$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c6c3f968-6e9c-36a3-bb76-6c70a4662d2c.roa File: c6c3f968-6e9c-36a3-bb76-6c70a4662d2c.roa (raw, json) Hash identifier: VQ18V+K/CPYavbzu2rKAu2IRGIb25DOFRZjSDaqjMHM= Subject key identifier: 94:1B:0F:35:D7:77:30:4A:87:51:76:8A:18:F9:D6:70:63:2C:D6:96 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4234722CA4DAC0A25609D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c6c3f968-6e9c-36a3-bb76-6c70a4662d2c.roa Signing time: Wed 19 Aug 2026 18:03:54 +0000 ROA not before: Wed 19 Aug 2026 18:03:54 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 20940 IP address blocks: 204.2.163.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:47:22:ca:4d:ac:0a:25:60:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:54 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=42db352b-d656-47b8-a11a-16eec3a24b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:60:5b:4b:5f:fe:8e:c3:aa:bb:6f:a9:9f:56: 74:e2:6c:1c:4c:b1:7f:b5:42:94:c3:1f:29:37:70: 8f:bc:21:a3:d9:ba:80:9a:7d:57:47:c7:43:9a:cd: 81:e2:97:90:98:07:62:40:fc:62:bd:fc:5e:81:c5: d4:c7:92:44:60:40:8c:85:8b:d8:3a:5c:6d:11:79: 44:8a:35:dd:44:f1:ce:95:03:e5:0e:23:cd:51:d5: 80:c7:c0:21:04:6e:e3:aa:09:a0:02:1d:0f:82:64: ae:69:b3:72:78:2d:a5:53:55:a1:1a:c9:6c:ae:6f: 94:ce:9c:d2:5b:3a:ca:91:68:25:92:8f:27:1f:6d: a0:ad:df:a9:28:df:a5:93:3a:52:f5:4c:9f:b5:df: fd:61:18:6d:04:ae:ad:93:29:59:be:7f:9c:ee:10: 7e:b9:30:a4:f1:4a:18:16:4c:03:6c:10:8a:b5:db: 87:2d:43:6e:9d:39:a3:ee:67:5a:0d:9d:6b:f1:b1: cc:11:d0:40:e9:d7:b0:fb:18:a5:7a:01:ef:c4:43: 24:7d:ad:45:18:a5:b3:de:7f:1f:ed:54:fc:a6:6c: d0:26:4e:9d:06:3b:c9:c4:7b:2f:56:20:b1:35:51: 86:02:20:af:38:74:4e:b0:72:89:4c:a5:85:f1:78: 04:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1B:0F:35:D7:77:30:4A:87:51:76:8A:18:F9:D6:70:63:2C:D6:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c6c3f968-6e9c-36a3-bb76-6c70a4662d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.163.64/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:04:77:dc:66:58:3f:ed:63:3e:91:4c:6d:d5:93:1b:cf:79: 5a:1c:0d:89:7a:3f:2e:2a:99:23:70:8e:1c:d3:51:b7:6d:f5: 4b:90:3d:04:f8:d3:37:31:fd:0e:db:98:e4:7f:0b:a5:c5:22: a1:ad:63:58:3d:8a:f5:1b:c9:db:ab:d0:78:69:83:0b:0f:2a: e7:c1:58:62:13:8b:3a:e9:7f:06:6d:17:b5:80:3f:81:78:33: b0:32:28:a8:fe:ff:fe:71:31:01:68:c1:23:9c:fa:cb:8b:97: cf:a2:3a:9f:1e:f0:22:a7:72:ce:04:ae:6c:83:8c:f9:da:66: 0c:05:23:2a:fe:56:2d:6c:23:d9:75:0e:55:e5:78:63:31:5c: 0a:da:4a:a5:2b:3b:c7:62:d1:0e:d4:b2:57:51:92:2a:45:ff: 3a:07:1c:c0:59:cf:41:f9:0d:71:73:b0:a9:a0:54:2b:51:37: ed:c6:da:da:01:e0:1f:2c:0a:4b:bb:f9:40:bf:1b:d5:a4:f5: db:60:d3:0b:fe:3f:52:e4:00:b5:e0:f3:b8:66:d2:0f:91:b5: 8a:75:e3:b1:22:72:3c:2c:09:f4:4f:26:bb:eb:15:9b:52:cc: c2:d3:85:bd:53:0f:73:2f:90:8c:1e:18:5c:28:28:24:b4:26: 76:06:56:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7kI0ciyk2sCiVgnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1NFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk NDJkYjM1MmItZDY1Ni00N2I4LWExMWEtMTZlZWMzYTI0YjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWBbS1/+jsOqu2+pn1Z04mwcTLF/tUKUwx8p N3CPvCGj2bqAmn1XR8dDms2B4peQmAdiQPxivfxegcXUx5JEYECMhYvYOlxtEXlE ijXdRPHOlQPlDiPNUdWAx8AhBG7jqgmgAh0PgmSuabNyeC2lU1WhGslsrm+UzpzS WzrKkWglko8nH22grd+pKN+lkzpS9Uyftd/9YRhtBK6tkylZvn+c7hB+uTCk8UoY FkwDbBCKtduHLUNunTmj7mdaDZ1r8bHMEdBA6dew+xilegHvxEMkfa1FGKWz3n8f 7VT8pmzQJk6dBjvJxHsvViCxNVGGAiCvOHROsHKJTKWF8XgEsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJQbDzXXdzBKh1F2ihj51nBjLNaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzZjM2Y5NjgtNmU5Yy0z NmEzLWJiNzYtNmM3MGE0NjYyZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGzAKjQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApBHfcZlg/7WM+kUxt1ZMbz3laHA2Jej8uKpkjcI4c01G3bfVLkD0E +NM3Mf0O25jkfwulxSKhrWNYPYr1G8nbq9B4aYMLDyrnwVhiE4s66X8GbRe1gD+B eDOwMiio/v/+cTEBaMEjnPrLi5fPojqfHvAip3LOBK5sg4z52mYMBSMq/lYtbCPZ dQ5V5XhjMVwK2kqlKzvHYtEO1LJXUZIqRf86BxzAWc9B+Q1xc7CpoFQrUTftxtra AeAfLApLu/lAvxvVpPXbYNML/j9S5AC14PO4ZtIPkbWKdeOxInI8LAn0Tya76xWb UszC04W9Uw9zL5CMHhhcKCgktCZ2BlZz -----END CERTIFICATE-----Generated at Thu Sep 3 09:25:24 2026 by rpki-client