$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8658ca45-d456-3ddf-aefa-eac8b1df7650.roa File: 8658ca45-d456-3ddf-aefa-eac8b1df7650.roa (raw, json) Hash identifier: 04fqLQxTwRua9xfMhfZVMYI4oIJyc+dRUUMVvdjO4Dk= Subject key identifier: 58:36:65:2A:2C:88:C0:DE:EC:74:85:1C:D1:B1:A1:78:05:53:1E:C6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F20F7A0935285E0BC4B82DDE0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8658ca45-d456-3ddf-aefa-eac8b1df7650.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 13335 IP address blocks: 207.57.150.0/24 maxlen: 24 207.57.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a0:93:52:85:e0:bc:4b:82:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=9b233d8d-4a7f-4cee-8fa8-233a85181f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8f:36:76:69:a8:88:de:8e:1f:2d:b0:0d:bb: 9d:71:9b:b8:80:08:31:c3:50:ac:c2:7e:88:b8:01: 11:9f:00:6d:9c:c9:61:f1:15:64:59:43:6f:f4:83: 7e:d3:45:d9:73:55:ee:48:7b:59:45:24:a2:09:c0: e5:ba:e5:5a:62:98:5f:95:34:05:75:f8:68:53:b4: 8f:f7:b9:d8:2b:eb:e8:a2:70:f7:82:c4:e4:4e:c4: f7:d1:96:c9:6a:6d:b0:dd:4e:0d:94:b9:f2:c4:e9: c1:55:b5:c5:6f:b3:e5:c9:0d:72:bb:56:c5:49:11: fd:7f:dc:ae:cd:63:d7:1f:95:a9:6b:0b:51:0e:7a: 44:64:c1:14:00:b6:72:5b:54:be:97:2a:c0:50:08: b7:dd:33:8a:6c:7b:a5:5a:98:be:97:e7:e9:f2:79: 90:15:6c:9d:26:42:f8:86:a4:13:0b:63:4e:ef:74: c7:26:b8:b1:7a:93:90:2e:fd:6c:95:2c:1c:8c:96: 4f:4c:be:6c:85:f0:ad:c5:15:44:cb:63:79:6c:c3: af:36:0e:52:f8:0f:7a:86:a0:75:72:b7:5d:33:4d: bf:e5:d7:22:3c:a7:11:2c:45:ef:52:97:7b:16:34: f5:36:93:b3:b9:3b:8b:19:76:e1:4b:dc:1c:0b:be: 4c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:36:65:2A:2C:88:C0:DE:EC:74:85:1C:D1:B1:A1:78:05:53:1E:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8658ca45-d456-3ddf-aefa-eac8b1df7650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.57.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:aa:43:ee:26:70:14:4c:2c:c2:9a:a5:45:d5:e9:2c:f3:87: 1e:e1:d7:9d:ea:c5:b8:00:26:bc:b5:b1:07:3b:ef:95:e5:8f: 02:45:14:9f:fc:5e:0a:34:ed:43:b9:49:a5:59:5a:79:b0:aa: 06:94:80:3d:4a:de:ac:01:17:39:7a:06:03:18:8b:95:12:b4: 57:27:e4:a2:5b:5c:7b:ce:d7:68:5c:57:ca:6b:b6:3e:9a:65: c6:86:6c:1c:4a:d3:9e:fd:b4:3e:ac:81:cb:5c:ca:df:55:db: b1:97:91:20:0d:57:7e:84:fd:9c:b1:21:9c:8c:83:7f:ac:44: 37:a3:5c:53:bd:5e:47:27:bb:fb:54:b3:1b:70:46:ee:c5:fa: 6b:f2:ed:39:d8:9e:fe:28:d8:f5:c6:47:75:71:d3:c2:14:9d: d1:d3:db:98:10:db:8a:bd:ea:60:d8:23:91:ba:36:e1:e9:e6: c3:3d:6c:9e:62:81:2b:17:4c:7a:10:a7:26:c7:14:e6:01:13: 93:dd:8f:11:75:d7:54:a5:04:29:9c:c2:37:4f:38:a3:59:cd: ef:d3:df:d3:9c:36:ea:0e:dd:21:43:14:93:9a:d5:fb:c9:4a: 8f:76:02:5a:3d:d2:81:d9:a9:43:05:13:59:90:40:e2:8b:54: 26:fa:e6:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96CTUoXgvEuC3eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OWIyMzNkOGQtNGE3Zi00Y2VlLThmYTgtMjMzYTg1MTgxZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI82dmmoiN6OHy2wDbudcZu4gAgxw1Cswn6I uAERnwBtnMlh8RVkWUNv9IN+00XZc1XuSHtZRSSiCcDluuVaYphflTQFdfhoU7SP 97nYK+voonD3gsTkTsT30ZbJam2w3U4NlLnyxOnBVbXFb7PlyQ1yu1bFSRH9f9yu zWPXH5WpawtRDnpEZMEUALZyW1S+lyrAUAi33TOKbHulWpi+l+fp8nmQFWydJkL4 hqQTC2NO73THJrixepOQLv1slSwcjJZPTL5shfCtxRVEy2N5bMOvNg5S+A96hqB1 crddM02/5dciPKcRLEXvUpd7FjT1NpOzuTuLGXbhS9wcC75MnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg2ZSosiMDe7HSFHNGxoXgFUx7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODY1OGNhNDUtZDQ1Ni0z ZGRmLWFlZmEtZWFjOGIxZGY3NjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzzmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyqQ+4mcBRMLMKapUXV6Szzhx7h153qxbgAJry1sQc775XljwJFFJ/8 Xgo07UO5SaVZWnmwqgaUgD1K3qwBFzl6BgMYi5UStFcn5KJbXHvO12hcV8prtj6a ZcaGbBxK0579tD6sgctcyt9V27GXkSANV36E/ZyxIZyMg3+sRDejXFO9Xkcnu/tU sxtwRu7F+mvy7TnYnv4o2PXGR3Vx08IUndHT25gQ24q96mDYI5G6NuHp5sM9bJ5i gSsXTHoQpybHFOYBE5PdjxF111SlBCmcwjdPOKNZze/T39OcNuoO3SFDFJOa1fvJ So92Alo90oHZqUMFE1mQQOKLVCb65lk= -----END CERTIFICATE-----Generated at Mon Sep 21 03:38:27 2026 by rpki-client