$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a7468b8f-bf6d-3561-a73f-12c58a6ce800.roa File: a7468b8f-bf6d-3561-a73f-12c58a6ce800.roa (raw, json) Hash identifier: ELnCicGyd2CBc1ZgAoMqcWtIyYqD/iS3xf7SB8tzFI4= Subject key identifier: C8:19:D1:A9:DC:CC:EA:F7:4F:93:26:83:D8:1D:13:6E:17:7B:39:3B Certificate issuer: /CN=a33a8548-3254-4c75-b176-b888068a1694 Certificate serial: 010D0C9F4328584EB63B3D2F0773924C0FA8C100 Authority key identifier: 12:A7:CD:E9:E8:60:3D:5C:D8:93:A1:D2:11:87:85:CD:A1:30:AC:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a7468b8f-bf6d-3561-a73f-12c58a6ce800.roa Signing time: Mon 03 Aug 2026 07:24:59 +0000 ROA not before: Mon 03 Aug 2026 07:24:59 +0000 ROA not after: Sun 01 Nov 2026 08:24:59 +0000 asID: 402847 IP address blocks: 169.128.120.0/23 maxlen: 23 198.22.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a33a8548-3254-4c75-b176-b888068a1694.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a33a8548-3254-4c75-b176-b888068a1694.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:3b:3d:2f:07:73:92:4c:0f:a8:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a33a8548-3254-4c75-b176-b888068a1694 Validity Not Before: Aug 3 07:24:59 2026 GMT Not After : Nov 1 08:24:59 2026 GMT Subject: CN=a6604793-afa1-4242-aa10-b2eb464b69a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:38:b4:84:b3:51:de:96:56:92:8b:3c:0d:99: bc:0e:88:04:e7:82:08:91:26:fc:36:b9:3a:fd:f1: da:af:31:4c:ff:f4:63:ab:a6:b8:48:59:60:fe:0c: 09:18:74:e9:08:1c:3e:6b:aa:ee:36:0b:ab:91:3a: 9c:92:ce:ce:06:bb:e5:4d:21:9b:31:94:c2:a2:6d: 75:eb:b2:3f:79:98:ce:aa:34:03:41:88:42:0b:8f: d6:24:bf:e4:2c:4b:7d:e4:88:7a:63:a7:6a:d7:e2: 7b:b5:72:df:a8:41:df:64:43:24:7c:55:79:6e:03: ab:80:cf:a4:df:b0:df:6b:cf:c3:3f:78:f0:90:68: 50:bf:c9:41:82:18:4d:b4:31:60:6c:5d:eb:21:75: d2:db:68:ad:66:ed:f8:f8:fb:46:48:73:7b:8e:ef: 74:10:5e:28:69:44:e1:0c:d5:2f:7f:cf:59:b4:09: ce:8a:9e:cb:a8:00:84:4c:a6:10:41:fc:bc:cc:3c: 1f:1d:03:9b:99:3e:24:c0:b7:ba:1b:12:12:6a:28: e3:66:e0:23:4f:85:e2:a3:c8:da:03:ae:02:ca:fe: ac:5d:44:37:6e:41:fe:e2:84:39:56:4e:65:d3:8b: 55:aa:cc:68:63:33:5a:78:69:25:72:16:3e:2a:a6: a2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:19:D1:A9:DC:CC:EA:F7:4F:93:26:83:D8:1D:13:6E:17:7B:39:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a7468b8f-bf6d-3561-a73f-12c58a6ce800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a33a8548-3254-4c75-b176-b888068a1694.crl X509v3 Authority Key Identifier: keyid:12:A7:CD:E9:E8:60:3D:5C:D8:93:A1:D2:11:87:85:CD:A1:30:AC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694.cer sbgp-ipAddrBlock: critical IPv4: 169.128.120.0/23 198.22.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:6f:c3:c0:6f:63:6c:15:a5:99:09:e9:77:e6:2d:15:58:59: 7d:5b:98:4a:2d:53:01:db:e8:bd:39:33:88:ab:d6:b3:e7:b9: 11:78:43:23:1c:f6:07:7b:a7:fa:36:10:01:83:62:e7:5d:2f: 54:c7:0d:e4:9e:32:94:32:f2:6b:16:1a:c5:06:31:0e:bd:28: 4b:45:2e:99:c3:ae:58:58:3a:b2:36:19:af:f0:ff:f4:76:59: 1d:76:2f:38:eb:9f:bd:79:aa:59:6d:44:86:59:36:6a:26:5d: 18:bb:f8:6e:2d:03:bc:06:5b:39:50:d3:ba:98:b1:16:92:c2: 8e:07:7a:7a:04:dd:08:fe:24:fb:6c:b6:58:23:06:a9:fa:61: b4:41:d5:ed:2e:1f:e9:8e:e3:44:8d:33:15:14:59:b7:f2:e0: e1:97:ac:e1:b1:29:23:be:89:ee:5f:30:09:59:77:5f:51:15: bf:b1:0a:a1:68:39:f4:97:81:5c:37:d8:d3:34:98:9c:e0:1c: 87:da:57:89:9a:0f:8d:e3:e0:c2:30:61:23:6d:fe:09:c4:fe: 39:72:1b:be:d8:bb:9b:d4:e3:3d:26:18:25:ed:98:56:c8:d4: ce:13:0d:4a:58:db:fd:46:67:76:db:38:c8:11:4d:9f:c9:09: e9:e3:3a:1b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE62Oz0vB3OSTA+owQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMzYTg1NDgtMzI1NC00Yzc1LWIxNzYtYjg4ODA2OGEx Njk0MB4XDTI2MDgwMzA3MjQ1OVoXDTI2MTEwMTA4MjQ1OVowLzEtMCsGA1UEAxMk YTY2MDQ3OTMtYWZhMS00MjQyLWFhMTAtYjJlYjQ2NGI2OWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Di0hLNR3pZWkos8DZm8DogE54IIkSb8Nrk6 /fHarzFM//Rjq6a4SFlg/gwJGHTpCBw+a6ruNgurkTqcks7OBrvlTSGbMZTCom11 67I/eZjOqjQDQYhCC4/WJL/kLEt95Ih6Y6dq1+J7tXLfqEHfZEMkfFV5bgOrgM+k 37Dfa8/DP3jwkGhQv8lBghhNtDFgbF3rIXXS22itZu34+PtGSHN7ju90EF4oaUTh DNUvf89ZtAnOip7LqACETKYQQfy8zDwfHQObmT4kwLe6GxISaijjZuAjT4Xio8ja A64Cyv6sXUQ3bkH+4oQ5Vk5l04tVqsxoYzNaeGklchY+Kqai+QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMgZ0anczOr3T5Mmg9gdE24Xezk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMzNh ODU0OC0zMjU0LTRjNzUtYjE3Ni1iODg4MDY4YTE2OTQvYTc0NjhiOGYtYmY2ZC0z NTYxLWE3M2YtMTJjNThhNmNlODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYTMzYTg1NDgtMzI1NC00Yzc1LWIx NzYtYjg4ODA2OGExNjk0L2EzM2E4NTQ4LTMyNTQtNGM3NS1iMTc2LWI4ODgwNjhh MTY5NC5jcmwwHwYDVR0jBBgwFoAUEqfN6ehgPVzYk6HSEYeFzaEwrBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMzNhODU0OC0zMjU0LTRjNzUtYjE3Ni1iODg4 MDY4YTE2OTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBqYB4AwQA xhaMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJlvw8BvY2wVpZkJ6XfmLRVYWX1bmEotUwHb6L05M4ir1rPn uRF4QyMc9gd7p/o2EAGDYuddL1THDeSeMpQy8msWGsUGMQ69KEtFLpnDrlhYOrI2 Ga/w//R2WR12Lzjrn715qlltRIZZNmomXRi7+G4tA7wGWzlQ07qYsRaSwo4HenoE 3Qj+JPtstlgjBqn6YbRB1e0uH+mO40SNMxUUWbfy4OGXrOGxKSO+ie5fMAlZd19R Fb+xCqFoOfSXgVw32NM0mJzgHIfaV4maD43j4MIwYSNt/gnE/jlyG77Yu5vU4z0m GCXtmFbI1M4TDUpY2/1GZ3bbOMgRTZ/JCenjOhs= -----END CERTIFICATE-----Generated at Tue Aug 25 19:11:09 2026 by rpki-client