$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e66698a-621d-3523-ab82-1ac01ade8d2c.roa File: 4e66698a-621d-3523-ab82-1ac01ade8d2c.roa (raw, json) Hash identifier: AQ+onYM8QbFllOyUE09L2yijT3eie+B8uEmK/D2faQg= Subject key identifier: F0:1E:C1:02:0B:C9:53:7B:48:47:84:3C:BE:8A:21:20:9C:67:9F:1F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BAEC7CB1C9F779F37236B7600 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e66698a-621d-3523-ab82-1ac01ade8d2c.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 137969 IP address blocks: 206.54.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:cb:1c:9f:77:9f:37:23:6b:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=2f3591e9-9c1a-4701-9be4-492ebe6f971c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:91:5d:8d:3f:9b:31:36:31:8e:bb:2e:d6:80: 90:bf:9b:21:84:2b:9b:64:43:e1:26:48:59:97:4b: 8a:7d:9d:09:62:2e:e6:c3:5f:42:63:7a:89:0d:6b: 02:86:5f:12:bc:7f:78:67:85:2b:90:f0:a0:a0:f4: a3:09:18:43:79:be:c3:09:83:84:4f:b0:cc:97:13: 79:e2:76:2b:82:9c:b1:d3:fe:6e:31:4d:a2:e2:59: b6:fe:8d:bc:ba:9a:68:10:73:52:92:b8:56:d1:13: 69:b2:c6:a2:d4:4f:f4:d8:46:6d:18:d9:8e:00:da: cf:24:84:57:9e:fe:d2:db:a4:58:a4:08:b5:41:6c: 9b:5c:a8:92:e0:2b:93:13:ec:68:37:e9:fd:b5:3d: 74:0a:fb:a5:97:e4:1b:4d:2c:d0:ac:d4:72:9f:bf: 63:c5:55:a7:2a:f2:a0:21:bd:67:99:33:60:22:35: 07:d6:df:cf:61:10:77:65:06:39:68:76:20:a2:51: 96:7e:88:18:f6:5c:d4:0c:85:c6:bd:5d:8c:2c:6d: 1f:9e:91:9b:8c:c5:4a:cb:67:0f:01:44:9b:ae:b8: 6e:9b:df:7b:88:a5:a3:26:18:93:f3:31:ee:7a:65: e7:fa:4c:4f:f1:a2:44:22:25:be:51:62:4d:6f:c5: 21:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1E:C1:02:0B:C9:53:7B:48:47:84:3C:BE:8A:21:20:9C:67:9F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4e66698a-621d-3523-ab82-1ac01ade8d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:95:69:4d:e4:05:21:2c:d5:76:40:e5:0a:fa:72:90:4a:aa: 99:38:00:75:30:c0:3c:4e:31:1e:81:79:15:25:34:7c:51:59: f0:61:f4:d0:de:83:8f:1a:97:40:20:47:17:63:c5:6f:5d:ec: a6:7c:a4:1d:74:7a:b9:99:90:ee:57:b4:66:fe:21:2c:3e:cf: 80:92:bb:13:0f:ad:f5:ae:1c:14:8c:f6:30:9e:a4:6c:aa:37: 5c:0b:97:0d:00:a5:e1:9c:4f:c0:10:f8:c2:40:92:aa:ba:8c: e8:32:27:58:29:1d:8f:a2:40:55:c2:96:26:f1:c3:4b:06:14: a6:52:9d:9c:fb:d5:d7:bf:bd:f1:a0:b5:34:b5:4e:25:a9:82: 8a:1f:a9:0f:70:3a:83:8d:d6:45:c8:32:02:de:bf:40:5c:7f: f7:98:4f:22:0f:ad:40:0c:0c:55:8c:ba:0e:c0:3e:78:b6:07: 58:7b:59:48:3b:68:e2:ba:d5:9d:f2:bc:ff:b8:ca:70:ce:a8: b3:21:4b:fb:52:af:31:33:cb:6c:3f:28:9f:db:72:cf:9a:6d: 69:88:be:63:9c:c0:ba:72:18:0a:59:08:7f:96:b0:db:f0:27: 5e:c7:83:a8:49:de:a0:4a:91:b1:0e:93:db:c5:de:20:80:93: 33:7e:25:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8scn3efNyNrdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MmYzNTkxZTktOWMxYS00NzAxLTliZTQtNDkyZWJlNmY5NzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJFdjT+bMTYxjrsu1oCQv5shhCubZEPhJkhZ l0uKfZ0JYi7mw19CY3qJDWsChl8SvH94Z4UrkPCgoPSjCRhDeb7DCYOET7DMlxN5 4nYrgpyx0/5uMU2i4lm2/o28uppoEHNSkrhW0RNpssai1E/02EZtGNmOANrPJIRX nv7S26RYpAi1QWybXKiS4CuTE+xoN+n9tT10Cvull+QbTSzQrNRyn79jxVWnKvKg Ib1nmTNgIjUH1t/PYRB3ZQY5aHYgolGWfogY9lzUDIXGvV2MLG0fnpGbjMVKy2cP AUSbrrhum997iKWjJhiT8zHuemXn+kxP8aJEIiW+UWJNb8UhSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAewQILyVN7SEeEPL6KISCcZ58fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGU2NjY5OGEtNjIxZC0z NTIzLWFiODItMWFjMDFhZGU4ZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjYaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOVaU3kBSEs1XZA5Qr6cpBKqpk4AHUwwDxOMR6BeRUlNHxRWfBh9NDe g48al0AgRxdjxW9d7KZ8pB10ermZkO5XtGb+ISw+z4CSuxMPrfWuHBSM9jCepGyq N1wLlw0ApeGcT8AQ+MJAkqq6jOgyJ1gpHY+iQFXClibxw0sGFKZSnZz71de/vfGg tTS1TiWpgoofqQ9wOoON1kXIMgLev0Bcf/eYTyIPrUAMDFWMug7APni2B1h7WUg7 aOK61Z3yvP+4ynDOqLMhS/tSrzEzy2w/KJ/bcs+abWmIvmOcwLpyGApZCH+WsNvw J17Hg6hJ3qBKkbEOk9vF3iCAkzN+JWY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:08 2025 by rpki-client