$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b188e208-48e7-3a90-86f9-7590ab80804a.roa File: b188e208-48e7-3a90-86f9-7590ab80804a.roa (raw, json) Hash identifier: I9IeSy6E/3kw1Bz5vx4Q+GomoUJ2EO096jw0Os44kwo= Subject key identifier: 70:D1:01:63:D4:5B:B5:8E:F9:F8:C3:AB:FE:D1:64:97:A9:5E:38:F7 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CCBA7805DEF251ADA52F53400 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b188e208-48e7-3a90-86f9-7590ab80804a.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 20115 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:80:5d:ef:25:1a:da:52:f5:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=a60a9347-facd-452f-a88c-27132f2c3514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:92:6d:43:f7:4e:39:56:b1:bf:f1:30:03: 73:7e:48:d6:e8:34:05:30:45:af:b2:6c:29:f3:c4: 9b:ed:bc:48:2e:9c:4d:d3:77:90:96:c3:74:c5:9d: 63:dd:8e:92:0e:d9:80:bb:fc:f8:67:fa:97:ed:a5: e4:2c:6e:c8:60:78:42:88:fd:4c:2b:7e:90:af:ff: 63:7a:0f:3a:31:c7:44:7d:58:36:da:05:61:01:65: 2c:40:07:dc:c1:35:8f:7c:08:c0:e8:b9:ac:93:c5: be:b1:11:91:96:fd:d5:15:9b:f4:a4:71:08:e7:0f: 42:af:51:db:88:b4:3b:ee:b3:5e:e1:76:72:57:b6: f5:28:05:01:eb:f2:39:96:ee:8e:8f:54:02:8a:8d: 73:6b:7a:65:7f:9f:34:57:7c:d8:fb:d5:ab:a9:8b: 6f:54:ea:e6:b2:7f:ef:2c:3e:e3:80:48:2e:fc:75: 86:f7:34:b4:e3:08:fc:fa:08:e8:02:e7:10:0e:42: f1:6f:54:92:6e:43:9a:19:78:55:46:9a:bb:62:42: 34:d9:b7:19:bd:fc:f9:02:63:8e:9c:7c:ed:37:a1: ff:80:63:5b:0e:c4:c0:e6:1d:22:e5:65:cf:fe:43: b0:63:6a:f8:b1:9d:b3:55:7e:12:70:ad:54:2f:a2: 8b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D1:01:63:D4:5B:B5:8E:F9:F8:C3:AB:FE:D1:64:97:A9:5E:38:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b188e208-48e7-3a90-86f9-7590ab80804a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ee:c9:85:58:c8:7c:e0:5f:ca:6d:2f:fa:f3:2d:1e:5d:8e: 21:cd:36:b9:3d:0b:e9:f1:7d:e1:0c:08:90:e7:76:6b:a8:7b: ec:e5:66:4d:ed:90:32:6f:c4:12:b2:55:f8:98:24:39:65:4c: 36:90:18:1a:69:e9:67:a0:9f:30:9d:c4:c3:bc:dc:2e:67:27: 99:78:3f:16:b1:76:a5:2e:19:71:f2:3e:f9:2d:97:ce:14:bd: 88:1d:50:a1:43:6b:5c:df:fc:86:46:65:cc:e4:0f:25:4b:27: 03:dc:e0:9e:c2:0f:15:1d:cf:c7:d1:87:ab:03:60:97:33:c3: 7f:61:e7:51:1a:51:c8:0e:6b:53:46:b0:38:9e:5c:6e:4d:77: 0c:1c:57:38:e9:f9:bb:4c:4f:11:7f:24:d5:4c:84:81:bb:df: 94:5b:66:6d:95:b8:43:03:28:14:4e:dd:ed:d3:5c:c9:1c:34: 99:b3:47:be:fb:3f:9d:bf:58:c9:c6:e3:e9:f4:92:dd:a0:16: b1:10:3e:fc:c4:28:b3:36:fc:5d:d2:6e:a6:2c:b7:c8:c1:73: cf:e7:d1:35:a8:d9:48:73:51:ff:d2:37:39:b6:99:ce:2a:0d: 99:31:0a:e3:58:d6:76:0a:51:60:e7:48:da:ae:c9:a1:55:cc: 20:8d:7c:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp4Bd7yUa2lL1NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk YTYwYTkzNDctZmFjZC00NTJmLWE4OGMtMjcxMzJmMmMzNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpSSbUP3TjlWsb/xMANzfkjW6DQFMEWvsmwp 88Sb7bxILpxN03eQlsN0xZ1j3Y6SDtmAu/z4Z/qX7aXkLG7IYHhCiP1MK36Qr/9j eg86McdEfVg22gVhAWUsQAfcwTWPfAjA6Lmsk8W+sRGRlv3VFZv0pHEI5w9Cr1Hb iLQ77rNe4XZyV7b1KAUB6/I5lu6Oj1QCio1za3plf580V3zY+9WrqYtvVOrmsn/v LD7jgEgu/HWG9zS04wj8+gjoAucQDkLxb1SSbkOaGXhVRpq7YkI02bcZvfz5AmOO nHztN6H/gGNbDsTA5h0i5WXP/kOwY2r4sZ2zVX4ScK1UL6KLIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDRAWPUW7WO+fjDq/7RZJepXjj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjE4OGUyMDgtNDhlNy0z YTkwLTg2ZjktNzU5MGFiODA4MDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbuyYVYyHzgX8ptL/rzLR5djiHNNrk9C+nxfeEMCJDndmuoe+zlZk3t kDJvxBKyVfiYJDllTDaQGBpp6WegnzCdxMO83C5nJ5l4PxaxdqUuGXHyPvktl84U vYgdUKFDa1zf/IZGZczkDyVLJwPc4J7CDxUdz8fRh6sDYJczw39h51EaUcgOa1NG sDieXG5NdwwcVzjp+btMTxF/JNVMhIG735RbZm2VuEMDKBRO3e3TXMkcNJmzR777 P52/WMnG4+n0kt2gFrEQPvzEKLM2/F3SbqYst8jBc8/n0TWo2UhzUf/SNzm2mc4q DZkxCuNY1nYKUWDnSNquyaFVzCCNfOM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:29:33 2026 by rpki-client