$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa File: cde87bfa-7d06-34bf-9c03-15214404e72e.roa (raw, json) Hash identifier: N7tD69N+xjw4IY3hjjjUxqBk3/8bxhh1X2zsKoCNYS4= Subject key identifier: 55:35:7C:5B:62:F0:D0:A4:67:C3:3E:9E:41:67:68:07:2D:87:E7:E7 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EEA8764BCC8B2157575FD1700 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 29852 IP address blocks: 140.174.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:64:bc:c8:b2:15:75:75:fd:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=3828100c-a567-4b7a-a38e-d96869cf3479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:2c:82:2a:57:dc:4f:39:16:e7:6b:36:ac: 55:83:04:75:ef:8d:5c:a7:08:2f:92:14:cd:67:89: 51:30:7e:61:6e:db:6c:5c:f2:d1:e0:f2:30:e2:8a: fa:07:d7:d9:57:98:c1:1d:3d:0d:4f:0b:28:0c:f5: e9:76:a2:7a:16:19:9d:be:8a:6c:f4:4b:a6:6e:bf: 82:49:00:2c:6a:a7:53:3c:1b:6e:e9:14:7a:15:f3: 9e:89:fb:b3:4b:c9:0d:e2:1b:f5:ff:69:12:82:50: 25:67:a5:f9:a8:05:e0:dc:43:0e:26:cc:a9:29:75: 16:0e:2f:8a:be:78:c3:04:e2:d4:40:56:27:32:c1: b3:0b:80:9a:bb:ab:14:c9:ba:86:d1:6b:77:65:7b: ab:58:52:41:2d:25:4e:37:dd:84:75:ac:4a:7d:fe: 63:c4:f6:d4:18:ec:1b:c4:19:b3:b5:dc:b6:db:33: e2:80:53:32:37:84:29:8e:3f:a4:73:af:0d:e6:b6: 1f:ba:be:47:bb:26:04:c8:07:47:15:e8:1a:24:35: e2:4f:29:3b:10:fd:98:62:80:12:4c:7d:94:75:60: 66:d4:5c:5f:16:4c:7d:6f:ce:04:01:93:83:e2:0f: 31:4c:c2:01:60:e0:8b:d2:7e:e7:7e:50:a3:22:39: 36:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:35:7C:5B:62:F0:D0:A4:67:C3:3E:9E:41:67:68:07:2D:87:E7:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9b:58:e4:c5:5f:56:79:ed:12:ca:02:a4:89:3a:cd:ff:f3: 3f:78:1f:47:6c:1b:45:3d:51:c6:3d:63:8f:48:71:d1:ee:22: f6:79:9e:0f:f7:63:b0:51:5a:33:58:b0:7b:1c:98:aa:e5:66: a6:fd:19:67:dc:59:5f:dd:56:e1:08:fc:db:00:b3:90:42:dd: 7f:f8:08:4e:9e:fd:ef:66:aa:87:14:a6:6f:09:d2:42:3a:09: ff:a3:02:31:7b:46:aa:f5:ad:5f:15:62:d7:2d:5d:9b:d8:fe: e8:c2:06:ed:05:66:23:18:3d:16:e6:26:75:48:8f:94:e9:8d: b6:02:1d:fe:98:b5:d8:85:23:26:bb:f7:ee:5f:49:c1:ea:90: 44:53:f9:7c:cc:df:16:20:a4:c1:82:1e:5d:58:18:3a:d0:fc: 96:e0:06:9c:e8:56:62:50:ff:3b:24:c5:dd:e9:02:03:11:1b: 62:b2:b2:34:12:b0:b2:87:af:e5:10:1e:08:94:8f:e8:f3:2b: a3:80:f3:c0:7f:32:0e:05:9d:a1:73:fb:8d:46:09:6c:b2:34: ad:08:d4:b7:46:b4:b8:c2:22:bd:66:6d:fd:2b:85:c6:94:26: ee:c9:67:a6:fe:a5:db:1b:d3:a7:56:85:4c:d4:c2:41:34:10: bb:38:b9:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh2S8yLIVdXX9FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MzgyODEwMGMtYTU2Ny00YjdhLWEzOGUtZDk2ODY5Y2YzNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8QsgipX3E85FudrNqxVgwR1741cpwgvkhTN Z4lRMH5hbttsXPLR4PIw4or6B9fZV5jBHT0NTwsoDPXpdqJ6Fhmdvops9Eumbr+C SQAsaqdTPBtu6RR6FfOeifuzS8kN4hv1/2kSglAlZ6X5qAXg3EMOJsypKXUWDi+K vnjDBOLUQFYnMsGzC4Cau6sUybqG0Wt3ZXurWFJBLSVON92EdaxKff5jxPbUGOwb xBmztdy22zPigFMyN4Qpjj+kc68N5rYfur5HuyYEyAdHFegaJDXiTyk7EP2YYoAS TH2UdWBm1FxfFkx9b84EAZOD4g8xTMIBYOCL0n7nflCjIjk2BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU1fFti8NCkZ8M+nkFnaActh+fnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2RlODdiZmEtN2QwNi0z NGJmLTljMDMtMTUyMTQ0MDRlNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjK5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADabWOTFX1Z57RLKAqSJOs3/8z94H0dsG0U9UcY9Y49IcdHuIvZ5ng/3 Y7BRWjNYsHscmKrlZqb9GWfcWV/dVuEI/NsAs5BC3X/4CE6e/e9mqocUpm8J0kI6 Cf+jAjF7Rqr1rV8VYtctXZvY/ujCBu0FZiMYPRbmJnVIj5TpjbYCHf6YtdiFIya7 9+5fScHqkERT+XzM3xYgpMGCHl1YGDrQ/JbgBpzoVmJQ/zskxd3pAgMRG2KysjQS sLKHr+UQHgiUj+jzK6OA88B/Mg4FnaFz+41GCWyyNK0I1LdGtLjCIr1mbf0rhcaU Ju7JZ6b+pdsb06dWhUzUwkE0ELs4uYw= -----END CERTIFICATE-----Generated at Thu Sep 24 23:36:19 2026 by rpki-client