$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa File: c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa (raw, json) Hash identifier: EnSD2zE6rF5vG+xfpP30eZwEAfpSJYhHouSRibFUl8A= Subject key identifier: CC:52:7C:0E:7D:92:82:5D:8E:75:DE:B0:EB:57:04:55:E8:ED:49:82 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACCDBBAB491A71D3772880 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 1225 IP address blocks: 198.64.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:cd:bb:ab:49:1a:71:d3:77:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=c6b8fac8-cdad-4658-840c-de24e41852c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ba:f1:71:d9:65:84:b2:61:98:c5:58:0b:25: 2e:07:86:02:bf:aa:89:27:b7:5a:9a:08:4c:cf:18: 04:72:41:55:57:6b:69:d2:7f:f7:f2:d8:72:f5:60: 13:08:c5:8e:84:dd:02:ee:b0:74:70:80:03:23:42: 57:ad:6f:d6:da:c0:cf:0b:d5:23:23:c4:a0:2f:80: 81:af:fa:f1:39:e9:43:d7:ac:d4:82:42:64:e8:23: 87:6c:fb:68:21:fa:78:f3:3c:72:e8:e1:50:2d:7f: 6e:a9:25:37:18:8d:27:1f:01:2b:35:07:09:7e:63: 19:f2:38:e0:ed:46:d5:f2:9a:e3:0a:4b:2c:ae:50: c0:5b:1a:64:b1:6a:b5:65:e5:69:f4:bf:3c:6b:3d: 54:d2:19:1f:67:a4:60:60:35:90:8b:1b:1b:df:1a: f1:0e:c7:25:05:a2:c7:f4:98:d7:6d:9e:3b:d6:f7: 7a:0c:52:f3:8a:e9:ff:4a:dd:15:e6:78:93:d8:ab: 0e:8c:9b:80:a1:0c:a4:c5:ad:3e:05:3e:70:1a:bf: b2:fd:7d:ed:b5:64:ee:ac:c5:45:8a:de:1e:44:f3: 1e:13:5f:92:77:41:c7:3b:e1:bc:e3:6e:ea:c9:0d: 10:a1:7b:13:a5:e5:bc:70:d1:23:da:c8:da:05:eb: ef:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:52:7C:0E:7D:92:82:5D:8E:75:DE:B0:EB:57:04:55:E8:ED:49:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2360dd2-58de-396d-a5bf-5fdf5a7fff1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.64.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:a9:6b:b6:93:73:f0:ea:18:61:be:67:d2:9e:08:57:7c:03: 86:a9:46:6f:d9:d4:12:b6:99:0c:54:a2:46:f9:9d:6e:c0:73: be:5e:56:a2:2f:72:d2:92:fc:f7:6e:81:d4:a9:df:0c:b2:a8: fb:83:e6:56:b7:3e:fb:7e:95:48:11:a7:d3:7a:ed:81:08:e4: 9d:7c:34:bf:e2:d3:9f:3c:50:83:5e:17:60:15:75:cd:4b:66: 07:90:34:09:a7:4e:ab:29:4a:e5:a6:32:9f:b8:b3:23:e6:48: 14:c6:d2:7a:75:81:42:fd:77:4d:46:70:dc:63:3a:d0:14:17: 5c:49:1d:43:9b:6e:b5:56:e3:39:14:cd:40:cf:47:35:ba:ed: c8:9b:b3:4c:85:fd:75:a8:21:33:e9:32:d3:e9:63:f0:86:bb: 46:30:0e:31:5c:a4:df:5b:44:06:e4:2f:41:33:7f:5c:be:14: dd:61:82:e4:bf:4a:d7:e0:dd:0a:b1:6e:83:7c:4e:61:a4:d6: 3a:37:7e:60:a6:23:67:19:0a:1e:c1:58:2e:d4:68:50:63:3e: f0:29:fd:df:4d:2e:22:3b:f2:c9:59:95:b6:cb:f9:f7:8f:29: 0a:48:fd:f6:ae:22:ff:d0:d4:32:74:72:4a:d3:97:89:d8:db: 02:de:d5:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rM27q0kacdN3KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk YzZiOGZhYzgtY2RhZC00NjU4LTg0MGMtZGUyNGU0MTg1MmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLrxcdllhLJhmMVYCyUuB4YCv6qJJ7damghM zxgEckFVV2tp0n/38thy9WATCMWOhN0C7rB0cIADI0JXrW/W2sDPC9UjI8SgL4CB r/rxOelD16zUgkJk6COHbPtoIfp48zxy6OFQLX9uqSU3GI0nHwErNQcJfmMZ8jjg 7UbV8prjCkssrlDAWxpksWq1ZeVp9L88az1U0hkfZ6RgYDWQixsb3xrxDsclBaLH 9JjXbZ471vd6DFLziun/St0V5niT2KsOjJuAoQykxa0+BT5wGr+y/X3ttWTurMVF it4eRPMeE1+Sd0HHO+G8427qyQ0QoXsTpeW8cNEj2sjaBevvTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxSfA59koJdjnXesOtXBFXo7UmCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzIzNjBkZDItNThkZS0z OTZkLWE1YmYtNWZkZjVhN2ZmZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKypa7aTc/DqGGG+Z9KeCFd8A4apRm/Z1BK2mQxUokb5nW7Ac75eVqIv ctKS/PdugdSp3wyyqPuD5la3Pvt+lUgRp9N67YEI5J18NL/i0588UINeF2AVdc1L ZgeQNAmnTqspSuWmMp+4syPmSBTG0np1gUL9d01GcNxjOtAUF1xJHUObbrVW4zkU zUDPRzW67cibs0yF/XWoITPpMtPpY/CGu0YwDjFcpN9bRAbkL0Ezf1y+FN1hguS/ Stfg3QqxboN8TmGk1jo3fmCmI2cZCh7BWC7UaFBjPvAp/d9NLiI78slZlbbL+feP KQpI/fauIv/Q1DJ0ckrTl4nY2wLe1Rs= -----END CERTIFICATE-----Generated at Thu Sep 17 19:20:07 2026 by rpki-client