$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f028686d-1605-3c7d-8ae0-cf9f013f3c62.roa File: f028686d-1605-3c7d-8ae0-cf9f013f3c62.roa (raw, json) Hash identifier: By898/JG9sK0MSl/H7T0fHHVjuk9uXqu+1kV+VPp+P4= Subject key identifier: 70:FE:CC:78:CC:D1:4E:2B:7E:70:A8:07:E6:88:DB:84:C0:7A:9B:BB Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F0AA225F0208A5584347F82C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f028686d-1605-3c7d-8ae0-cf9f013f3c62.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 7459 IP address blocks: 161.58.0.0/16 maxlen: 24 198.65.128.0/19 maxlen: 24 207.150.0.0/17 maxlen: 24 207.153.128.0/18 maxlen: 24 207.153.192.0/18 maxlen: 24 207.196.0.0/17 maxlen: 24 207.197.128.0/17 maxlen: 24 207.199.0.0/17 maxlen: 24 207.206.0.0/17 maxlen: 24 209.69.0.0/16 maxlen: 24 209.75.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:25:f0:20:8a:55:84:34:7f:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=336360b7-8d79-488f-831d-32cad986cdb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bf:ff:97:23:9f:ee:df:d9:92:4e:08:46:2a: 6f:fb:6e:a7:ba:eb:29:c1:8a:60:de:50:08:ce:e9: 5c:af:2c:64:92:c4:2e:8e:60:04:59:4c:63:13:8f: 5c:87:0d:88:41:87:df:b3:3a:6e:2f:5b:2e:4c:9f: ce:d2:3e:9a:27:54:6b:76:8f:eb:38:a3:0d:c8:51: 92:9d:21:f9:36:65:b4:e6:94:98:09:9f:a7:c3:dd: 69:77:34:c0:0b:fe:46:bc:9c:b7:8f:14:9d:a6:71: 2f:51:46:22:46:b4:83:2b:70:ad:4e:38:c1:ff:86: d2:59:52:cc:7e:33:75:4c:23:e2:d3:80:81:fb:8d: 67:0b:13:84:4b:f1:02:b1:39:dc:0a:3f:0f:59:a4: 2f:5d:5a:af:c5:69:84:95:e6:08:05:56:a1:81:82: cd:19:95:66:79:1d:0c:61:64:af:79:b9:7a:e1:24: 34:d4:af:6e:31:0a:f2:d2:e3:b9:4e:09:5c:f6:eb: 8d:e3:32:4e:bd:48:93:fa:e8:ff:9a:ac:85:96:a7: 4b:12:b3:6d:a0:6c:2b:b4:1e:d8:7b:18:49:da:86: 77:29:e2:3f:12:42:2a:e5:1d:c2:b9:35:c2:2d:08: 17:02:7c:b8:fe:f2:a6:e8:9a:b3:b6:b7:0f:e4:53: df:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FE:CC:78:CC:D1:4E:2B:7E:70:A8:07:E6:88:DB:84:C0:7A:9B:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f028686d-1605-3c7d-8ae0-cf9f013f3c62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 161.58.0.0/16 198.65.128.0/19 207.150.0.0/17 207.153.128.0/17 207.196.0.0/17 207.197.128.0/17 207.199.0.0/17 207.206.0.0/17 209.69.0.0/16 209.75.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:24:5b:94:c2:d3:78:be:66:8b:16:43:0d:0f:54:f3:b9:8e: c9:4d:35:08:c5:9b:7f:67:34:ac:81:5e:fd:a1:d7:bd:f1:c7: 43:1b:42:2b:b1:86:11:d1:2f:25:61:38:af:68:ee:c3:a3:0f: 2f:d9:c8:0b:d6:3b:13:0f:c2:da:6b:28:5f:7b:23:f1:f5:68: 57:69:89:cd:34:e0:8e:0a:de:d8:9e:fb:28:62:c8:bc:58:c8: 32:71:75:91:6b:9f:15:5a:14:af:66:7a:9f:84:0c:15:dd:de: c2:1b:95:fd:23:8b:11:94:c1:29:1f:52:8f:6b:c0:b5:1b:07: c6:dd:66:ef:ce:96:60:94:cd:a2:1a:c0:d0:1b:1c:d5:2f:ae: 3e:ef:8b:e9:f1:b2:ce:f9:33:d3:19:62:ab:b1:42:b9:7a:59: 96:c6:bb:4e:cb:7b:80:f8:92:79:f6:90:6c:62:41:f1:2b:32: de:64:af:79:0d:ae:c5:33:e8:52:f5:da:39:9a:49:b6:2a:70: b9:db:00:67:18:26:1c:8a:a4:bb:25:7b:58:5f:08:d7:74:0e: fa:3c:56:07:e2:bc:c2:ce:b6:d5:8f:51:e3:83:ec:f6:cb:ef: 6d:45:03:d7:0e:79:5c:2a:74:4b:c2:3e:9f:89:03:1e:db:45: 72:52:b1:cc -----BEGIN CERTIFICATE----- MIIGdjCCBV6gAwIBAgIUAQ0Mn0MoWE8KoiXwIIpVhDR/gsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk MzM2MzYwYjctOGQ3OS00ODhmLTgzMWQtMzJjYWQ5ODZjZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL//lyOf7t/Zkk4IRipv+26nuuspwYpg3lAI zulcryxkksQujmAEWUxjE49chw2IQYffszpuL1suTJ/O0j6aJ1Rrdo/rOKMNyFGS nSH5NmW05pSYCZ+nw91pdzTAC/5GvJy3jxSdpnEvUUYiRrSDK3CtTjjB/4bSWVLM fjN1TCPi04CB+41nCxOES/ECsTncCj8PWaQvXVqvxWmEleYIBVahgYLNGZVmeR0M YWSvebl64SQ01K9uMQry0uO5Tglc9uuN4zJOvUiT+uj/mqyFlqdLErNtoGwrtB7Y exhJ2oZ3KeI/EkIq5R3CuTXCLQgXAny4/vKm6JqztrcP5FPfgwIDAQABo4IDiDCC A4QwHQYDVR0OBBYEFHD+zHjM0U4rfnCoB+aI24TAepu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjAyODY4NmQtMTYwNS0z YzdkLThhZTAtY2Y5ZjAxM2YzYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFIGCCsGAQUFBwEHAQH/BEMwQTA/BAIAATA5AwMAoToDBAXG QYADBAfPlgADBAfPmYADBAfPxAADBAfPxYADBAfPxwADBAfPzgADAwDRRQMDANFL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALkkW5TC03i+ZosWQw0PVPO5jslNNQjFm39nNKyBXv2h173xx0Mb QiuxhhHRLyVhOK9o7sOjDy/ZyAvWOxMPwtprKF97I/H1aFdpic004I4K3tie+yhi yLxYyDJxdZFrnxVaFK9mep+EDBXd3sIblf0jixGUwSkfUo9rwLUbB8bdZu/OlmCU zaIawNAbHNUvrj7vi+nxss75M9MZYquxQrl6WZbGu07Le4D4knn2kGxiQfErMt5k r3kNrsUz6FL12jmaSbYqcLnbAGcYJhyKpLsle1hfCNd0Dvo8VgfivMLOttWPUeOD 7PbL721FA9cOeVwqdEvCPp+JAx7bRXJSscw= -----END CERTIFICATE-----Generated at Thu Sep 3 09:25:18 2026 by rpki-client