$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b57a21fc-0fea-30f5-8228-5f17bf28860c.roa File: b57a21fc-0fea-30f5-8228-5f17bf28860c.roa (raw, json) Hash identifier: L7yUnx1MC/cpFlZGUheYtFsIjkezjJVMA7Sx0m0tEpI= Subject key identifier: 4F:C9:67:EA:AB:D8:7F:4A:78:F7:F1:08:3F:26:90:FD:E7:C4:E1:F8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4234253AFBE1503FC34CA80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b57a21fc-0fea-30f5-8228-5f17bf28860c.roa Signing time: Wed 19 Aug 2026 18:03:52 +0000 ROA not before: Wed 19 Aug 2026 18:03:52 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 174 IP address blocks: 209.189.35.64/28 maxlen: 28 209.189.35.144/28 maxlen: 28 209.189.85.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:42:53:af:be:15:03:fc:34:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:52 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=2e5abe9b-3579-45e2-8e0c-c9d0a25b17f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:1d:aa:e3:a0:7d:53:6b:30:49:ca:45:c9: db:e5:c7:06:93:e3:50:00:8f:17:04:b4:d9:1c:9d: 7b:40:5a:74:51:10:31:bd:05:4e:17:6e:9a:08:fb: c1:23:7b:0a:10:54:47:1e:0b:3c:37:a2:4c:83:e7: b9:5f:f9:cd:70:6f:f6:c7:51:ac:21:a9:40:da:71: c6:fd:71:e9:4f:8e:57:34:cb:fe:80:eb:ad:19:b1: a9:76:09:93:d7:a9:1b:73:de:77:48:b3:6b:a0:6a: 80:2e:9a:59:dc:fa:45:24:98:d5:5b:f5:bd:7a:1b: 94:bc:f0:c7:66:06:d9:0b:74:ca:e4:63:89:72:dd: cb:ff:65:9c:24:8e:9f:ed:28:37:dc:5e:8f:c7:02: 39:31:3b:ab:2b:4d:ed:aa:a1:be:89:57:11:fb:47: 88:75:c9:a5:94:3c:34:e6:24:85:e8:0b:e6:e7:83: 4e:36:9e:91:86:19:b7:3b:2f:85:6e:6e:cc:9f:6c: 8a:b1:fa:4f:bd:d4:28:12:2f:0c:fa:1d:25:eb:0e: a1:2d:94:e3:98:bb:d3:88:a8:e0:b8:b6:d2:bc:a2: 60:d8:ff:47:39:cc:3c:1b:85:66:7f:d7:1e:28:5f: 79:9a:f4:36:af:0b:2b:8d:dc:07:00:01:41:68:09: d1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C9:67:EA:AB:D8:7F:4A:78:F7:F1:08:3F:26:90:FD:E7:C4:E1:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b57a21fc-0fea-30f5-8228-5f17bf28860c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 209.189.35.64/28 209.189.35.144/28 209.189.85.64/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:52:8c:b5:12:15:a3:2b:03:f4:1c:f6:a2:91:a8:5f:54:e5: 3a:02:53:7d:b5:b9:3a:72:e0:dc:ae:2c:34:0a:7b:cf:cd:2d: a4:5d:3b:98:3d:48:c0:86:f8:4f:f2:6c:71:71:3d:a3:ca:c8: 7d:8d:dc:58:54:2e:d0:b1:c8:33:d7:db:4f:c6:4f:0e:3c:fb: c5:f8:24:e8:7e:7f:7f:5e:2e:a4:00:18:c8:c0:98:29:bf:aa: bc:17:17:cb:5e:5e:bc:0b:cc:a5:48:d8:45:66:e5:22:46:8e: de:0a:54:e6:cb:59:6a:66:b0:a2:4b:19:9f:c8:f0:b4:ae:76: 7f:f2:6f:fc:74:63:21:36:29:92:51:4b:1c:5f:fb:41:4c:48: 41:b9:a3:68:7a:39:cb:75:5f:e9:0f:82:c0:68:b6:d5:41:e1: af:dd:f6:b1:14:19:7d:d6:92:12:c5:ee:31:27:f8:59:79:60: 63:6f:bd:55:a8:41:f7:0c:03:7b:f0:34:6f:18:b3:0f:da:00: a7:a9:9e:80:51:71:e9:e1:bc:1c:7d:53:7b:35:52:8f:55:ae: e4:98:d2:dd:c4:0f:6b:7b:f9:3a:4c:ce:b6:b4:6f:33:0f:50: 4b:ea:7c:b1:dc:73:a7:6c:1d:5d:1e:d2:6c:c1:43:48:ad:1a: c3:02:a3:56 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE7kI0JTr74VA/w0yoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MloXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk MmU1YWJlOWItMzU3OS00NWUyLThlMGMtYzlkMGEyNWIxN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa4dquOgfVNrMEnKRcnb5ccGk+NQAI8XBLTZ HJ17QFp0URAxvQVOF26aCPvBI3sKEFRHHgs8N6JMg+e5X/nNcG/2x1GsIalA2nHG /XHpT45XNMv+gOutGbGpdgmT16kbc953SLNroGqALppZ3PpFJJjVW/W9ehuUvPDH ZgbZC3TK5GOJct3L/2WcJI6f7Sg33F6PxwI5MTurK03tqqG+iVcR+0eIdcmllDw0 5iSF6Avm54NONp6Rhhm3Oy+Fbm7Mn2yKsfpPvdQoEi8M+h0l6w6hLZTjmLvTiKjg uLbSvKJg2P9HOcw8G4Vmf9ceKF95mvQ2rwsrjdwHAAFBaAnRZQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFE/JZ+qr2H9KePfxCD8mkP3nxOH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjU3YTIxZmMtMGZlYS0z MGY1LTgyMjgtNWYxN2JmMjg4NjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAATAVAwUE0b0jQAMF BNG9I5ADBQbRvVVAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAF1SjLUSFaMrA/Qc9qKRqF9U5ToCU321uTpy 4NyuLDQKe8/NLaRdO5g9SMCG+E/ybHFxPaPKyH2N3FhULtCxyDPX20/GTw48+8X4 JOh+f39eLqQAGMjAmCm/qrwXF8teXrwLzKVI2EVm5SJGjt4KVObLWWpmsKJLGZ/I 8LSudn/yb/x0YyE2KZJRSxxf+0FMSEG5o2h6Oct1X+kPgsBottVB4a/d9rEUGX3W khLF7jEn+Fl5YGNvvVWoQfcMA3vwNG8Ysw/aAKepnoBRcenhvBx9U3s1Uo9VruSY 0t3ED2t7+TpMzra0bzMPUEvqfLHcc6dsHV0e0mzBQ0itGsMCo1Y= -----END CERTIFICATE-----Generated at Thu Sep 3 07:13:52 2026 by rpki-client