$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a5c464c2-0d99-345b-9901-dc7f762bca71.roa File: a5c464c2-0d99-345b-9901-dc7f762bca71.roa (raw, json) Hash identifier: /6+X/QYRGTTOA5NjgHeRR1uVL9LgrYEpkHINlHF4DLA= Subject key identifier: 07:5B:9D:A1:C8:F6:76:5D:BC:CC:4D:C1:96:E0:D3:55:7E:50:83:91 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F14678ADE06AEDC356E5DF880 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a5c464c2-0d99-345b-9901-dc7f762bca71.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 13700 IP address blocks: 128.241.18.0/23 maxlen: 24 128.242.176.0/23 maxlen: 24 128.242.184.0/23 maxlen: 24 128.242.190.0/23 maxlen: 24 168.143.96.0/24 maxlen: 24 168.143.111.0/24 maxlen: 24 168.143.188.0/23 maxlen: 24 168.143.234.0/23 maxlen: 24 168.143.238.0/23 maxlen: 24 168.143.244.0/23 maxlen: 24 192.204.14.0/23 maxlen: 24 192.204.104.0/23 maxlen: 24 192.217.14.0/23 maxlen: 24 192.217.228.0/23 maxlen: 24 192.220.252.0/23 maxlen: 24 198.87.102.0/23 maxlen: 24 198.173.162.0/23 maxlen: 24 199.237.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8a:de:06:ae:dc:35:6e:5d:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=e113771a-1200-4fe7-b20d-bc6f09889a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:50:f6:11:16:12:95:54:ae:3d:32:e7:d2:23: 96:b2:38:0b:bc:b1:3c:62:7d:62:c0:90:15:69:a3: 47:6a:62:dc:97:94:e8:58:77:cb:2c:97:64:1d:a0: 69:fd:35:94:8a:52:7d:7c:2a:23:c8:36:ca:ab:8d: 35:a4:71:76:81:bb:37:11:ed:00:dc:b7:dc:a1:76: 1f:02:7d:1a:9c:2e:3b:3d:f6:70:59:13:29:2a:0b: c7:3d:4b:01:9f:22:0b:e0:61:4c:0f:9c:57:a4:ca: fc:8a:4e:dd:ae:a0:0d:d9:f6:4c:64:83:1c:72:2f: 22:05:3e:24:7a:0e:d3:c1:ee:f0:40:b0:49:33:61: 04:0e:e8:e3:0e:25:b9:81:24:50:07:fd:74:1a:a2: f3:ae:10:0f:08:7b:dd:6b:31:44:90:37:d6:e4:df: f8:f8:6c:0f:3f:24:5c:87:4c:73:07:54:1a:5a:00: 5c:9e:8d:ec:34:bf:d1:2e:ac:17:8d:4b:98:d3:e4: 9f:3f:59:4d:da:88:90:74:7a:57:ca:c4:66:89:a8: f8:ec:2a:fe:b9:4e:ac:d3:d2:cc:b3:a8:21:bf:c5: 6a:db:ef:66:b2:92:1a:3f:cd:17:37:5e:2d:0f:e4: 4c:7c:f3:de:e5:c2:fd:15:bd:c8:6e:af:6a:38:c8: 14:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5B:9D:A1:C8:F6:76:5D:BC:CC:4D:C1:96:E0:D3:55:7E:50:83:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a5c464c2-0d99-345b-9901-dc7f762bca71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.18.0/23 128.242.176.0/23 128.242.184.0/23 128.242.190.0/23 168.143.96.0/24 168.143.111.0/24 168.143.188.0/23 168.143.234.0/23 168.143.238.0/23 168.143.244.0/23 192.204.14.0/23 192.204.104.0/23 192.217.14.0/23 192.217.228.0/23 192.220.252.0/23 198.87.102.0/23 198.173.162.0/23 199.237.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:0c:48:3f:33:2f:b3:43:4c:5c:24:a2:1f:a0:16:bd:f6:ca: c3:fe:ca:99:f3:08:b7:fb:9d:a2:01:37:96:e1:eb:fe:d4:61: f6:bc:f5:ae:06:ca:3a:5a:8f:b2:c5:2b:fc:3b:7e:8c:9c:14: f2:70:3e:0a:8b:5e:09:c9:96:55:47:5f:ed:04:6b:ca:e6:a7: 13:d2:09:e1:59:95:fb:3f:95:d9:5b:fa:00:ac:fc:5f:95:f2: fb:36:36:10:37:de:8e:1a:39:6e:18:1c:12:dd:c3:12:f3:c8: 4f:47:42:a6:21:51:06:4b:5c:14:a0:67:be:8a:86:cd:e3:71: 11:6a:20:18:96:70:74:d4:fd:ba:5c:f3:7f:74:d8:23:6f:b8: 77:1c:99:0c:69:3d:59:53:52:e0:fa:a7:1f:78:fb:d2:55:d7: 63:c6:a3:f3:e7:74:34:2f:43:ba:ad:e7:65:bb:ff:05:37:a8: df:e7:35:79:cc:30:32:6c:4f:8c:b6:ca:d8:0f:a5:19:e3:2c: 1d:09:1e:2f:e5:b5:49:82:92:93:c6:f4:90:ed:30:ac:18:58: 18:3f:d6:9f:b1:9f:e4:f9:ae:a0:85:9e:38:ae:8e:32:90:e0: d9:1e:d8:c4:4f:bd:01:77:21:66:c8:14:d5:a3:b6:f6:f6:3d: 4f:3f:ad:1b -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUAQ0Mn0MoWE8UZ4reBq7cNW5d+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZTExMzc3MWEtMTIwMC00ZmU3LWIyMGQtYmM2ZjA5ODg5YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilD2ERYSlVSuPTLn0iOWsjgLvLE8Yn1iwJAV aaNHamLcl5ToWHfLLJdkHaBp/TWUilJ9fCojyDbKq401pHF2gbs3Ee0A3LfcoXYf An0anC47PfZwWRMpKgvHPUsBnyIL4GFMD5xXpMr8ik7drqAN2fZMZIMcci8iBT4k eg7Twe7wQLBJM2EEDujjDiW5gSRQB/10GqLzrhAPCHvdazFEkDfW5N/4+GwPPyRc h0xzB1QaWgBcno3sNL/RLqwXjUuY0+SfP1lN2oiQdHpXysRmiaj47Cr+uU6s09LM s6ghv8Vq2+9mspIaP80XN14tD+RMfPPe5cL9Fb3Ibq9qOMgUDwIDAQABo4IDvDCC A7gwHQYDVR0OBBYEFAdbnaHI9nZdvMxNwZbg01V+UIORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTVjNDY0YzItMGQ5OS0z NDViLTk5MDEtZGM3Zjc2MmJjYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAYDxEgME AYDysAMEAYDyuAMEAYDyvgMEAKiPYAMEAKiPbwMEAaiPvAMEAaiP6gMEAaiP7gME AaiP9AMEAcDMDgMEAcDMaAMEAcDZDgMEAcDZ5AMEAcDc/AMEAcZXZgMEAcatogME AcftYDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA8DEg/My+zQ0xcJKIfoBa99srD/sqZ8wi3+52iATeW4ev+ 1GH2vPWuBso6Wo+yxSv8O36MnBTycD4Ki14JyZZVR1/tBGvK5qcT0gnhWZX7P5XZ W/oArPxflfL7NjYQN96OGjluGBwS3cMS88hPR0KmIVEGS1wUoGe+iobN43ERaiAY lnB01P26XPN/dNgjb7h3HJkMaT1ZU1Lg+qcfePvSVddjxqPz53Q0L0O6redlu/8F N6jf5zV5zDAybE+MtsrYD6UZ4ywdCR4v5bVJgpKTxvSQ7TCsGFgYP9afsZ/k+a6g hZ44ro4ykODZHtjET70BdyFmyBTVo7b29j1PP60b -----END CERTIFICATE-----Generated at Mon Sep 21 18:16:58 2026 by rpki-client