$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3329155e-38f7-3fe9-8293-6884349bc139.roa File: 3329155e-38f7-3fe9-8293-6884349bc139.roa (raw, json) Hash identifier: iM+PMPK6nx+sW10ZGSVp85yuG1Uy2Ws/wS73ISIF+F8= Subject key identifier: 9A:7F:1D:22:2A:39:BA:1F:5F:11:97:50:58:6C:AD:E7:47:81:C9:51 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CCBA74A3A8A9A34C4806A4D60 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3329155e-38f7-3fe9-8293-6884349bc139.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 7029 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:4a:3a:8a:9a:34:c4:80:6a:4d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=b665c894-2e1a-4ce4-a549-1eaa9273ced1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1f:25:da:a5:fd:22:90:b8:57:da:e6:c4:91: 27:8e:aa:bc:16:3a:fd:c5:37:e5:7f:2f:a4:0c:23: 64:f5:7b:1c:05:63:d3:a3:8f:dd:a7:95:62:6d:04: 4c:16:fb:5c:53:39:99:f2:e7:16:22:50:39:80:67: a3:9f:23:6c:4d:af:fb:c6:d4:bb:3f:a9:ec:0f:47: 54:d3:67:65:4f:76:b1:16:b0:f0:e7:10:be:0a:be: 5b:bf:b3:76:91:1e:ba:cc:2b:ae:5d:4b:ca:d9:fc: b6:80:18:00:2c:6b:3d:00:8d:6d:6c:40:9f:4f:88: 9c:26:93:1e:6d:44:c8:c7:a6:8d:06:8a:55:98:6d: ef:cb:3a:3c:37:04:3a:72:aa:f5:7a:43:60:b9:c1: 6c:3e:89:9b:07:dc:fd:27:e6:25:11:fa:27:e2:88: 51:fe:d2:dd:f6:e6:ee:37:f1:a8:5c:73:33:18:69: 23:9a:2d:4c:7a:65:52:eb:a8:69:b6:af:b6:c3:f0: 81:ef:ef:50:dd:32:46:b9:2e:f4:e3:00:7e:5a:8b: 5b:3e:21:c7:8b:92:5b:81:41:63:0f:10:b0:c6:a1: 69:9d:ae:87:a5:22:cc:46:94:38:81:e1:56:64:f9: 3d:2e:e3:72:62:b0:33:4a:73:2f:07:bc:30:2d:ed: fa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7F:1D:22:2A:39:BA:1F:5F:11:97:50:58:6C:AD:E7:47:81:C9:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3329155e-38f7-3fe9-8293-6884349bc139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:98:cc:7f:b8:c6:47:2a:52:3a:ad:d9:d9:c2:a1:a1:74:ac: d1:17:89:3b:a0:a3:46:3d:d4:e9:98:d7:8a:53:36:3e:3f:2e: 26:6c:a2:e6:bb:76:a2:66:de:4a:7f:79:79:23:c2:b0:27:e0: bc:c1:c6:00:47:53:0e:ff:75:cf:2c:c0:09:de:bd:60:13:70: 98:a0:a1:d8:18:a9:49:68:a1:53:d8:04:9a:b9:5c:85:ad:fa: 64:91:51:ec:9d:62:e4:97:a6:9a:3b:82:b3:8e:c2:a2:cb:75: af:fd:24:36:ac:35:4a:9b:0f:f2:06:07:2e:ae:a7:76:bf:a4: d8:b7:9f:4f:f5:3a:6d:1f:36:31:6e:06:d6:5c:81:18:6a:d6: 66:27:e3:eb:3d:bc:52:9a:db:c8:d4:0c:01:61:a4:b8:1f:d5: 84:8c:07:ec:85:1c:4d:71:35:29:1b:7f:10:19:64:9c:f6:5e: cd:9e:1f:09:18:3b:b8:b8:23:d9:c9:a5:04:08:3c:67:34:a3: fd:4a:5b:a2:d6:e9:8f:00:e9:00:81:ba:ef:28:ae:49:35:11: 37:73:cf:69:09:2f:06:66:a0:65:09:06:4d:51:00:f9:a4:5c: a8:db:2b:15:80:9d:43:92:49:79:ab:68:bc:26:31:d0:6f:77: 81:41:84:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp0o6ipo0xIBqTWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk YjY2NWM4OTQtMmUxYS00Y2U0LWE1NDktMWVhYTkyNzNjZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx8l2qX9IpC4V9rmxJEnjqq8Fjr9xTflfy+k DCNk9XscBWPTo4/dp5VibQRMFvtcUzmZ8ucWIlA5gGejnyNsTa/7xtS7P6nsD0dU 02dlT3axFrDw5xC+Cr5bv7N2kR66zCuuXUvK2fy2gBgALGs9AI1tbECfT4icJpMe bUTIx6aNBopVmG3vyzo8NwQ6cqr1ekNgucFsPombB9z9J+YlEfon4ohR/tLd9ubu N/GoXHMzGGkjmi1MemVS66hptq+2w/CB7+9Q3TJGuS704wB+WotbPiHHi5JbgUFj DxCwxqFpna6HpSLMRpQ4geFWZPk9LuNyYrAzSnMvB7wwLe36cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJp/HSIqObofXxGXUFhsredHgclRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzMyOTE1NWUtMzhmNy0z ZmU5LTgyOTMtNjg4NDM0OWJjMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeYzH+4xkcqUjqt2dnCoaF0rNEXiTugo0Y91OmY14pTNj4/LiZsoua7 dqJm3kp/eXkjwrAn4LzBxgBHUw7/dc8swAnevWATcJigodgYqUlooVPYBJq5XIWt +mSRUeydYuSXppo7grOOwqLLda/9JDasNUqbD/IGBy6up3a/pNi3n0/1Om0fNjFu BtZcgRhq1mYn4+s9vFKa28jUDAFhpLgf1YSMB+yFHE1xNSkbfxAZZJz2Xs2eHwkY O7i4I9nJpQQIPGc0o/1KW6LW6Y8A6QCBuu8orkk1ETdzz2kJLwZmoGUJBk1RAPmk XKjbKxWAnUOSSXmraLwmMdBvd4FBhLw= -----END CERTIFICATE-----Generated at Mon Mar 2 11:40:21 2026 by rpki-client