$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bb9ba8a2-b36b-3247-9f4d-b86b8e97826f.roa File: bb9ba8a2-b36b-3247-9f4d-b86b8e97826f.roa (raw, json) Hash identifier: X/5xDSTqAE2oyWicDFeroTGwGtONqWXBP9yAxvOFXoI= Subject key identifier: F6:8C:FA:EC:07:B6:93:D7:87:F2:E1:51:FC:FE:0C:14:45:38:9D:DD Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACCD974D6F867C800A2A30 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bb9ba8a2-b36b-3247-9f4d-b86b8e97826f.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 1225 IP address blocks: 198.64.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:cd:97:4d:6f:86:7c:80:0a:2a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=32ab6fc5-0f5a-4b7b-a937-5cf840287e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f1:ae:a9:97:9a:7a:95:f5:e1:ff:af:88:55: fe:53:7c:e3:75:3a:0d:bf:53:7f:f3:6d:3a:b0:85: 4f:3e:f4:b2:a2:eb:5c:bb:4f:51:8a:9f:0e:db:ca: 1f:f8:15:d4:e4:24:b5:fd:72:e3:c5:dd:b4:eb:d5: 15:2a:f0:78:6e:c9:ae:9c:c7:f8:89:6f:eb:4b:16: a7:75:1c:2f:97:da:78:b7:15:7b:69:57:fd:73:bf: 3e:29:00:ff:51:de:a1:67:af:13:c3:5b:a7:40:bd: a6:5d:11:98:13:98:91:3b:88:1a:89:bd:8c:83:14: 4e:71:88:72:5d:18:77:a3:a9:ce:67:30:f4:58:e4: b5:e8:d5:4a:cb:24:d2:5f:1e:43:e7:e5:46:a3:a1: b5:ea:61:00:71:d8:21:2e:97:2c:91:16:7e:a9:5f: 74:e7:80:53:8a:ea:cc:56:8e:cd:20:bf:7b:b9:34: fa:5a:fc:6e:6d:9e:10:7f:0b:9e:24:48:fe:74:99: 46:35:7d:54:95:c0:76:e7:58:8a:25:b7:e9:f8:c7: 07:ab:18:d3:7f:39:38:32:72:fb:e4:1a:91:0d:60: a8:b9:94:21:fb:19:d5:74:5d:6c:2d:3c:a3:3c:57: 79:ff:e8:1f:0d:05:12:bf:ce:de:d8:6b:78:b1:31: 75:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8C:FA:EC:07:B6:93:D7:87:F2:E1:51:FC:FE:0C:14:45:38:9D:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bb9ba8a2-b36b-3247-9f4d-b86b8e97826f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.64.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8b:4c:84:6b:32:8f:a3:19:62:53:14:0e:9a:a0:4e:b0:e6: f7:64:44:19:f0:c4:64:b7:de:3e:16:4f:3f:10:e2:81:1a:4c: 8f:3b:89:9a:c2:1f:81:20:25:d3:42:c4:7d:9a:18:45:6b:99: d3:d0:25:5f:1d:97:91:3c:03:62:b6:25:b5:e4:5c:3a:30:f5: 68:b6:5f:a5:85:08:2c:18:05:99:09:d0:b5:a4:9a:fa:2f:99: f6:06:4d:7f:61:27:9a:79:b1:3e:66:37:12:a4:fd:b0:7f:e3: 8b:d8:b7:17:f8:a3:3e:c4:1b:e4:4e:6f:57:0a:72:8c:8b:fd: 81:ed:54:3f:b4:50:ff:8c:70:a8:a9:ba:0c:de:c1:19:0f:c1: 52:76:d1:73:ef:8c:5b:03:f8:00:93:8a:aa:e3:1b:22:42:bb: c3:82:bf:c1:6a:8d:99:df:66:e1:a5:84:86:43:12:ab:e8:a3: a0:33:ec:d5:a6:49:c9:91:db:ae:37:34:0a:cb:c4:1f:9c:b3: 18:ee:f4:89:96:7b:79:eb:5f:37:e9:4e:8a:f3:79:94:d1:95: 0e:3a:0e:82:ac:f7:a1:da:70:a6:49:08:65:fc:24:1b:81:36: 7a:7d:e9:72:b2:bb:67:75:77:47:59:a3:6d:10:3c:e1:29:1f: c8:d5:4c:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rM2XTW+GfIAKKjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MzJhYjZmYzUtMGY1YS00YjdiLWE5MzctNWNmODQwMjg3ZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPGuqZeaepX14f+viFX+U3zjdToNv1N/8206 sIVPPvSyoutcu09Rip8O28of+BXU5CS1/XLjxd2069UVKvB4bsmunMf4iW/rSxan dRwvl9p4txV7aVf9c78+KQD/Ud6hZ68Tw1unQL2mXRGYE5iRO4gaib2MgxROcYhy XRh3o6nOZzD0WOS16NVKyyTSXx5D5+VGo6G16mEAcdghLpcskRZ+qV9054BTiurM Vo7NIL97uTT6WvxubZ4QfwueJEj+dJlGNX1UlcB251iKJbfp+McHqxjTfzk4MnL7 5BqRDWCouZQh+xnVdF1sLTyjPFd5/+gfDQUSv87e2Gt4sTF1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaM+uwHtpPXh/LhUfz+DBRFOJ3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmI5YmE4YTItYjM2Yi0z MjQ3LTlmNGQtYjg2YjhlOTc4MjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWLTIRrMo+jGWJTFA6aoE6w5vdkRBnwxGS33j4WTz8Q4oEaTI87iZrC H4EgJdNCxH2aGEVrmdPQJV8dl5E8A2K2JbXkXDow9Wi2X6WFCCwYBZkJ0LWkmvov mfYGTX9hJ5p5sT5mNxKk/bB/44vYtxf4oz7EG+ROb1cKcoyL/YHtVD+0UP+McKip ugzewRkPwVJ20XPvjFsD+ACTiqrjGyJCu8OCv8FqjZnfZuGlhIZDEqvoo6Az7NWm ScmR2643NArLxB+csxju9ImWe3nrXzfpTorzeZTRlQ46DoKs96HacKZJCGX8JBuB Nnp96XKyu2d1d0dZo20QPOEpH8jVTC4= -----END CERTIFICATE-----Generated at Thu Sep 3 08:29:14 2026 by rpki-client