$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff1f7987-0e9e-3a82-b872-b6f22206561b.roa File: ff1f7987-0e9e-3a82-b872-b6f22206561b.roa (raw, json) Hash identifier: w1pl+2/cNDgK0gvapE7EDa7K7JwF+Xxiokog+ekIM34= Subject key identifier: 91:23:B9:86:EC:DB:F4:01:1C:4B:87:3D:BD:AC:92:66:B5:B6:31:8E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EA79B50819BF0A21FE729A1C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff1f7987-0e9e-3a82-b872-b6f22206561b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 47943 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:50:81:9b:f0:a2:1f:e7:29:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4a5676f1-1907-4901-bfe5-96e340cfcc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c8:ba:0f:09:f4:af:0f:c1:41:78:af:0e:14: f6:52:ef:df:9b:88:07:90:49:40:05:9d:e9:63:73: bc:32:55:63:f1:b9:1f:d7:76:23:cb:2f:10:41:24: 51:d7:16:77:4b:af:26:9c:7b:4d:41:4f:ae:90:6e: f8:3d:a7:86:24:e6:93:55:86:ea:08:c3:84:af:c3: 26:e6:ea:a4:2a:93:40:65:08:3f:f6:e5:45:46:e3: be:5e:8c:c0:19:bf:5b:4a:8f:dd:66:ea:e6:f2:f9: df:b2:1f:0a:9d:76:0c:28:96:1d:a2:5b:f9:21:87: 5d:31:bc:44:65:5f:ea:bc:bd:e7:9f:86:15:ce:82: 2c:b6:fd:bc:ac:68:60:b6:82:0f:e9:ac:e9:51:5a: ac:2a:82:fe:8d:1d:c7:87:d1:42:a1:eb:15:ef:79: 77:6a:16:35:6b:9d:d9:90:ae:ac:3c:d4:44:e1:75: 65:c8:fb:c1:eb:95:8d:63:76:cb:75:27:11:89:b4: 0b:e4:98:f5:0c:c4:f1:a3:b4:d5:27:a3:d2:50:09: f5:90:89:2e:ce:53:48:72:f0:c5:fd:12:89:e2:6c: 6b:11:df:42:ca:2a:ad:69:09:5b:be:41:9a:21:cb: 0e:34:7f:3a:fe:f7:9b:41:3f:cc:f8:1d:a6:22:87: 6b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:23:B9:86:EC:DB:F4:01:1C:4B:87:3D:BD:AC:92:66:B5:B6:31:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff1f7987-0e9e-3a82-b872-b6f22206561b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:3d:3d:3f:4e:62:d5:a5:44:61:28:f0:a3:26:52:48:52:e0: 78:27:20:1b:75:fe:23:e0:e6:8c:83:3f:93:00:a4:9d:da:17: 2a:44:e6:a5:76:c8:75:92:78:5b:8b:93:85:35:8c:23:57:8f: 24:04:c4:3d:74:44:0b:96:83:8b:e1:83:7f:fe:67:1e:7a:ca: b7:9a:91:e4:6f:4d:79:c7:92:f6:50:ab:72:96:ee:0f:d2:a9: b2:9d:67:bc:8f:83:dd:ec:f5:a0:fd:ef:af:b3:04:23:81:12: 8f:cf:3e:75:b7:a8:e3:9c:c3:5b:dd:4f:6a:3b:c9:a6:be:9a: 88:23:b2:9f:2c:13:e4:6c:5c:07:59:bc:1a:f1:9f:67:3c:bd: d5:94:78:ff:ee:52:81:8b:c9:e6:ce:5e:1f:bc:14:7e:91:de: dc:ae:2e:51:a9:5c:ad:d6:46:64:b4:b1:73:95:1d:14:75:8f: a7:a1:ac:23:ee:00:43:16:ae:25:90:2e:d0:b4:e2:2e:3b:53: d2:03:92:5e:41:db:bd:ad:94:00:ca:85:f5:6f:f7:c6:76:32: 71:f3:2a:75:04:cd:cd:54:53:12:72:b6:b4:f8:0e:b3:5c:17: 4f:33:5b:1f:7c:e1:09:0c:f5:b5:87:55:28:d4:25:8f:d8:7a: e6:fe:26:a5 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE6nm1CBm/CiH+cpocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGE1Njc2ZjEtMTkwNy00OTAxLWJmZTUtOTZlMzQwY2ZjYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8i6Dwn0rw/BQXivDhT2Uu/fm4gHkElABZ3p Y3O8MlVj8bkf13Yjyy8QQSRR1xZ3S68mnHtNQU+ukG74PaeGJOaTVYbqCMOEr8Mm 5uqkKpNAZQg/9uVFRuO+XozAGb9bSo/dZurm8vnfsh8KnXYMKJYdolv5IYddMbxE ZV/qvL3nn4YVzoIstv28rGhgtoIP6azpUVqsKoL+jR3Hh9FCoesV73l3ahY1a53Z kK6sPNRE4XVlyPvB65WNY3bLdScRibQL5Jj1DMTxo7TVJ6PSUAn1kIkuzlNIcvDF /RKJ4mxrEd9CyiqtaQlbvkGaIcsONH86/vebQT/M+B2mIodrSwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFJEjuYbs2/QBHEuHPb2skma1tjGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmYxZjc5ODctMGU5ZS0z YTgyLWI4NzItYjZmMjIyMDY1NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKg9PT9OYtWlRGEo8KMmUkhS4HgnIBt1/iPg5oyD P5MApJ3aFypE5qV2yHWSeFuLk4U1jCNXjyQExD10RAuWg4vhg3/+Zx56yreakeRv TXnHkvZQq3KW7g/SqbKdZ7yPg93s9aD976+zBCOBEo/PPnW3qOOcw1vdT2o7yaa+ mogjsp8sE+RsXAdZvBrxn2c8vdWUeP/uUoGLyebOXh+8FH6R3tyuLlGpXK3WRmS0 sXOVHRR1j6ehrCPuAEMWriWQLtC04i47U9IDkl5B272tlADKhfVv98Z2MnHzKnUE zc1UUxJytrT4DrNcF08zWx984QkM9bWHVSjUJY/Yeub+JqU= -----END CERTIFICATE-----Generated at Wed Jul 29 05:13:05 2026 by rpki-client