$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c175acf9-e976-3e92-8620-2f0f126d1450.roa File: c175acf9-e976-3e92-8620-2f0f126d1450.roa (raw, json) Hash identifier: yoq/5goY4kFL6WlfTTcN2/FQOv3R1z/VcJjvPtJxMkw= Subject key identifier: C8:A0:6B:4C:3E:B3:F1:48:CC:B3:58:B1:C5:50:D8:2C:53:50:F3:78 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACC57EE3EBF38F0CE46800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c175acf9-e976-3e92-8620-2f0f126d1450.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 22691 IP address blocks: 204.141.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c5:7e:e3:eb:f3:8f:0c:e4:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=6bd7d302-0d7b-4653-b264-2769c7304c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4e:3c:28:45:91:0d:09:b1:76:d2:22:2f:02: 09:d2:5b:4c:fc:0f:46:43:f9:15:1c:14:87:7b:3f: 3c:be:bd:41:cf:f5:83:ca:8e:ab:a0:52:17:26:d8: d1:09:01:27:23:a2:71:de:46:b3:89:24:0c:90:55: 06:c8:9f:19:35:cd:5e:36:25:f5:b5:06:e6:12:6a: 90:da:ea:48:0d:7a:ab:be:b3:27:bd:ef:a2:d1:64: eb:92:82:03:f0:3d:19:50:02:d1:27:31:15:69:54: 0c:c1:8c:b8:0f:6a:3e:5f:76:1e:1a:fc:70:25:2a: c2:c9:90:2f:78:cf:49:17:89:4b:71:3d:7f:13:11: fb:ec:9a:61:df:1b:12:9b:d3:61:e5:fd:7d:11:af: df:2c:c6:9e:7d:91:7c:99:f3:80:98:0d:28:a6:03: 86:19:19:55:bd:cd:01:7a:2d:36:e6:de:40:d4:d7: ea:64:c4:1b:9b:23:14:d1:a9:2d:d9:4a:94:8b:6f: 23:09:22:53:b8:07:c5:26:90:2b:4b:ec:0f:3b:74: d6:69:d8:97:05:76:97:68:29:c8:c4:3c:0e:54:4e: 8c:76:76:fb:f2:08:7f:e7:9e:bd:69:d5:6d:d3:da: ea:b0:ed:3b:e8:eb:0b:3a:74:96:0b:9a:41:7b:92: 57:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:6B:4C:3E:B3:F1:48:CC:B3:58:B1:C5:50:D8:2C:53:50:F3:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c175acf9-e976-3e92-8620-2f0f126d1450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d5:11:7e:1d:4d:6f:eb:03:39:12:52:95:ef:9a:ef:7d:b0: d0:a5:8e:0b:19:3d:76:e1:d9:58:1c:53:ee:2a:db:d3:69:c5: 35:f5:32:fa:28:3d:1e:18:6a:bc:1a:f9:8d:a3:5a:a8:aa:16: 50:f5:0b:e9:e0:d9:df:14:2f:c9:b8:0a:0d:3f:22:4b:c0:92: c6:40:3a:c0:0b:fa:8d:97:59:a0:66:c1:40:59:4e:5d:54:ed: cb:7a:78:7a:3b:9d:82:60:85:b9:6c:62:05:62:42:75:f5:f3: 64:9c:a2:96:f8:91:b3:3c:9c:de:86:81:c2:76:98:ad:ff:98: d4:c9:87:fc:5b:1f:1d:1e:c7:b9:17:aa:fa:69:41:46:05:ce: 5d:ce:32:14:c7:b3:f5:a6:86:4f:07:b1:cd:3a:ec:ba:8b:14: c0:9e:b9:36:bd:67:8a:b5:1a:a3:28:0c:5b:23:ff:84:38:d1: d7:18:4b:05:7c:27:36:f0:ba:90:3a:aa:7e:87:d7:0a:d5:fd: 81:3d:84:dc:e5:1f:c8:ce:63:01:5c:00:30:19:fc:8c:c7:e8: 08:01:ba:17:b0:c0:a4:5d:75:3b:c9:bd:69:37:19:df:d8:20: a3:2d:82:66:8a:37:f6:63:69:ea:89:c2:11:d8:86:f5:18:30: 28:3d:77:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMV+4+vzjwzkaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NmJkN2QzMDItMGQ3Yi00NjUzLWIyNjQtMjc2OWM3MzA0YzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj048KEWRDQmxdtIiLwIJ0ltM/A9GQ/kVHBSH ez88vr1Bz/WDyo6roFIXJtjRCQEnI6Jx3kaziSQMkFUGyJ8ZNc1eNiX1tQbmEmqQ 2upIDXqrvrMnve+i0WTrkoID8D0ZUALRJzEVaVQMwYy4D2o+X3YeGvxwJSrCyZAv eM9JF4lLcT1/ExH77Jph3xsSm9Nh5f19Ea/fLMaefZF8mfOAmA0opgOGGRlVvc0B ei025t5A1NfqZMQbmyMU0akt2UqUi28jCSJTuAfFJpArS+wPO3TWadiXBXaXaCnI xDwOVE6Mdnb78gh/5569adVt09rqsO076OsLOnSWC5pBe5JXtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiga0w+s/FIzLNYscVQ2CxTUPN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzE3NWFjZjktZTk3Ni0z ZTkyLTg2MjAtMmYwZjEyNmQxNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzI0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnVEX4dTW/rAzkSUpXvmu99sNCljgsZPXbh2VgcU+4q29NpxTX1Mvoo PR4Yarwa+Y2jWqiqFlD1C+ng2d8UL8m4Cg0/IkvAksZAOsAL+o2XWaBmwUBZTl1U 7ct6eHo7nYJghblsYgViQnX182Scopb4kbM8nN6GgcJ2mK3/mNTJh/xbHx0ex7kX qvppQUYFzl3OMhTHs/Wmhk8Hsc067LqLFMCeuTa9Z4q1GqMoDFsj/4Q40dcYSwV8 JzbwupA6qn6H1wrV/YE9hNzlH8jOYwFcADAZ/IzH6AgBuhewwKRddTvJvWk3Gd/Y IKMtgmaKN/ZjaeqJwhHYhvUYMCg9d+Y= -----END CERTIFICATE-----Generated at Thu Sep 17 15:13:59 2026 by rpki-client