$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa File: 8da6384b-e652-36de-b69d-ac9de12cdc66.roa (raw, json) Hash identifier: +mBD9pl6FcQ9wybQyR3pRRuIlpw7xlDojgnz2S3nwJo= Subject key identifier: B0:B8:D2:D1:07:2C:B6:58:FE:3F:2C:3B:51:6A:DD:C7:2D:A9:0F:8D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E016B4F43EBFC30A4537C7280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa Signing time: Sat 30 May 2026 13:00:10 +0000 ROA not before: Sat 30 May 2026 13:00:10 +0000 ROA not after: Fri 28 Aug 2026 13:00:10 +0000 asID: 141193 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:01:6b:4f:43:eb:fc:30:a4:53:7c:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 30 13:00:10 2026 GMT Not After : Aug 28 13:00:10 2026 GMT Subject: CN=820009f0-858a-4a85-8bc4-1fa16c875451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e4:9f:49:f7:c9:fa:60:43:ab:3c:a8:5d:9d: 59:3f:2b:fa:69:e6:be:35:42:28:5a:83:0a:97:44: ee:4e:4a:be:64:2e:ce:71:e3:9a:0f:8b:54:3a:82: 6e:52:d0:f3:75:28:11:09:26:cb:6b:1b:e0:70:74: 94:74:0a:bd:18:05:a1:30:65:f7:9d:64:30:4b:e0: fb:79:a0:d7:37:7d:1f:34:9a:44:f3:5b:39:b5:e6: d6:23:e8:4e:08:9c:25:c0:ed:aa:27:5c:ef:02:70: 1b:56:18:e8:b4:4d:92:92:02:b9:11:cd:8a:91:ee: a7:82:a6:db:e5:00:d6:12:73:99:5a:d9:a4:4c:32: 91:01:d0:ec:b1:3f:d1:cf:96:65:2d:8d:17:b1:0f: 75:c9:1c:25:d1:09:e8:62:76:8d:b5:8a:b0:99:47: 51:bf:e5:96:c1:96:53:a8:66:03:f0:89:fe:67:16: 7d:e7:c5:1c:96:c2:74:bc:0b:56:71:b6:a2:40:c8: 9a:8f:39:1d:26:a3:51:c1:40:56:d4:21:7b:7c:d5: 15:15:5f:a7:7f:64:ab:2a:6a:8e:9c:0c:d3:e9:29: 14:51:8b:25:97:e5:da:7f:c5:19:ad:98:44:56:6c: 94:14:1e:07:4e:61:1d:85:5e:71:3b:92:15:1c:6b: 94:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B8:D2:D1:07:2C:B6:58:FE:3F:2C:3B:51:6A:DD:C7:2D:A9:0F:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:52:18:b0:e5:be:ea:cf:79:8e:64:c9:d3:94:47:e2:2d:07: af:3a:a5:75:37:1a:41:8e:43:03:b1:c9:da:6b:9e:b9:c0:05: fb:d7:9c:d8:0a:ae:eb:2e:a5:32:f6:f1:bd:46:71:c4:cc:99: f6:24:fb:f7:7e:72:0b:69:a5:d7:c3:8d:52:62:dd:ee:86:d1: b3:b5:2a:73:49:f3:89:e0:ae:8b:cd:9d:ea:2f:5b:66:db:ff: f1:9d:01:34:27:5d:af:f4:fa:09:96:11:4d:ec:d2:2f:a2:f8: 01:d5:88:93:f5:55:17:bd:5b:08:9b:32:54:dd:e6:ba:cc:8e: f7:11:ce:2a:47:fb:aa:31:f5:9e:81:c6:b9:f7:b0:aa:af:03: 2f:f3:74:86:11:29:9c:2f:2b:c7:04:b5:0c:fd:bc:5f:7b:bf: 11:7e:94:5a:81:88:6f:1b:a9:06:bc:39:36:99:17:81:67:55: 72:19:b6:1d:b1:1a:9c:c3:a4:9a:f4:06:b9:41:6a:01:ef:f2: 6d:66:77:d6:0f:a4:ee:0b:ea:32:9c:61:48:7c:bf:26:6c:cc: 86:ae:d4:db:b9:ca:97:ae:2f:fa:54:34:2d:ac:77:e2:6f:3d: 8d:8e:92:5d:b0:1a:9b:53:88:fa:8f:8b:75:72:19:1b:c7:24: ed:52:9c:83 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE4Ba09D6/wwpFN8coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDUzMDEzMDAxMFoXDTI2MDgyODEzMDAxMFowLzEtMCsGA1UEAxMk ODIwMDA5ZjAtODU4YS00YTg1LThiYzQtMWZhMTZjODc1NDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuSfSffJ+mBDqzyoXZ1ZPyv6aea+NUIoWoMK l0TuTkq+ZC7OceOaD4tUOoJuUtDzdSgRCSbLaxvgcHSUdAq9GAWhMGX3nWQwS+D7 eaDXN30fNJpE81s5tebWI+hOCJwlwO2qJ1zvAnAbVhjotE2SkgK5Ec2Kke6ngqbb 5QDWEnOZWtmkTDKRAdDssT/Rz5ZlLY0XsQ91yRwl0QnoYnaNtYqwmUdRv+WWwZZT qGYD8In+ZxZ958UclsJ0vAtWcbaiQMiajzkdJqNRwUBW1CF7fNUVFV+nf2SrKmqO nAzT6SkUUYsll+Xaf8UZrZhEVmyUFB4HTmEdhV5xO5IVHGuUrQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFLC40tEHLLZY/j8sO1Fq3cctqQ+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGRhNjM4NGItZTY1Mi0z NmRlLWI2OWQtYWM5ZGUxMmNkYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAERSGLDlvurPeY5kydOUR+ItB686pXU3GkGOQwOx ydprnrnABfvXnNgKrusupTL28b1GccTMmfYk+/d+cgtppdfDjVJi3e6G0bO1KnNJ 84ngrovNneovW2bb//GdATQnXa/0+gmWEU3s0i+i+AHViJP1VRe9WwibMlTd5rrM jvcRzipH+6ox9Z6Bxrn3sKqvAy/zdIYRKZwvK8cEtQz9vF97vxF+lFqBiG8bqQa8 OTaZF4FnVXIZth2xGpzDpJr0BrlBagHv8m1md9YPpO4L6jKcYUh8vyZszIau1Nu5 ypeuL/pUNC2sd+JvPY2Okl2wGptTiPqPi3VyGRvHJO1SnIM= -----END CERTIFICATE-----Generated at Sat Jun 13 10:04:00 2026 by rpki-client