$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fd6f6676-8dba-3de4-81bd-dc984fe01c8a.roa File: fd6f6676-8dba-3de4-81bd-dc984fe01c8a.roa (raw, json) Hash identifier: J1FQlK9OWja6Cl9crAxuizZuj+nB7QawZC6JraHd+Vk= Subject key identifier: 70:F8:6E:A9:9A:11:75:FF:95:63:1F:7E:AF:EF:3D:BE:D4:D1:53:CE Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233E1067E17A22504B5580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fd6f6676-8dba-3de4-81bd-dc984fe01c8a.roa Signing time: Wed 19 Aug 2026 18:03:50 +0000 ROA not before: Wed 19 Aug 2026 18:03:50 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 19271 IP address blocks: 199.237.48.0/21 maxlen: 24 199.237.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3e:10:67:e1:7a:22:50:4b:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:50 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=829a1e9a-eb71-40c4-befc-0c3d6e9c0f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:0e:07:60:09:ee:7c:07:32:03:91:2e:1c: 7a:66:20:ec:77:b4:dd:73:f2:70:ea:ad:53:ab:94: b9:c2:14:77:ec:b8:cd:c3:a4:12:9c:b1:62:63:0b: 79:77:c5:89:10:18:2f:db:67:a2:a9:37:4d:8b:3e: 17:a3:65:9e:fc:0f:b3:63:f6:c8:4f:5d:42:9d:58: f2:ff:6f:f8:95:c2:4b:3f:13:57:7a:53:ad:21:f0: 51:7e:9a:02:2c:fa:c5:2d:e9:fa:2a:f2:96:fb:ed: 86:ef:d6:11:cc:b6:93:fd:40:14:9c:df:2c:cc:59: 1e:98:2e:bc:7c:1f:39:3b:46:ee:dc:9d:b5:7a:94: ea:41:85:dc:38:c1:92:5d:a9:34:c8:60:15:32:cc: f2:48:0b:99:ca:76:c8:a3:2c:ce:3d:e0:cb:32:01: 32:0b:bc:b4:1e:5b:30:a5:ea:fa:d3:cb:45:fd:6c: 02:1f:92:c6:c1:82:5a:2e:9b:26:c3:ae:28:d1:56: 63:ee:14:8c:a3:f5:6d:cf:ae:f3:0b:e8:6b:07:03: b8:e0:90:43:86:3f:e0:2e:96:6d:4f:2d:bc:be:f8: cb:4d:9b:8b:8c:1e:5a:60:0e:6e:44:5c:78:0a:a8: 54:61:6d:88:bd:59:c6:be:0d:8d:21:b6:80:f2:0d: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F8:6E:A9:9A:11:75:FF:95:63:1F:7E:AF:EF:3D:BE:D4:D1:53:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fd6f6676-8dba-3de4-81bd-dc984fe01c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 199.237.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:30:49:7c:f8:17:66:6c:d5:70:b7:9e:10:37:18:b6:2b:64: 3f:71:93:fe:65:fa:c1:ef:56:62:56:a8:30:c6:ee:54:9c:88: f5:5b:a1:83:c4:06:e9:9e:57:17:7d:31:f1:ab:27:de:af:77: 50:a8:99:d9:52:0f:0c:0c:50:62:2c:2d:cb:de:92:6c:15:c0: 2d:f8:be:ac:52:34:74:bd:c3:1d:8c:a7:07:f8:98:5e:82:39: 93:5e:80:ea:7b:fd:18:13:94:1a:32:05:26:53:94:b1:69:06: 19:12:ee:eb:fd:4c:65:c6:31:f1:26:ad:1b:f3:ce:5b:ce:33: 7e:26:38:cd:23:aa:6e:bb:29:51:d1:a8:f2:8e:d6:e5:91:b4: 41:53:d5:c6:93:72:2e:7e:76:5f:b6:55:28:73:ba:3c:4d:b5: 3c:3f:94:25:23:3a:29:f1:44:b2:ab:d6:be:ef:3c:fe:f3:66: 18:8b:03:7f:28:c4:76:d3:b5:ec:01:c2:38:7a:e0:46:ce:2d: c4:90:c3:07:1b:c9:44:3a:a0:8f:92:05:52:e7:db:40:58:38: e0:45:77:45:4a:dd:e0:1f:b1:d7:e3:af:40:8d:f3:11:62:ce: 09:cb:51:db:26:b8:cd:ad:1e:0c:70:55:8f:e7:32:bf:2d:93: 3b:74:90:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kIz4QZ+F6IlBLVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ODI5YTFlOWEtZWI3MS00MGM0LWJlZmMtMGMzZDZlOWMwZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsToOB2AJ7nwHMgORLhx6ZiDsd7Tdc/Jw6q1T q5S5whR37LjNw6QSnLFiYwt5d8WJEBgv22eiqTdNiz4Xo2We/A+zY/bIT11CnVjy /2/4lcJLPxNXelOtIfBRfpoCLPrFLen6KvKW++2G79YRzLaT/UAUnN8szFkemC68 fB85O0bu3J21epTqQYXcOMGSXak0yGAVMszySAuZynbIoyzOPeDLMgEyC7y0Hlsw per608tF/WwCH5LGwYJaLpsmw64o0VZj7hSMo/Vtz67zC+hrBwO44JBDhj/gLpZt Ty28vvjLTZuLjB5aYA5uRFx4CqhUYW2IvVnGvg2NIbaA8g1cWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHD4bqmaEXX/lWMffq/vPb7U0VPOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmQ2ZjY2NzYtOGRiYS0z ZGU0LTgxYmQtZGM5ODRmZTAxYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx+0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0wSXz4F2Zs1XC3nhA3GLYrZD9xk/5l+sHvVmJWqDDG7lSciPVboYPE BumeVxd9MfGrJ96vd1ComdlSDwwMUGIsLcvekmwVwC34vqxSNHS9wx2Mpwf4mF6C OZNegOp7/RgTlBoyBSZTlLFpBhkS7uv9TGXGMfEmrRvzzlvOM34mOM0jqm67KVHR qPKO1uWRtEFT1caTci5+dl+2VShzujxNtTw/lCUjOinxRLKr1r7vPP7zZhiLA38o xHbTtewBwjh64EbOLcSQwwcbyUQ6oI+SBVLn20BYOOBFd0VK3eAfsdfjr0CN8xFi zgnLUdsmuM2tHgxwVY/nMr8tkzt0kHE= -----END CERTIFICATE-----Generated at Thu Sep 3 08:29:10 2026 by rpki-client