$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f7e3b7b8-6653-355b-a079-71818f8f4bc3.roa File: f7e3b7b8-6653-355b-a079-71818f8f4bc3.roa (raw, json) Hash identifier: MMkSUYe26DxYzEa0073AZnH4qtgy0JjEd1esRY8kYOw= Subject key identifier: F3:0F:4C:65:91:92:3B:5A:89:4B:94:EC:CC:15:A0:46:67:51:B6:25 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232A3047473851EF96C580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f7e3b7b8-6653-355b-a079-71818f8f4bc3.roa Signing time: Wed 19 Aug 2026 18:03:40 +0000 ROA not before: Wed 19 Aug 2026 18:03:40 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 204.2.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:2a:30:47:47:38:51:ef:96:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:40 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=3e1640e3-1d75-4622-86dd-fc525578ac80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:27:20:72:af:a6:f7:a8:e4:cb:ac:3c:a0:b5: 53:ba:e2:ae:ca:ea:58:ec:33:66:dc:80:a8:c7:79: 82:2f:fe:ae:60:d4:75:ce:e1:b9:09:8e:e0:2b:46: ba:b8:06:75:cb:58:ae:cf:7b:f7:d2:b0:c1:39:3d: 6f:b7:df:06:a1:50:6e:9d:9f:d4:65:8b:88:3a:e2: d7:77:b6:66:99:e5:47:e3:a8:80:f8:91:84:2c:75: db:70:af:a0:67:65:26:11:0c:24:6b:a8:a0:ca:6d: 05:61:76:7d:7c:d9:91:12:bf:6a:64:b6:9c:5a:fa: 36:b5:f4:2d:4e:9a:13:54:5d:6c:9e:78:3d:54:42: c8:8b:45:8e:4f:41:09:54:87:3c:c5:9f:8e:60:69: 1b:99:58:06:99:ca:3f:41:ce:ec:5b:54:b3:c1:49: b2:ed:33:f4:e5:c4:e4:0b:30:2b:61:12:f7:60:28: 74:bf:57:e3:66:74:05:92:5a:09:e2:b8:94:81:e7: 56:fe:5a:15:f4:c6:cd:dc:f5:7b:7a:fc:47:10:94: bf:37:76:ad:94:2a:b8:76:15:56:b9:86:4a:ca:24: 86:36:e9:eb:13:fc:ba:ea:09:25:10:41:67:45:c6: c8:87:ec:c8:85:32:74:61:6c:89:d9:e9:2a:48:03: 2a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0F:4C:65:91:92:3B:5A:89:4B:94:EC:CC:15:A0:46:67:51:B6:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f7e3b7b8-6653-355b-a079-71818f8f4bc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:8a:92:f3:01:fd:c1:ae:a8:7d:db:d8:c6:b0:4f:66:94:24: 5c:bd:a1:0d:f2:31:9d:b7:c4:0d:0f:ed:a6:a9:7f:5a:f2:78: e7:44:93:ae:e7:db:cf:7e:0f:5a:64:d3:cc:18:f9:df:39:9f: 49:d9:18:25:43:7b:a9:9d:22:fe:eb:00:5d:b7:84:fd:42:59: e8:47:06:19:ce:f8:e9:3a:9a:e9:57:ae:d6:f1:6d:bf:0b:ff: 02:c7:c8:60:de:78:5a:66:aa:28:ce:53:93:09:0d:d7:91:12: c3:32:80:26:ae:2d:f9:84:3f:38:93:0c:a4:b2:f1:7f:f1:ca: f6:a5:00:a6:d3:d5:bb:6a:ff:61:07:07:3a:59:80:0a:fd:3f: 65:96:41:18:a2:33:f2:89:eb:b4:87:14:8d:2c:de:30:cd:87: c8:2b:8c:f3:77:b7:4a:8c:90:41:8e:2e:d5:cd:a7:b8:f3:03: 68:61:07:a9:a8:60:9c:25:d1:5c:b1:0c:b6:5d:17:ce:16:51: 11:3f:fe:f9:ef:59:a6:e5:30:31:6e:53:ab:02:11:ba:dd:09: c0:70:c0:0e:f9:ff:35:dc:08:46:64:67:89:83:45:3c:dc:36: 79:48:a0:67:42:a5:e4:7e:df:34:5b:d6:0b:49:d7:66:04:48: a8:cc:2b:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIyowR0c4Ue+WxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk M2UxNjQwZTMtMWQ3NS00NjIyLTg2ZGQtZmM1MjU1NzhhYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyicgcq+m96jky6w8oLVTuuKuyupY7DNm3ICo x3mCL/6uYNR1zuG5CY7gK0a6uAZ1y1iuz3v30rDBOT1vt98GoVBunZ/UZYuIOuLX d7ZmmeVH46iA+JGELHXbcK+gZ2UmEQwka6igym0FYXZ9fNmREr9qZLacWvo2tfQt TpoTVF1snng9VELIi0WOT0EJVIc8xZ+OYGkbmVgGmco/Qc7sW1SzwUmy7TP05cTk CzArYRL3YCh0v1fjZnQFkloJ4riUgedW/loV9MbN3PV7evxHEJS/N3atlCq4dhVW uYZKyiSGNunrE/y66gklEEFnRcbIh+zIhTJ0YWyJ2ekqSAMq7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMPTGWRkjtaiUuU7MwVoEZnUbYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjdlM2I3YjgtNjY1My0z NTViLWEwNzktNzE4MThmOGY0YmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAKpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKKkvMB/cGuqH3b2MawT2aUJFy9oQ3yMZ23xA0P7aapf1ryeOdEk67n 289+D1pk08wY+d85n0nZGCVDe6mdIv7rAF23hP1CWehHBhnO+Ok6mulXrtbxbb8L /wLHyGDeeFpmqijOU5MJDdeREsMygCauLfmEPziTDKSy8X/xyvalAKbT1btq/2EH BzpZgAr9P2WWQRiiM/KJ67SHFI0s3jDNh8grjPN3t0qMkEGOLtXNp7jzA2hhB6mo YJwl0VyxDLZdF84WURE//vnvWablMDFuU6sCEbrdCcBwwA75/zXcCEZkZ4mDRTzc NnlIoGdCpeR+3zRb1gtJ12YESKjMKw0= -----END CERTIFICATE-----Generated at Thu Sep 17 12:12:27 2026 by rpki-client