$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9227f6d1-f1ee-3a25-8200-a7f05ba109da.roa File: 9227f6d1-f1ee-3a25-8200-a7f05ba109da.roa (raw, json) Hash identifier: VvveLjvwvMX7K1AJEyWbWrx09qzKzwKh8yZHtkf/ZXA= Subject key identifier: B2:59:52:FE:02:51:3B:45:B8:71:49:D7:D4:6B:9C:B3:03:40:22:95 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F2EED28401CA2EB887F0DB380 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9227f6d1-f1ee-3a25-8200-a7f05ba109da.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 398465 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:28:40:1c:a2:eb:88:7f:0d:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=e4efe65d-8040-4b18-b942-59cfc564d14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:87:bd:58:48:02:c1:37:6e:07:13:9a:0c:95: 9a:07:e8:5a:8e:21:aa:b6:a9:03:03:5d:a0:08:4f: 95:79:c4:fd:69:d4:8b:83:eb:ed:37:29:a4:f0:bb: 7e:2f:cc:54:f1:6a:05:27:ec:9f:f8:49:76:04:fb: f4:18:44:8b:c7:a9:7b:88:b2:19:0d:9c:2f:16:25: fc:6b:77:bd:39:30:65:06:59:d4:c4:ef:0e:ef:2c: 13:30:18:1c:4a:e4:a2:44:d1:29:82:db:85:0d:6a: de:9b:24:0f:0b:b8:42:3f:48:08:68:aa:10:db:2e: 23:90:9b:7f:aa:2d:43:5b:e8:43:62:13:77:70:1f: 5a:f3:e1:7b:45:25:b9:5f:a9:d5:b2:71:b2:f7:f4: f8:d9:15:e8:40:c3:f9:60:49:b1:27:85:68:eb:7e: 0b:ea:c2:8f:eb:ab:8a:10:da:d7:cb:09:97:5f:c3: a3:c3:72:06:62:03:30:ba:09:d8:63:76:f2:81:05: b1:1d:86:bc:1c:ff:a6:02:2c:f1:e3:1f:0b:64:71: a2:f4:e9:03:64:68:d3:c9:29:a6:73:7c:9d:16:ff: da:1d:ae:83:c7:32:b4:b7:5c:5a:02:7c:da:87:68: 14:bc:07:6d:4b:fe:07:99:fa:c8:c7:8d:73:96:77: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:59:52:FE:02:51:3B:45:B8:71:49:D7:D4:6B:9C:B3:03:40:22:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9227f6d1-f1ee-3a25-8200-a7f05ba109da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f0:dd:a7:4f:1c:cd:e8:2a:62:00:02:18:e2:bc:50:b7:b2: 31:f8:01:ad:ef:fe:eb:f6:1f:3d:5e:55:23:fa:a9:93:9d:82: 5f:93:d3:84:91:46:13:8c:29:2a:d0:3b:9a:3d:19:e4:e3:15: 88:8a:ca:9c:7c:c3:52:43:0c:03:9f:21:4d:31:04:5b:65:55: b1:86:83:e1:59:8b:db:03:61:67:fe:15:b7:73:5a:f1:b4:a6: a6:6f:c3:d0:fd:8c:f0:ad:f3:57:09:7c:93:bc:da:1b:f3:d3: 4c:b2:06:b9:8d:9b:f2:31:1c:84:87:cc:8c:17:d5:48:f7:aa: 7a:5d:35:71:55:b0:e2:56:60:30:d7:5c:2a:f6:6a:86:25:88: 34:35:c4:37:17:77:82:db:5c:3c:37:d2:71:c6:6f:7b:5a:2b: 42:73:83:14:11:0b:ed:57:27:9f:e9:b9:67:3e:e9:2a:7d:8e: 22:db:91:76:67:a1:56:e1:47:f7:bd:23:67:05:7d:da:b1:8d: 6e:08:b7:d2:ee:4e:f5:db:86:de:c5:86:80:65:4a:3b:26:f7: f1:a2:48:7a:7c:50:8d:58:98:e2:35:55:24:30:49:1d:99:d1: b8:7a:b9:84:e4:bf:5c:c5:bb:95:8c:8c:40:97:de:06:76:92: b3:10:fc:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7ShAHKLriH8Ns4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZTRlZmU2NWQtODA0MC00YjE4LWI5NDItNTljZmM1NjRkMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIe9WEgCwTduBxOaDJWaB+hajiGqtqkDA12g CE+VecT9adSLg+vtNymk8Lt+L8xU8WoFJ+yf+El2BPv0GESLx6l7iLIZDZwvFiX8 a3e9OTBlBlnUxO8O7ywTMBgcSuSiRNEpgtuFDWremyQPC7hCP0gIaKoQ2y4jkJt/ qi1DW+hDYhN3cB9a8+F7RSW5X6nVsnGy9/T42RXoQMP5YEmxJ4Vo634L6sKP66uK ENrXywmXX8Ojw3IGYgMwugnYY3bygQWxHYa8HP+mAizx4x8LZHGi9OkDZGjTySmm c3ydFv/aHa6DxzK0t1xaAnzah2gUvAdtS/4HmfrIx41zlnfaMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJZUv4CUTtFuHFJ19RrnLMDQCKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTIyN2Y2ZDEtZjFlZS0z YTI1LTgyMDAtYTdmMDViYTEwOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzw3adPHM3oKmIAAhjivFC3sjH4Aa3v/uv2Hz1eVSP6qZOdgl+T04SR RhOMKSrQO5o9GeTjFYiKypx8w1JDDAOfIU0xBFtlVbGGg+FZi9sDYWf+FbdzWvG0 pqZvw9D9jPCt81cJfJO82hvz00yyBrmNm/IxHISHzIwX1Uj3qnpdNXFVsOJWYDDX XCr2aoYliDQ1xDcXd4LbXDw30nHGb3taK0JzgxQRC+1XJ5/puWc+6Sp9jiLbkXZn oVbhR/e9I2cFfdqxjW4It9LuTvXbht7FhoBlSjsm9/GiSHp8UI1YmOI1VSQwSR2Z 0bh6uYTkv1zFu5WMjECX3gZ2krMQ/I8= -----END CERTIFICATE-----Generated at Sun Sep 20 19:15:30 2026 by rpki-client