$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2dbf409-5eb4-3120-ba22-055efb04994f.roa File: c2dbf409-5eb4-3120-ba22-055efb04994f.roa (raw, json) Hash identifier: Peh1sljbOmnBTNnvl2aji96zcMWniFsemWWvmSXKT9k= Subject key identifier: BF:98:8D:D1:C0:4A:03:BD:48:3A:D3:74:36:C7:F5:F3:4E:A4:9A:1C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233B2E9796346BBFD12148 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2dbf409-5eb4-3120-ba22-055efb04994f.roa Signing time: Wed 19 Aug 2026 18:03:48 +0000 ROA not before: Wed 19 Aug 2026 18:03:48 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 40212 IP address blocks: 207.156.216.0/24 maxlen: 24 207.156.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3b:2e:97:96:34:6b:bf:d1:21:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:48 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=903101c4-305e-417e-8f44-554f7ffbb564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:1d:75:00:cf:bd:81:bc:43:39:85:d4:ff: e2:07:51:27:70:59:26:32:6d:67:a2:fd:d7:a1:bd: 90:b2:e2:35:a1:26:ce:4d:e6:52:df:6c:4b:60:ab: 97:04:a6:fb:5f:bb:99:e7:cf:e4:6f:77:cc:96:12: cf:1a:02:c2:c4:24:ae:62:67:29:5f:7a:8f:5a:65: a5:bb:14:b5:11:5a:a7:a8:4b:1e:7f:c2:05:48:c0: 07:91:c7:f3:f2:8c:46:5b:96:a5:93:80:a7:d1:1f: dc:02:82:0f:cd:4a:e2:2d:b4:de:6b:12:09:54:1a: 99:a1:15:9e:18:26:36:f3:e6:bb:86:2c:77:8c:a5: a6:9d:15:ee:5e:0c:26:a0:b4:58:fd:30:f1:d7:7d: 29:17:b1:1b:57:da:e4:4b:56:5c:07:17:c7:78:fb: 76:4c:5a:8f:3a:60:54:c8:14:13:a3:a4:ed:54:b1: bc:59:41:1b:80:0b:ed:6e:d3:c1:82:75:f6:8c:47: b5:6a:7b:a4:1c:b9:b7:e7:5a:67:a9:e3:67:92:57: f6:94:e9:64:a5:eb:6d:fe:1d:6d:da:56:a5:bf:eb: f4:ee:1a:21:d7:39:dc:0b:ec:7e:40:ee:ed:57:c4: 5e:90:a0:8b:2e:0f:9a:ef:84:d5:6a:6f:97:ac:ac: bc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:98:8D:D1:C0:4A:03:BD:48:3A:D3:74:36:C7:F5:F3:4E:A4:9A:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c2dbf409-5eb4-3120-ba22-055efb04994f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.156.216.0/24 207.156.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:11:cb:9d:45:80:4c:81:f6:16:68:cf:48:80:80:a6:ae:7c: 89:4b:20:f3:57:b7:3b:74:e0:f3:a3:d0:bc:c1:d7:4e:39:44: 28:73:e8:56:cb:ce:77:09:09:2d:03:55:88:ec:77:11:7e:1a: 0e:21:90:4c:5c:7b:68:ca:49:f3:36:28:33:16:ea:fe:c7:cd: b3:7a:0f:a8:f9:66:7e:0b:f7:7d:57:e8:23:74:e5:6b:68:bf: 8b:ee:5d:35:32:41:e1:d8:31:9b:18:48:24:9e:ff:b0:a1:c7: 65:5a:fc:e3:92:42:ce:48:1c:ed:9a:b0:d3:f0:bf:ff:f5:14: b0:69:53:d2:3d:fc:43:0f:ff:c8:07:bd:58:5e:b7:2a:71:e6: 9e:73:d8:74:41:2c:6b:eb:c5:c6:d5:2e:c5:73:60:49:f6:37: aa:4a:75:42:e1:e8:b5:3c:88:a5:46:7f:df:2d:e8:aa:5b:b7: 4b:ff:58:90:d0:cc:19:b8:da:53:b0:b0:dc:19:7e:82:b3:7a: ec:6f:99:2c:d6:d5:3f:10:11:4d:b8:bd:0c:95:75:dd:9f:44: 53:a1:05:d1:5a:2a:5a:94:33:af:07:4e:d3:dd:b9:09:a0:96: 4c:57:74:55:82:65:5f:6a:fe:cc:f7:06:4f:54:01:1b:f5:9e: 7b:a4:fd:9e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7kIzsul5Y0a7/RIUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk OTAzMTAxYzQtMzA1ZS00MTdlLThmNDQtNTU0ZjdmZmJiNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniEddQDPvYG8QzmF1P/iB1EncFkmMm1nov3X ob2QsuI1oSbOTeZS32xLYKuXBKb7X7uZ58/kb3fMlhLPGgLCxCSuYmcpX3qPWmWl uxS1EVqnqEsef8IFSMAHkcfz8oxGW5alk4Cn0R/cAoIPzUriLbTeaxIJVBqZoRWe GCY28+a7hix3jKWmnRXuXgwmoLRY/TDx130pF7EbV9rkS1ZcBxfHePt2TFqPOmBU yBQTo6TtVLG8WUEbgAvtbtPBgnX2jEe1anukHLm351pnqeNnklf2lOlkpett/h1t 2lalv+v07hoh1zncC+x+QO7tV8RekKCLLg+a74TVam+XrKy8HQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFL+YjdHASgO9SDrTdDbH9fNOpJocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzJkYmY0MDktNWViNC0z MTIwLWJhMjItMDU1ZWZiMDQ5OTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAz5zYAwQA z5zaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIYRy51FgEyB9hZoz0iAgKaufIlLIPNXtzt04POj0LzB1045 RChz6FbLzncJCS0DVYjsdxF+Gg4hkExce2jKSfM2KDMW6v7HzbN6D6j5Zn4L931X 6CN05Wtov4vuXTUyQeHYMZsYSCSe/7Chx2Va/OOSQs5IHO2asNPwv//1FLBpU9I9 /EMP/8gHvVhetypx5p5z2HRBLGvrxcbVLsVzYEn2N6pKdULh6LU8iKVGf98t6Kpb t0v/WJDQzBm42lOwsNwZfoKzeuxvmSzW1T8QEU24vQyVdd2fRFOhBdFaKlqUM68H TtPduQmglkxXdFWCZV9q/sz3Bk9UARv1nnuk/Z4= -----END CERTIFICATE-----Generated at Thu Sep 3 07:13:56 2026 by rpki-client