$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f778cde6-53b3-3b00-999b-c3c4987c127a.roa File: f778cde6-53b3-3b00-999b-c3c4987c127a.roa (raw, json) Hash identifier: lScEkRnGeXfW/A1g2hRl3XGW1SBUkpemInBO4xQPhqc= Subject key identifier: FF:10:28:83:37:EE:AF:2F:DD:82:CE:D3:11:D8:3F:3D:5B:C5:07:D5 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232BF08DB529B99C059A00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f778cde6-53b3-3b00-999b-c3c4987c127a.roa Signing time: Wed 19 Aug 2026 18:03:41 +0000 ROA not before: Wed 19 Aug 2026 18:03:41 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 128.241.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:2b:f0:8d:b5:29:b9:9c:05:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:41 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=f20ab12c-b55e-4166-8ac2-502c3bcebce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:84:f6:2e:19:3f:a4:b8:a7:43:79:4c:2a:02: a0:12:44:19:18:4d:14:09:c0:89:a2:3d:86:f2:07: b1:98:78:1b:21:0e:a2:ef:a5:1a:7b:43:54:7c:44: a1:d7:3c:9e:22:67:c0:97:fb:12:2b:0a:aa:44:c1: 0d:a1:5b:3d:c8:48:43:a4:ce:dc:e1:fe:28:8a:25: 28:a6:14:98:d8:b2:b3:37:6c:8c:70:b5:01:4c:2a: 96:46:9d:46:7f:71:e3:b1:08:eb:4a:92:43:a8:78: 2b:7a:90:0c:20:e8:b1:17:36:7b:37:82:87:d0:cf: e1:63:5f:0b:17:70:00:08:31:0e:27:9b:9d:67:78: cd:d8:ea:89:cb:a3:0b:43:12:c2:03:bb:0b:05:b3: 87:5f:13:e5:34:89:6c:0b:30:ea:b7:b0:66:82:ab: 51:f9:0b:db:b4:6a:df:c9:ca:01:02:5c:f4:7e:c6: bf:e7:f1:36:41:3d:9a:be:3a:32:cd:4a:9b:66:f6: 80:5a:c2:ad:36:3b:8f:a3:34:2a:b5:68:cd:d4:9b: d7:2b:95:7d:3d:69:e5:55:28:57:4d:dc:4b:7c:74: ab:b4:b1:c5:51:04:9a:11:c3:e3:43:95:f5:ac:da: 95:d5:a0:9d:a7:10:d2:87:e9:dc:16:4d:fe:31:d3: 6f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:10:28:83:37:EE:AF:2F:DD:82:CE:D3:11:D8:3F:3D:5B:C5:07:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f778cde6-53b3-3b00-999b-c3c4987c127a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:15:f7:7d:2c:e2:7f:14:57:ee:64:d6:c2:67:dd:14:dd:77: 0e:68:32:78:bc:a8:97:ae:4b:dc:13:ee:3e:ad:4f:4b:b8:ed: 68:41:0e:02:2d:7c:89:0f:a6:5a:51:6d:00:96:e2:35:13:b9: 8b:e0:46:45:46:00:08:bc:85:46:8f:80:dd:9c:52:b4:4f:26: 6b:a2:47:ab:8e:09:16:c8:ac:8d:01:8c:5b:b7:61:d2:ba:f4: b0:43:05:3c:be:1b:21:22:79:95:a5:43:0f:91:c0:4c:68:bd: 45:3c:3b:2b:69:ee:08:75:d3:b8:8e:ba:c7:0f:73:17:c6:84: 50:a7:00:e0:1e:ea:29:f6:ba:f2:df:d7:b2:ef:4c:bb:d1:46: 0a:b3:10:c3:94:86:63:76:cc:e3:41:58:99:fb:01:64:31:92: 98:ba:66:2a:e1:1b:80:52:ae:10:90:38:63:ec:55:4c:5b:3f: 1f:10:5f:40:a2:b2:30:3c:d4:09:19:d7:35:0e:1b:48:69:ec: 5e:8c:12:f1:5d:67:93:b0:8b:be:d9:dc:e7:64:35:54:2b:7d: 81:a2:50:2c:f5:e3:de:b3:5d:50:73:98:27:16:a7:42:61:42: 0a:ec:ae:fd:93:f4:67:4b:41:5e:42:df:4d:56:41:06:a9:c2: fb:4d:0b:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyvwjbUpuZwFmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0MVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ZjIwYWIxMmMtYjU1ZS00MTY2LThhYzItNTAyYzNiY2ViY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIT2Lhk/pLinQ3lMKgKgEkQZGE0UCcCJoj2G 8gexmHgbIQ6i76Uae0NUfESh1zyeImfAl/sSKwqqRMENoVs9yEhDpM7c4f4oiiUo phSY2LKzN2yMcLUBTCqWRp1Gf3HjsQjrSpJDqHgrepAMIOixFzZ7N4KH0M/hY18L F3AACDEOJ5udZ3jN2OqJy6MLQxLCA7sLBbOHXxPlNIlsCzDqt7BmgqtR+QvbtGrf ycoBAlz0fsa/5/E2QT2avjoyzUqbZvaAWsKtNjuPozQqtWjN1JvXK5V9PWnlVShX TdxLfHSrtLHFUQSaEcPjQ5X1rNqV1aCdpxDSh+ncFk3+MdNvuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8QKIM37q8v3YLO0xHYPz1bxQfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjc3OGNkZTYtNTNiMy0z YjAwLTk5OWItYzNjNDk4N2MxMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgPFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoV930s4n8UV+5k1sJn3RTddw5oMni8qJeuS9wT7j6tT0u47WhBDgIt fIkPplpRbQCW4jUTuYvgRkVGAAi8hUaPgN2cUrRPJmuiR6uOCRbIrI0BjFu3YdK6 9LBDBTy+GyEieZWlQw+RwExovUU8Oytp7gh107iOuscPcxfGhFCnAOAe6in2uvLf 17LvTLvRRgqzEMOUhmN2zONBWJn7AWQxkpi6ZirhG4BSrhCQOGPsVUxbPx8QX0Ci sjA81AkZ1zUOG0hp7F6MEvFdZ5Owi77Z3OdkNVQrfYGiUCz1496zXVBzmCcWp0Jh Qgrsrv2T9GdLQV5C301WQQapwvtNC80= -----END CERTIFICATE-----Generated at Thu Sep 17 21:34:07 2026 by rpki-client