$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b585cae0-b843-3f48-b75b-8a132f942310.roa File: b585cae0-b843-3f48-b75b-8a132f942310.roa (raw, json) Hash identifier: 1fmvcI8sVKJ+oMpgSN8ZQ9DN2er+ehWmhMwBXQoTjGg= Subject key identifier: 6E:B6:16:A1:24:A3:72:82:22:72:BE:C6:18:36:F9:D7:8E:78:07:92 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233F2710B69787CB8E4A80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b585cae0-b843-3f48-b75b-8a132f942310.roa Signing time: Wed 19 Aug 2026 18:03:50 +0000 ROA not before: Wed 19 Aug 2026 18:03:50 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 36035 IP address blocks: 204.170.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3f:27:10:b6:97:87:cb:8e:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:50 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=34844e56-62f2-4d56-98a6-d2ce1a9bec2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:33:3e:66:18:51:9f:6b:4f:9e:01:f6:23: c4:82:14:4e:76:3e:ae:fc:86:73:3c:97:4c:35:e5: 44:9c:96:a3:48:64:d2:46:d8:0f:dd:1d:d2:04:e5: cf:66:e0:2b:be:e6:63:17:6f:75:ee:eb:b4:9b:f4: 76:77:a7:67:b0:a2:3b:3a:23:d0:31:7b:04:e8:c0: c6:97:20:5a:3d:fa:ab:71:87:c7:40:ee:cb:53:82: 47:f7:52:d1:45:8b:02:88:ec:c2:1c:40:90:f9:37: 02:65:c2:e9:26:7e:fb:8a:e8:9f:b0:68:4b:89:fb: 5b:a5:07:ef:ad:60:e8:37:1f:a6:cd:ef:a9:f0:71: dc:2d:7c:a0:74:b1:99:98:b1:9e:30:cf:8a:f7:67: 55:4e:44:c2:50:23:53:1a:9b:d7:1e:1b:52:c8:28: 63:30:af:ab:83:8c:f4:7e:a1:8c:ef:6d:59:39:80: b2:ff:58:f2:71:8a:73:8e:e0:51:2d:a9:2c:48:67: 7c:9d:11:39:68:46:f8:84:3e:fd:ee:8f:9f:0e:61: c5:2d:91:7a:d8:3a:03:ac:29:31:f7:60:d7:02:3d: 1d:08:a6:5f:04:46:76:67:60:f5:20:8d:c9:26:3c: 83:db:76:13:c8:55:3a:91:b1:37:88:3d:48:33:b1: 29:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B6:16:A1:24:A3:72:82:22:72:BE:C6:18:36:F9:D7:8E:78:07:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b585cae0-b843-3f48-b75b-8a132f942310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.170.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:5a:95:58:c0:95:07:fa:70:7c:f6:b5:50:b2:2f:1c:ea:29: 08:6d:30:3a:96:69:07:e9:c6:91:7b:05:49:38:3d:11:dd:b1: b2:50:dc:5a:5d:81:76:d7:7a:77:e4:80:78:06:5a:a4:5a:8b: 1a:7a:54:c9:45:46:01:ca:d1:95:47:8c:f8:ae:ce:e4:c9:9f: 50:9f:3c:75:69:82:40:3c:0e:ff:a3:eb:92:41:d5:68:8d:28: bd:c5:27:53:38:c7:fc:61:66:04:10:10:26:cd:e0:c6:6a:56: 5a:05:6d:0f:f7:cf:57:40:e6:86:fe:20:5c:12:db:70:98:d3: 1a:ca:40:52:20:f2:8b:55:68:2b:51:f4:c0:2f:ca:ca:45:9c: b4:0d:2c:2a:ec:1c:1c:62:d1:98:52:4a:69:86:f7:1b:a0:ea: b9:83:1b:15:4e:41:b5:20:c6:a5:69:c3:d1:51:3c:59:4d:6e: 45:bd:ab:98:ac:b5:45:7a:5d:b4:2c:69:78:2e:aa:d9:95:0d: f1:8a:f9:58:5f:63:7a:a5:2b:27:04:44:03:ed:c1:9c:d6:fb: 8e:76:b8:9e:c2:ad:20:ee:74:4d:63:0a:db:55:0a:bc:e9:37: 46:3f:e4:ca:8b:4f:9e:c0:0e:44:9f:5f:a6:8c:70:79:38:88: ba:04:9b:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIz8nELaXh8uOSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk MzQ4NDRlNTYtNjJmMi00ZDU2LTk4YTYtZDJjZTFhOWJlYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHozPmYYUZ9rT54B9iPEghROdj6u/IZzPJdM NeVEnJajSGTSRtgP3R3SBOXPZuArvuZjF2917uu0m/R2d6dnsKI7OiPQMXsE6MDG lyBaPfqrcYfHQO7LU4JH91LRRYsCiOzCHECQ+TcCZcLpJn77iuifsGhLiftbpQfv rWDoNx+mze+p8HHcLXygdLGZmLGeMM+K92dVTkTCUCNTGpvXHhtSyChjMK+rg4z0 fqGM721ZOYCy/1jycYpzjuBRLaksSGd8nRE5aEb4hD797o+fDmHFLZF62DoDrCkx 92DXAj0dCKZfBEZ2Z2D1II3JJjyD23YTyFU6kbE3iD1IM7EpcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG62FqEko3KCInK+xhg2+deOeAeSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjU4NWNhZTAtYjg0My0z ZjQ4LWI3NWItOGExMzJmOTQyMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzKrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFValVjAlQf6cHz2tVCyLxzqKQhtMDqWaQfpxpF7BUk4PRHdsbJQ3Fpd gXbXenfkgHgGWqRaixp6VMlFRgHK0ZVHjPiuzuTJn1CfPHVpgkA8Dv+j65JB1WiN KL3FJ1M4x/xhZgQQECbN4MZqVloFbQ/3z1dA5ob+IFwS23CY0xrKQFIg8otVaCtR 9MAvyspFnLQNLCrsHBxi0ZhSSmmG9xug6rmDGxVOQbUgxqVpw9FRPFlNbkW9q5is tUV6XbQsaXguqtmVDfGK+VhfY3qlKycERAPtwZzW+452uJ7CrSDudE1jCttVCrzp N0Y/5MqLT57ADkSfX6aMcHk4iLoEmxo= -----END CERTIFICATE-----Generated at Thu Sep 17 21:33:19 2026 by rpki-client