$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8699de8-63c6-3e79-a562-54e5e8c0f40b.roa File: d8699de8-63c6-3e79-a562-54e5e8c0f40b.roa (raw, json) Hash identifier: mb13qrsJ+mq3wbTi7rF4RJqVet5rUyfJr4ZSo8i86B0= Subject key identifier: 08:A2:E9:B0:C1:4B:17:AB:99:D6:39:66:1B:D1:9D:E6:4F:73:9B:BA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFF776CF58C1015FE60B42C00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8699de8-63c6-3e79-a562-54e5e8c0f40b.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 20115 IP address blocks: 161.58.0.0/16 maxlen: 24 198.65.128.0/18 maxlen: 24 198.65.224.0/19 maxlen: 24 199.240.0.0/16 maxlen: 24 206.58.0.0/16 maxlen: 24 206.86.0.0/16 maxlen: 24 207.21.128.0/18 maxlen: 24 207.22.64.0/18 maxlen: 24 207.31.192.0/18 maxlen: 24 207.32.64.0/18 maxlen: 24 207.33.0.0/16 maxlen: 24 207.97.0.0/17 maxlen: 24 207.150.0.0/17 maxlen: 24 207.153.128.0/18 maxlen: 24 207.153.192.0/18 maxlen: 24 207.158.192.0/18 maxlen: 24 207.159.0.0/18 maxlen: 24 207.196.0.0/17 maxlen: 24 207.197.128.0/17 maxlen: 24 207.199.0.0/17 maxlen: 24 207.206.0.0/17 maxlen: 24 209.69.0.0/16 maxlen: 24 209.75.0.0/16 maxlen: 24 209.130.0.0/17 maxlen: 24 209.157.0.0/16 maxlen: 24 209.238.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:6c:f5:8c:10:15:fe:60:b4:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=27e2d787-b3e8-4fb9-828f-510097a23f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:f3:23:36:94:82:16:3b:ae:d7:4f:b3:e4: 5c:80:de:34:6e:6a:8d:12:3a:37:50:bc:0a:01:ea: 44:61:14:1a:18:04:e8:0f:e9:a3:e4:44:1f:c2:c9: c9:9e:d2:38:09:4c:d4:d7:6a:df:ab:f7:2c:ad:a7: 55:5c:b4:8f:79:9b:33:82:e4:92:99:cf:4b:bf:f5: 5a:5a:ca:ef:14:0c:b8:97:41:49:74:ba:7f:3b:6d: 75:f2:11:b9:1c:8a:cd:98:ce:2d:15:ff:fc:0e:4b: 66:29:52:77:db:94:c8:2a:82:61:cd:59:8f:57:65: 3c:32:48:6c:96:9a:d8:b6:d0:18:91:40:e4:40:b5: 10:3c:1c:80:05:a7:3d:34:43:ed:8a:75:6a:21:cd: b1:3a:73:97:a3:3a:97:db:b8:26:9e:3b:5d:b1:4e: 8d:24:88:25:5b:d0:84:67:c7:3d:1c:4f:0d:27:86: 6b:b8:31:97:50:e5:a5:f3:f2:7a:fa:66:c7:f2:e8: f2:5e:29:c6:99:f6:40:23:21:bf:e4:ad:a4:f4:bc: 20:d9:cf:94:6b:88:cf:bd:37:42:50:57:95:6b:ec: 89:5f:21:f2:3c:98:a9:68:29:76:95:f4:0d:44:bc: 2a:c6:38:64:1a:fd:16:9f:47:d3:ad:7b:84:1b:f9: a5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A2:E9:B0:C1:4B:17:AB:99:D6:39:66:1B:D1:9D:E6:4F:73:9B:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d8699de8-63c6-3e79-a562-54e5e8c0f40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 161.58.0.0/16 198.65.128.0/18 198.65.224.0/19 199.240.0.0/16 206.58.0.0/16 206.86.0.0/16 207.21.128.0/18 207.22.64.0/18 207.31.192.0/18 207.32.64.0/18 207.33.0.0/16 207.97.0.0/17 207.150.0.0/17 207.153.128.0/17 207.158.192.0-207.159.63.255 207.196.0.0/17 207.197.128.0/17 207.199.0.0/17 207.206.0.0/17 209.69.0.0/16 209.75.0.0/16 209.130.0.0/17 209.157.0.0/16 209.238.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:08:9f:11:a6:2a:49:94:95:25:92:0c:b7:35:66:4b:a6:45: 8c:e5:aa:a2:03:1d:c9:fb:33:77:c1:2c:bc:25:85:8a:38:b1: 03:2d:a4:65:dc:52:a9:ff:35:ae:5e:34:0e:9a:ec:c7:29:66: 3a:7f:54:9a:f7:97:b3:5b:2a:50:c4:02:41:0e:17:c0:71:0d: 03:46:fa:e0:b8:7f:5d:cd:e0:c5:56:c7:b8:2f:f2:dd:5a:d3: 6b:14:c1:25:24:14:77:48:55:c6:b8:06:19:ca:83:61:b9:39: 48:9c:6d:1f:c5:34:a5:4e:dd:6b:5b:a2:83:d6:28:7c:16:c4: 7c:a6:d6:9d:af:82:dd:8a:af:2c:ca:aa:91:22:0e:97:11:a7: b4:28:c5:89:53:8a:99:45:ec:c7:00:c3:e4:80:25:bc:3c:24: dd:ad:98:fe:5c:1d:dc:ad:1d:d0:4a:c9:1f:e1:a2:6e:47:60: 47:d4:37:99:d7:95:97:85:5f:20:df:6e:0a:ba:49:c4:a1:3b: 3e:eb:86:b5:8c:63:ac:aa:26:be:90:ef:08:8c:f4:1e:b8:ac: 29:ff:52:e0:cc:13:b2:d5:ef:75:1f:7b:8a:ed:eb:e9:2e:c4: 44:b5:74:43:bd:7c:a9:be:6a:22:8b:b0:6e:1e:a1:42:2c:32: c7:7c:42:69 -----BEGIN CERTIFICATE----- MIIG0TCCBbmgAwIBAgIUAQ0Mn0MoWE7/d2z1jBAV/mC0LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk MjdlMmQ3ODctYjNlOC00ZmI5LTgyOGYtNTEwMDk3YTIzZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5DzIzaUghY7rtdPs+RcgN40bmqNEjo3ULwK AepEYRQaGAToD+mj5EQfwsnJntI4CUzU12rfq/csradVXLSPeZszguSSmc9Lv/Va WsrvFAy4l0FJdLp/O2118hG5HIrNmM4tFf/8DktmKVJ325TIKoJhzVmPV2U8Mkhs lprYttAYkUDkQLUQPByABac9NEPtinVqIc2xOnOXozqX27gmnjtdsU6NJIglW9CE Z8c9HE8NJ4ZruDGXUOWl8/J6+mbH8ujyXinGmfZAIyG/5K2k9Lwg2c+Ua4jPvTdC UFeVa+yJXyHyPJipaCl2lfQNRLwqxjhkGv0Wn0fTrXuEG/mlBwIDAQABo4ID4zCC A98wHQYDVR0OBBYEFAii6bDBSxermdY5ZhvRneZPc5u6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDg2OTlkZTgtNjNjNi0z ZTc5LWE1NjItNTRlNWU4YzBmNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMIGsBggrBgEFBQcBBwEB/wSBnDCBmTCBlgQCAAEwgY8DAwCh OgMEBsZBgAMEBcZB4AMDAMfwAwMAzjoDAwDOVgMEBs8VgAMEBs8WQAMEBs8fwAME Bs8gQAMDAM8hAwQHz2EAAwQHz5YAAwQHz5mAMAwDBAbPnsADBAbPnwADBAfPxAAD BAfPxYADBAfPxwADBAfPzgADAwDRRQMDANFLAwQH0YIAAwMA0Z0DAwDR7jBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQCgCJ8RpipJlJUlkgy3NWZLpkWM5aqiAx3J+zN3wSy8JYWKOLEDLaRl3FKp /zWuXjQOmuzHKWY6f1Sa95ezWypQxAJBDhfAcQ0DRvrguH9dzeDFVse4L/LdWtNr FMElJBR3SFXGuAYZyoNhuTlInG0fxTSlTt1rW6KD1ih8FsR8ptadr4Ldiq8syqqR Ig6XEae0KMWJU4qZRezHAMPkgCW8PCTdrZj+XB3crR3QSskf4aJuR2BH1DeZ15WX hV8g324KuknEoTs+64a1jGOsqia+kO8IjPQeuKwp/1LgzBOy1e91H3uK7evpLsRE tXRDvXypvmoii7BuHqFCLDLHfEJp -----END CERTIFICATE-----Generated at Thu Sep 3 12:05:48 2026 by rpki-client