$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8/d4183f15-43b8-331b-aaf1-7dfd95f16f10.roa File: d4183f15-43b8-331b-aaf1-7dfd95f16f10.roa (raw, json) Hash identifier: JWZpJpuhxV04U0q36GvWMUgt4fmKP+8/8CgA8Y3Cfl4= Subject key identifier: DD:39:C9:8E:A7:C2:68:60:F1:4A:3F:AA:20:37:DD:02:32:EE:7D:91 Certificate issuer: /CN=9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8 Certificate serial: 010D0C9F4328584EC371B3109CB5A813B125B700 Authority key identifier: E7:62:4B:80:8E:3C:E1:F9:BB:94:F6:79:09:EE:81:9D:A7:C4:D9:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8/d4183f15-43b8-331b-aaf1-7dfd95f16f10.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 23037 IP address blocks: 192.190.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:b3:10:9c:b5:a8:13:b1:25:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=ca93a80b-7ad6-4309-a55e-04ef53da35c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:97:b7:ed:93:55:7c:43:5b:77:0b:3e:2f: a9:25:b0:59:ac:f7:d3:05:6c:5e:6c:e4:53:ff:cc: e4:f7:02:36:ca:d1:2b:de:ab:7a:5b:03:e2:2b:95: 39:11:fd:b4:02:1b:5f:ec:63:2e:2a:41:c7:e7:83: ef:b3:53:c9:3b:0e:15:ef:4b:2f:15:06:6d:27:73: b3:43:07:3a:cc:a5:23:61:b3:72:70:5b:f3:01:46: 4e:48:51:52:7f:30:54:72:ae:46:f0:2a:80:1d:bf: 16:cc:96:83:92:a2:a8:54:da:96:2f:6a:aa:4c:07: 7d:41:aa:e5:8f:4b:97:ae:65:ef:13:6c:ca:a1:b2: cf:d3:38:7e:4b:71:a6:6e:4e:95:cc:6b:c3:dd:7e: 76:e2:94:57:8b:1c:b4:2d:77:26:1e:b8:50:b5:c1: ec:ca:79:30:fa:b0:c8:57:2f:55:aa:55:07:63:9b: 4b:55:37:d9:74:bc:2a:0c:b9:8c:aa:17:36:26:53: 05:81:ed:2d:57:e4:a2:4b:d0:e1:a6:42:a2:d4:f6: ed:c2:f0:08:f5:54:05:48:68:6a:f1:94:2a:ba:62: b5:f3:90:54:4a:5b:c3:22:bb:ee:11:58:dc:44:83: 26:8d:45:4d:c3:49:44:69:41:d3:be:1d:0d:9e:83: 12:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:39:C9:8E:A7:C2:68:60:F1:4A:3F:AA:20:37:DD:02:32:EE:7D:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8/d4183f15-43b8-331b-aaf1-7dfd95f16f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8.crl X509v3 Authority Key Identifier: keyid:E7:62:4B:80:8E:3C:E1:F9:BB:94:F6:79:09:EE:81:9D:A7:C4:D9:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9017b633-e4eb-4f4b-b6fa-b43e74eb0fe8.cer sbgp-ipAddrBlock: critical IPv4: 192.190.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:cc:01:48:3a:65:c0:4f:dd:99:bf:38:a0:3f:52:f4:20:f8: b3:da:9e:a1:1f:c3:9b:78:88:a5:8a:e8:1e:db:8b:8e:e9:05: cc:21:89:fa:87:c2:76:f0:c2:74:a4:43:17:28:63:c9:f6:50: 39:f8:37:ae:ea:a1:22:dd:99:07:d5:44:ea:a2:7c:13:28:2d: 7f:f0:48:02:b1:73:f0:6b:e7:af:96:2b:30:18:1b:fe:2c:24: 53:ff:69:5e:0a:a4:ec:5e:c6:9f:66:fc:b4:2b:99:b2:b5:d7: 4d:ed:53:77:7e:bf:a4:db:dc:62:61:4a:d3:79:01:6b:d5:ba: f8:ca:b0:60:fc:9c:04:d7:7f:fa:21:36:c0:34:25:c6:d8:8e: a8:78:f8:36:51:09:ae:0e:24:84:f8:4f:f8:56:09:d0:9e:59: f3:81:25:4b:c4:0e:e0:8d:1c:00:63:22:60:70:29:63:8b:df: 92:32:fa:83:c3:96:1a:83:01:7f:4b:98:4d:37:74:eb:0e:f9: c9:e8:a0:8c:f5:21:99:10:f6:56:0c:00:f3:14:eb:8c:8d:80: 2f:8a:f3:46:9d:18:03:4b:ca:b5:f5:05:63:7d:35:62:25:5f: 83:c8:e0:15:74:18:e8:d3:bb:d1:d0:6a:2d:9a:9c:40:2b:37: 17:0b:65:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcbMQnLWoE7EltwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAxN2I2MzMtZTRlYi00ZjRiLWI2ZmEtYjQzZTc0ZWIw ZmU4MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk Y2E5M2E4MGItN2FkNi00MzA5LWE1NWUtMDRlZjUzZGEzNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZqXt+2TVXxDW3cLPi+pJbBZrPfTBWxebORT /8zk9wI2ytEr3qt6WwPiK5U5Ef20Ahtf7GMuKkHH54Pvs1PJOw4V70svFQZtJ3Oz Qwc6zKUjYbNycFvzAUZOSFFSfzBUcq5G8CqAHb8WzJaDkqKoVNqWL2qqTAd9Qarl j0uXrmXvE2zKobLP0zh+S3Gmbk6VzGvD3X524pRXixy0LXcmHrhQtcHsynkw+rDI Vy9VqlUHY5tLVTfZdLwqDLmMqhc2JlMFge0tV+SiS9DhpkKi1PbtwvAI9VQFSGhq 8ZQqumK185BUSlvDIrvuEVjcRIMmjUVNw0lEaUHTvh0NnoMSZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN05yY6nwmhg8Uo/qiA33QIy7n2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85MDE3 YjYzMy1lNGViLTRmNGItYjZmYS1iNDNlNzRlYjBmZTgvZDQxODNmMTUtNDNiOC0z MzFiLWFhZjEtN2RmZDk1ZjE2ZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTAxN2I2MzMtZTRlYi00ZjRiLWI2 ZmEtYjQzZTc0ZWIwZmU4LzkwMTdiNjMzLWU0ZWItNGY0Yi1iNmZhLWI0M2U3NGVi MGZlOC5jcmwwHwYDVR0jBBgwFoAU52JLgI484fm7lPZ5Ce6BnafE2f8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85MDE3YjYzMy1lNGViLTRmNGItYjZmYS1iNDNl NzRlYjBmZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL6FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDMAUg6ZcBP3Zm/OKA/UvQg+LPanqEfw5t4iKWK6B7bi47pBcwhifqH wnbwwnSkQxcoY8n2UDn4N67qoSLdmQfVROqifBMoLX/wSAKxc/Br56+WKzAYG/4s JFP/aV4KpOxexp9m/LQrmbK1103tU3d+v6Tb3GJhStN5AWvVuvjKsGD8nATXf/oh NsA0JcbYjqh4+DZRCa4OJIT4T/hWCdCeWfOBJUvEDuCNHABjImBwKWOL35Iy+oPD lhqDAX9LmE03dOsO+cnooIz1IZkQ9lYMAPMU64yNgC+K80adGANLyrX1BWN9NWIl X4PI4BV0GOjTu9HQai2anEArNxcLZW0= -----END CERTIFICATE-----Generated at Tue Aug 25 10:13:30 2026 by rpki-client