$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd2cd6d8-8a4d-3237-b6ff-bf8dc251e6c1.roa File: cd2cd6d8-8a4d-3237-b6ff-bf8dc251e6c1.roa (raw, json) Hash identifier: jH6RXuof/BxEEpRdOYZO5HB7ysktu8NgjBYdoOSwfvg= Subject key identifier: DE:A6:C8:B6:B2:D1:C2:B1:E3:21:CF:8F:32:12:C5:C7:8F:67:0A:12 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE423434FBDBB9D806EBBA480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd2cd6d8-8a4d-3237-b6ff-bf8dc251e6c1.roa Signing time: Wed 19 Aug 2026 18:03:52 +0000 ROA not before: Wed 19 Aug 2026 18:03:52 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 199.224.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:43:4f:bd:bb:9d:80:6e:bb:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:52 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=cc2e6b48-c1e5-4c70-a2d1-7952568f3b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7e:51:09:b5:c5:f7:60:a8:a1:e8:f2:35:04: 45:9c:ce:12:38:1c:34:cb:5b:4f:6a:42:47:04:ea: 88:9a:ce:64:2b:2e:84:30:7d:d1:0f:a5:2d:81:ba: 1f:1d:d2:c0:6c:5c:a2:9c:1f:76:ce:8a:5e:e1:bc: 9c:ba:2b:43:53:59:c7:4f:3a:a3:9d:8c:9e:72:1c: 5f:db:36:0f:01:63:c7:00:34:57:16:56:55:94:c3: b5:08:39:2e:32:e9:97:44:13:4e:ac:eb:02:ec:3c: ec:e2:d1:df:8e:e0:1a:88:53:b4:30:f5:17:28:75: 4b:1f:e1:32:90:d1:35:4f:d8:04:7f:f9:0e:f8:ac: e2:a0:0c:4b:53:8d:96:f4:8c:cf:b5:81:ed:9f:6b: 9c:60:fa:1a:9f:b3:b5:c6:dc:c7:82:d1:ca:11:60: e4:60:6d:8e:ad:5b:5e:59:12:0b:1f:30:f7:0b:90: e0:0b:9c:79:f1:06:8f:81:47:35:86:fc:69:de:2e: e3:44:d7:7e:76:f2:12:df:21:ee:22:7c:d0:60:44: 7b:c6:d2:97:d8:dc:95:5c:8b:03:27:08:1a:92:24: 16:1a:ef:87:29:a5:5b:9b:c9:2e:12:ac:2d:47:40: 90:2f:6e:be:fe:7e:67:4c:d5:96:27:4a:bd:16:d5: 20:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A6:C8:B6:B2:D1:C2:B1:E3:21:CF:8F:32:12:C5:C7:8F:67:0A:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd2cd6d8-8a4d-3237-b6ff-bf8dc251e6c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 199.224.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8d:6e:af:9a:2f:59:d0:5b:cc:53:bd:65:a6:5a:cc:7c:8f: f4:a2:fc:7f:db:1e:1f:b5:97:ef:ff:77:5c:cf:76:c2:ae:49: e1:ca:dc:79:5f:eb:c6:99:66:db:10:c6:94:18:b4:4c:8a:44: d6:ab:8a:f3:e7:16:50:2d:8c:31:ee:c4:ec:77:67:52:7c:4d: b1:a2:49:99:37:b6:e1:35:5a:9a:2d:57:41:00:00:4f:ee:96: a2:a0:42:7e:22:e5:6c:97:97:e0:40:4f:71:3f:85:0a:45:a8: 19:04:46:26:5a:7b:4b:a4:e5:cd:8c:4a:28:ad:2c:56:7b:c8: 54:6c:ce:ba:90:58:08:22:48:4c:14:4a:e9:32:43:ca:70:85: 35:5d:18:28:db:22:54:ab:c1:bf:38:84:db:69:ac:86:0e:3b: 1b:e0:45:b4:1f:d6:9e:18:c3:fe:eb:30:83:53:4e:62:85:4f: 39:fb:86:2a:88:8e:b3:77:da:61:15:c5:1f:46:7e:f1:61:0c: e1:8c:44:16:f0:69:31:f7:ec:69:6e:d9:e0:96:7c:9f:93:04: 9e:1f:ed:a3:9a:9e:71:2c:89:a6:15:d1:1e:12:d9:ac:a5:98: cf:d8:25:f9:67:01:98:80:aa:c6:c2:9f:e9:c6:f6:c3:20:ca: 9c:dc:2a:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0NPvbudgG67pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MloXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk Y2MyZTZiNDgtYzFlNS00YzcwLWEyZDEtNzk1MjU2OGYzYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7n5RCbXF92CooejyNQRFnM4SOBw0y1tPakJH BOqIms5kKy6EMH3RD6UtgbofHdLAbFyinB92zope4bycuitDU1nHTzqjnYyechxf 2zYPAWPHADRXFlZVlMO1CDkuMumXRBNOrOsC7Dzs4tHfjuAaiFO0MPUXKHVLH+Ey kNE1T9gEf/kO+KzioAxLU42W9IzPtYHtn2ucYPoan7O1xtzHgtHKEWDkYG2OrVte WRILHzD3C5DgC5x58QaPgUc1hvxp3i7jRNd+dvIS3yHuInzQYER7xtKX2NyVXIsD JwgakiQWGu+HKaVbm8kuEqwtR0CQL26+/n5nTNWWJ0q9FtUgjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6myLay0cKx4yHPjzISxcePZwoSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2QyY2Q2ZDgtOGE0ZC0z MjM3LWI2ZmYtYmY4ZGMyNTFlNmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx+AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAONbq+aL1nQW8xTvWWmWsx8j/Si/H/bHh+1l+//d1zPdsKuSeHK3Hlf 68aZZtsQxpQYtEyKRNarivPnFlAtjDHuxOx3Z1J8TbGiSZk3tuE1WpotV0EAAE/u lqKgQn4i5WyXl+BAT3E/hQpFqBkERiZae0uk5c2MSiitLFZ7yFRszrqQWAgiSEwU SukyQ8pwhTVdGCjbIlSrwb84hNtprIYOOxvgRbQf1p4Yw/7rMINTTmKFTzn7hiqI jrN32mEVxR9GfvFhDOGMRBbwaTH37Glu2eCWfJ+TBJ4f7aOannEsiaYV0R4S2ayl mM/YJflnAZiAqsbCn+nG9sMgypzcKro= -----END CERTIFICATE-----Generated at Thu Sep 17 12:11:12 2026 by rpki-client