliUiIDBvKhJIpa5wXVpY90EHs7zJSKCk21r/4j5dATkv PngKrhntiIep+w2uA40dLduvQVbb2XC0zotLgvz6zEnavdpBDI5/Pot1ZDyAJMQS jM9SqfrzDsSD5ErM+/1rdmRdDQYK0uQ4NYcIxxDC0dJjOsVArzSG40BuATekKSap m1l2cpw1LVrpHVky5EDHPMn28R8VonpXJzbNLzg+b1DLDKw9kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB44MRvSE5OQKVa0ZXKeRaokKVvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjUzNzM3MzYtNjZiNC0z YmY5LWFlN2UtZTAxMjA1MDdmMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIivhyliPyg63zYZEuw42jVHftn0iiZ9oxGoUP07zbAqSwrePw4f7EDm +XsQeqdiU/oCzwUIkSZ3L84bfUO0hfkCWkUCWJxJUT1WCNw1pqA+v5D+PhAkEZih yvDOuXd8NNUtXbd7zzqGz/QeVMY2lKNdDpJK0HLLIC8YHXGvotPECaKWAwpK/w9d WzlX9pwIOpaQrbPDzHB2F6M1DjLZqIpLoPHMMFuItZx/TrY31qMy/P4KRqLz9pJd zotTfc0S41nzWoOV+WQOly81puXnruYKshx86Ualoa223Ci917c5WkO1hUkoFDBM V32JiReAS1/IRchHu1Z8Fer6j5s8hTo= -----END CERTIFICATE-----Generated at Thu Sep 17 15:13:51 2026 by rpki-client