$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bc7c343f-b862-31c9-964d-8d61d717c3f0.roa File: bc7c343f-b862-31c9-964d-8d61d717c3f0.roa (raw, json) Hash identifier: cKZkL9ay/pGcfZSRHBFXv0WS3NMFtLCB1u6jhpTjzsA= Subject key identifier: 67:D2:8E:29:0D:22:1B:FD:64:5E:CD:F9:A8:DC:7F:FD:75:8B:C7:E6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232CF29A2E68A95B57C440 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bc7c343f-b862-31c9-964d-8d61d717c3f0.roa Signing time: Wed 19 Aug 2026 18:03:41 +0000 ROA not before: Wed 19 Aug 2026 18:03:41 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 128.242.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:2c:f2:9a:2e:68:a9:5b:57:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:41 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=80d2d82f-8223-4060-8682-ca26009131be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:82:f4:3d:01:56:93:33:e1:6d:ae:99:3c:fe: ed:f7:a0:38:7b:92:11:6e:80:d4:52:f7:e1:1a:99: 94:d8:a7:fe:35:3f:dc:6b:99:fd:1f:dc:21:02:93: f3:94:7f:56:ae:70:69:6f:77:4e:27:59:49:0d:e4: 46:d5:be:14:ef:41:d8:a8:f0:ff:d7:fd:42:19:0f: a7:12:b0:00:8d:f3:f6:57:9f:b5:75:bb:7e:2e:61: 66:da:2a:77:6e:ab:b3:17:a0:2c:d6:f2:1c:70:cf: b3:e4:95:7d:f3:24:74:1f:76:bd:1f:44:c6:02:9f: a1:18:eb:92:c1:ed:d2:e4:e0:87:38:a2:38:e6:26: 7e:40:1d:4a:54:3a:da:24:ee:ad:6c:7e:66:60:2d: cc:ae:90:dc:87:28:1d:15:c2:2b:bd:be:ed:09:46: ea:6c:f7:a4:1d:a3:3a:a9:78:1e:41:3e:6b:c4:6f: 67:7d:85:b2:14:93:cd:c2:84:04:34:20:a9:22:ae: 0f:35:64:00:1e:62:3c:e8:85:92:05:c1:48:18:f1: 3a:56:38:9d:9e:d9:5b:fb:43:2f:bc:d8:42:e1:2a: 69:2b:cc:ea:01:2a:e9:09:b5:d6:e2:ad:cc:7d:c5: 1a:b6:75:a0:41:51:61:38:03:c5:2c:81:63:ca:2d: a7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D2:8E:29:0D:22:1B:FD:64:5E:CD:F9:A8:DC:7F:FD:75:8B:C7:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bc7c343f-b862-31c9-964d-8d61d717c3f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:1e:35:4b:87:bd:76:77:0a:be:2e:aa:91:c3:2f:b1:a5:ca: 8e:31:66:18:ee:84:5a:0a:9f:f9:8f:e7:2e:7e:2f:0f:25:49: 03:f7:da:80:f1:68:85:51:ac:47:84:2f:d9:06:c4:bd:e1:32: 68:26:ab:96:04:f4:43:43:f8:5a:92:aa:75:1d:6e:7f:fd:ca: f5:c9:63:f1:5a:8e:c9:fc:21:83:aa:a8:a7:2b:d3:d9:07:f7: 64:50:cc:23:47:90:45:9f:96:d0:3e:88:6e:94:00:17:ef:57: 17:44:3d:8b:44:41:07:57:c8:a2:52:10:71:5b:d1:02:f7:c8: 3b:85:92:37:9c:dd:6e:3b:63:8f:87:a7:77:54:be:51:54:1e: a3:ed:4c:0d:ce:b9:d4:4d:85:68:4c:7d:86:93:35:c8:94:14: 8d:51:61:cc:d3:8f:dd:be:b3:ed:d1:17:1b:56:79:7b:a7:22: fc:d4:3f:cf:da:cb:03:5d:ee:5d:55:e0:7f:ee:f7:92:cd:20: 92:a2:a0:21:b0:c1:23:7f:19:ad:c5:53:4d:e9:60:16:e4:2e: 4c:74:13:7b:55:7b:98:3e:c3:fd:b3:6e:6d:79:49:69:d2:4d: 8c:08:9a:d5:e5:b3:e3:75:91:20:86:5c:e9:40:d1:75:3d:00: 3f:aa:53:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyzymi5oqVtXxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0MVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ODBkMmQ4MmYtODIyMy00MDYwLTg2ODItY2EyNjAwOTEzMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIL0PQFWkzPhba6ZPP7t96A4e5IRboDUUvfh GpmU2Kf+NT/ca5n9H9whApPzlH9WrnBpb3dOJ1lJDeRG1b4U70HYqPD/1/1CGQ+n ErAAjfP2V5+1dbt+LmFm2ip3bquzF6As1vIccM+z5JV98yR0H3a9H0TGAp+hGOuS we3S5OCHOKI45iZ+QB1KVDraJO6tbH5mYC3MrpDchygdFcIrvb7tCUbqbPekHaM6 qXgeQT5rxG9nfYWyFJPNwoQENCCpIq4PNWQAHmI86IWSBcFIGPE6Vjidntlb+0Mv vNhC4SppK8zqASrpCbXW4q3MfcUatnWgQVFhOAPFLIFjyi2nawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfSjikNIhv9ZF7N+ajcf/11i8fmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmM3YzM0M2YtYjg2Mi0z MWM5LTk2NGQtOGQ2MWQ3MTdjM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgPLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHceNUuHvXZ3Cr4uqpHDL7Glyo4xZhjuhFoKn/mP5y5+Lw8lSQP32oDx aIVRrEeEL9kGxL3hMmgmq5YE9END+FqSqnUdbn/9yvXJY/Fajsn8IYOqqKcr09kH 92RQzCNHkEWfltA+iG6UABfvVxdEPYtEQQdXyKJSEHFb0QL3yDuFkjec3W47Y4+H p3dUvlFUHqPtTA3OudRNhWhMfYaTNciUFI1RYczTj92+s+3RFxtWeXunIvzUP8/a ywNd7l1V4H/u95LNIJKioCGwwSN/Ga3FU03pYBbkLkx0E3tVe5g+w/2zbm15SWnS TYwImtXls+N1kSCGXOlA0XU9AD+qU9c= -----END CERTIFICATE-----Generated at Thu Sep 17 14:24:10 2026 by rpki-client