$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5bf8f2a-f5b8-30c7-853d-3696e68c3e3b.roa File: b5bf8f2a-f5b8-30c7-853d-3696e68c3e3b.roa (raw, json) Hash identifier: WtRkKAzsrC2KcaL9HFHV1fE08JXTjZjjW2WuY7ySjxM= Subject key identifier: 0B:8F:82:BC:B7:3D:B0:DE:5E:9B:9B:3A:3F:32:A1:69:E0:DA:C0:32 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DAC4572EA84B3F5B11293B700 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5bf8f2a-f5b8-30c7-853d-3696e68c3e3b.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 7843 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:72:ea:84:b3:f5:b1:12:93:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=d8bcc794-dc89-4ded-98af-8502411020a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:17:e7:7d:4f:89:1b:a4:c3:83:07:b7:82: ed:ce:04:52:4a:e4:e2:d6:ed:10:92:c4:cf:10:cc: 5e:43:1d:66:c5:37:01:7a:f6:5d:a4:94:59:6d:b3: 17:c0:3f:53:75:60:cb:0d:1d:57:e4:12:a7:76:7f: cf:4f:54:fc:9e:b4:ee:06:ac:5c:57:6a:1f:67:b4: 52:86:cf:0f:e3:fa:f0:a7:f9:29:b4:de:5f:35:20: d0:d2:ef:27:fd:cc:bf:fe:ee:8b:11:b8:30:42:75: 40:0e:ff:f5:3f:9f:47:61:44:b0:c6:b8:d1:c1:bd: ce:22:d1:c2:e2:b0:6f:89:7e:fa:da:ec:f1:91:11: 0b:50:7c:f1:89:d2:21:f5:41:99:88:50:fa:bf:28: 60:a4:d1:03:a0:f2:f7:08:30:81:8c:e9:cf:c4:7d: 31:56:d7:17:bf:aa:c8:66:fa:e1:07:a4:c4:36:1f: 2a:09:fe:89:e5:16:d9:c8:0b:aa:54:96:c1:30:02: 88:13:e7:85:56:f5:ed:82:3d:b4:3a:f0:7f:70:44: 39:60:2a:b4:82:f4:db:4e:29:bd:9e:97:28:17:61: f2:45:7c:b8:e0:22:5e:13:29:48:d4:df:1e:0e:c4: c4:65:7a:9a:45:71:0b:f4:2e:89:14:da:55:92:dc: 97:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8F:82:BC:B7:3D:B0:DE:5E:9B:9B:3A:3F:32:A1:69:E0:DA:C0:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5bf8f2a-f5b8-30c7-853d-3696e68c3e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f3:c0:9c:a5:1b:34:7b:93:e1:1f:ef:c0:29:e5:63:48:84: 9b:86:af:78:62:1b:da:71:ac:61:61:de:60:a8:25:38:03:c7: 21:0c:34:63:24:0e:f8:5e:64:72:16:9a:21:51:98:b9:30:e8: ad:ad:72:6d:4c:1e:42:95:b6:05:d8:63:44:f0:d1:b1:17:31: 44:8d:c5:6a:37:0b:9f:7c:9b:4c:61:e5:12:05:dd:20:85:c3: f7:78:14:83:fe:3b:3a:2c:b6:fe:5c:2d:3b:eb:6a:bb:c1:d0: e6:1e:07:33:5e:63:54:d6:0e:a3:a1:fc:cd:79:14:bf:5e:b4: 7d:dc:1a:43:5d:28:15:df:21:1b:63:9e:f8:d9:ca:ec:c7:8c: 33:ae:66:93:71:56:5b:9c:d7:48:65:ac:e9:a1:33:b9:d6:95: 2d:f9:86:64:32:2f:43:63:00:06:e2:84:d1:b4:70:53:4c:12: 2f:e2:60:b1:a3:f3:1d:b7:1d:6f:7c:cc:c3:73:fc:cb:cd:d2: ca:90:49:d9:3d:7b:bb:40:d8:13:6d:d9:51:2a:52:23:6e:b9: 6d:0f:07:7b:6e:b5:37:ef:70:28:ba:e7:5b:27:6c:6f:b4:a1: c7:a6:06:c6:9c:9b:f7:74:0f:13:76:cd:75:b3:bb:dd:86:e7: 0a:bc:76:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXLqhLP1sRKTtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZDhiY2M3OTQtZGM4OS00ZGVkLTk4YWYtODUwMjQxMTAyMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6IX531PiRukw4MHt4LtzgRSSuTi1u0QksTP EMxeQx1mxTcBevZdpJRZbbMXwD9TdWDLDR1X5BKndn/PT1T8nrTuBqxcV2ofZ7RS hs8P4/rwp/kptN5fNSDQ0u8n/cy//u6LEbgwQnVADv/1P59HYUSwxrjRwb3OItHC 4rBviX762uzxkRELUHzxidIh9UGZiFD6vyhgpNEDoPL3CDCBjOnPxH0xVtcXv6rI ZvrhB6TENh8qCf6J5RbZyAuqVJbBMAKIE+eFVvXtgj20OvB/cEQ5YCq0gvTbTim9 npcoF2HyRXy44CJeEylI1N8eDsTEZXqaRXEL9C6JFNpVktyX1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuPgry3PbDeXpubOj8yoWng2sAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjViZjhmMmEtZjViOC0z MGM3LTg1M2QtMzY5NmU2OGMzZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/zwJylGzR7k+Ef78Ap5WNIhJuGr3hiG9pxrGFh3mCoJTgDxyEMNGMk DvheZHIWmiFRmLkw6K2tcm1MHkKVtgXYY0Tw0bEXMUSNxWo3C598m0xh5RIF3SCF w/d4FIP+Ozostv5cLTvrarvB0OYeBzNeY1TWDqOh/M15FL9etH3cGkNdKBXfIRtj nvjZyuzHjDOuZpNxVluc10hlrOmhM7nWlS35hmQyL0NjAAbihNG0cFNMEi/iYLGj 8x23HW98zMNz/MvN0sqQSdk9e7tA2BNt2VEqUiNuuW0PB3tutTfvcCi651snbG+0 ocemBsacm/d0DxN2zXWzu92G5wq8dr8= -----END CERTIFICATE-----Generated at Thu May 7 05:40:43 2026 by rpki-client