$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4cf9a67d-e5e6-30e9-ab63-d07d7fa26616.roa File: 4cf9a67d-e5e6-30e9-ab63-d07d7fa26616.roa (raw, json) Hash identifier: HobzFRrb01/qSF5VmVCT5Y30paog3FY6yC2yh+RUrRM= Subject key identifier: 68:BA:36:42:1D:38:5C:B2:8D:20:8A:A0:18:3E:FF:57:19:98:69:31 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232ABDC185EFED72820480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4cf9a67d-e5e6-30e9-ab63-d07d7fa26616.roa Signing time: Wed 19 Aug 2026 18:03:40 +0000 ROA not before: Wed 19 Aug 2026 18:03:40 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 33517 IP address blocks: 204.2.154.196/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:2a:bd:c1:85:ef:ed:72:82:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:40 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=2e2a71a9-0964-40a1-b183-75331e76060d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3f:06:7b:dc:cf:98:95:f0:8d:3d:60:53:61: 13:6a:e9:74:0e:ec:89:f4:26:dc:e5:6c:3f:fa:a7: ea:21:26:9a:26:41:32:16:d9:fc:6a:80:e6:59:a7: 30:be:72:60:7e:0c:bc:7f:dc:94:d4:57:2a:a4:60: 07:e3:2a:87:90:ff:66:27:90:4d:17:3a:35:d2:4f: ce:3e:cf:13:dd:34:d9:3f:6c:44:cb:16:a0:da:39: d2:4f:ef:21:d2:d2:1f:3f:2a:72:a0:79:c9:62:28: be:3b:11:32:9d:96:6e:3b:8b:5e:f3:95:c2:25:96: 87:a8:8b:92:a0:73:49:9a:16:28:de:25:9f:9a:a9: 19:e3:76:98:39:cb:88:15:5b:b2:61:10:a4:65:c7: af:b2:d0:81:31:0d:ca:21:6c:ee:5e:f3:7d:ce:fb: cb:b4:12:82:96:96:46:1a:a7:c8:e0:dd:56:19:d9: da:19:43:1a:ee:05:f0:c8:72:71:eb:6c:8c:55:14: 30:bc:0a:33:ea:f9:70:1f:da:82:de:af:0d:52:92: da:77:c7:50:11:03:73:f8:d0:c7:e9:10:97:37:3c: ed:65:10:62:e6:b0:e1:ea:b6:8a:18:d1:0e:f1:29: be:9b:5f:e3:e5:97:99:cd:90:99:52:76:aa:80:04: 80:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BA:36:42:1D:38:5C:B2:8D:20:8A:A0:18:3E:FF:57:19:98:69:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4cf9a67d-e5e6-30e9-ab63-d07d7fa26616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.154.196/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:6a:37:74:1d:9c:9c:dd:30:53:d1:a6:5f:e2:c0:22:9c:f5: 2c:39:f2:fa:df:84:57:97:e1:f5:20:71:44:e7:0d:17:09:0d: fa:90:62:26:e4:14:a0:e7:74:eb:44:41:1a:d4:98:f8:94:7a: 5f:dc:f6:1e:54:f6:60:03:47:f9:fa:a5:b1:73:87:77:9f:d6: c5:03:4e:3b:e5:02:74:37:e3:0b:be:26:51:4e:4a:bb:54:15: 86:d9:fd:4c:81:ef:0b:cf:dd:fb:23:3e:9b:7c:be:68:4c:0f: 62:16:f2:17:9b:59:ab:c9:f9:be:aa:42:e6:e8:a5:36:7f:15: 43:64:a7:a1:ea:3d:29:ac:15:01:70:08:52:47:f6:3e:cd:ac: 06:6b:68:f0:7c:fd:2f:0a:ba:e5:6e:d6:f5:de:3c:60:4a:42: 27:7b:d7:22:21:8e:27:e6:8e:66:f2:3d:65:39:68:3c:49:bd: 9f:93:0c:76:b6:ab:58:86:b9:46:01:25:29:a2:41:d0:fe:38: fe:cb:52:ac:57:4e:4a:35:45:5c:cc:76:04:17:11:31:cc:7a: 87:39:ea:20:c8:11:9b:d9:c7:1d:0b:dd:f1:0d:ad:d1:0a:ce: 54:02:de:03:8b:ea:0b:f5:2a:0c:1f:65:93:63:c4:f7:b6:4c: fb:d3:6b:9a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7kIyq9wYXv7XKCBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk MmUyYTcxYTktMDk2NC00MGExLWIxODMtNzUzMzFlNzYwNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT8Ge9zPmJXwjT1gU2ETaul0DuyJ9Cbc5Ww/ +qfqISaaJkEyFtn8aoDmWacwvnJgfgy8f9yU1FcqpGAH4yqHkP9mJ5BNFzo10k/O Ps8T3TTZP2xEyxag2jnST+8h0tIfPypyoHnJYii+OxEynZZuO4te85XCJZaHqIuS oHNJmhYo3iWfmqkZ43aYOcuIFVuyYRCkZcevstCBMQ3KIWzuXvN9zvvLtBKClpZG GqfI4N1WGdnaGUMa7gXwyHJx62yMVRQwvAoz6vlwH9qC3q8NUpLad8dQEQNz+NDH 6RCXNzztZRBi5rDh6raKGNEO8Sm+m1/j5ZeZzZCZUnaqgASAmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGi6NkIdOFyyjSCKoBg+/1cZmGkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGNmOWE2N2QtZTVlNi0z MGU5LWFiNjMtZDA3ZDdmYTI2NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAzAKaxDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCbajd0HZyc3TBT0aZf4sAinPUsOfL634RXl+H1IHFE5w0XCQ36kGIm 5BSg53TrREEa1Jj4lHpf3PYeVPZgA0f5+qWxc4d3n9bFA0475QJ0N+MLviZRTkq7 VBWG2f1Mge8Lz937Iz6bfL5oTA9iFvIXm1mryfm+qkLm6KU2fxVDZKeh6j0prBUB cAhSR/Y+zawGa2jwfP0vCrrlbtb13jxgSkIne9ciIY4n5o5m8j1lOWg8Sb2fkwx2 tqtYhrlGASUpokHQ/jj+y1KsV05KNUVczHYEFxExzHqHOeogyBGb2ccdC93xDa3R Cs5UAt4Di+oL9SoMH2WTY8T3tkz702ua -----END CERTIFICATE-----Generated at Sun Sep 20 21:54:40 2026 by rpki-client