$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/17c2b0f2-a95d-3a34-91c9-2e9f6a99493d.roa File: 17c2b0f2-a95d-3a34-91c9-2e9f6a99493d.roa (raw, json) Hash identifier: yYZb+sp1hZ95hpvCoB100e+q4WXgKniQskRCuwXaQZI= Subject key identifier: 6F:94:14:18:92:33:C8:80:4C:8E:0E:91:8C:CD:37:BA:06:B4:62:F6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F428E33306906FCCCD3570A80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/17c2b0f2-a95d-3a34-91c9-2e9f6a99493d.roa Signing time: Tue 22 Sep 2026 13:45:19 +0000 ROA not before: Tue 22 Sep 2026 13:45:19 +0000 ROA not after: Sun 20 Dec 2026 20:35:41 +0000 asID: 152179 IP address blocks: 199.234.72.0/21 maxlen: 24 204.42.96.0/21 maxlen: 24 204.42.240.0/21 maxlen: 24 204.142.184.0/21 maxlen: 24 204.143.48.0/21 maxlen: 24 204.170.40.0/21 maxlen: 24 205.238.0.0/20 maxlen: 24 205.238.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:8e:33:30:69:06:fc:cc:d3:57:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 22 13:45:19 2026 GMT Not After : Dec 20 20:35:41 2026 GMT Subject: CN=6defa729-68f9-41e8-beea-07037186c28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:51:86:d8:a6:e0:5d:7f:b7:f8:62:1f:30: 05:a2:71:64:cd:2b:68:bc:ec:77:54:59:60:c4:0a: fe:b2:d1:ad:fd:b6:aa:ca:c6:cd:41:28:48:52:39: 81:51:f4:34:4f:52:3b:e0:66:f1:67:63:7d:9f:47: b5:42:0c:a6:84:d6:2e:54:86:d4:b3:fd:68:97:3e: 1c:48:e6:2d:f0:67:8c:ef:b9:7d:6f:48:f7:78:50: 7f:b3:8b:bf:15:50:21:22:eb:d6:d9:0c:3e:e5:29: 1b:c0:7c:ed:26:89:d3:2a:ac:26:94:24:af:e8:94: 0f:e7:02:79:24:b9:58:5d:c1:64:f0:c2:aa:46:0b: 9d:b1:bd:d1:a1:f3:de:b2:a7:92:53:64:f6:41:18: 82:15:ce:c1:9f:3e:cf:cd:af:1d:a0:2e:9b:b3:74: ba:99:d1:cb:59:70:1a:00:66:ff:6a:1a:fa:67:63: 38:f8:47:10:7e:c3:c2:96:83:eb:43:35:a2:a7:46: e7:6c:4b:d9:87:c4:80:7f:b9:6c:a8:e8:fe:c9:ba: b3:c1:25:0a:6e:d7:05:c2:67:5b:38:86:c7:2b:04: 03:2b:5a:09:4b:ee:ac:4b:75:65:d9:e7:96:78:05: 58:59:f3:a3:04:20:5a:3f:8f:7c:28:65:58:be:89: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:94:14:18:92:33:C8:80:4C:8E:0E:91:8C:CD:37:BA:06:B4:62:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/17c2b0f2-a95d-3a34-91c9-2e9f6a99493d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 199.234.72.0/21 204.42.96.0/21 204.42.240.0/21 204.142.184.0/21 204.143.48.0/21 204.170.40.0/21 205.238.0.0/20 205.238.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:89:4f:19:06:94:27:ed:fc:e0:9e:24:d8:8c:a5:b2:53:f0: 58:bb:b5:e3:0f:f6:47:9c:80:44:b8:97:32:1c:f9:60:45:38: 28:d8:08:3b:3f:1e:06:89:24:60:88:bc:aa:29:2a:8b:a3:c8: d3:c4:27:4b:54:03:c8:78:60:73:5f:27:7b:6f:1d:4c:91:92: ec:b1:fb:ee:22:d2:f9:17:77:54:4a:b9:aa:3e:46:d7:97:4d: 1b:cf:40:b6:de:2f:f1:d8:a0:15:25:57:45:aa:7e:3d:c3:80: cc:e5:c5:c4:02:56:1b:d9:7d:22:63:db:1d:38:23:85:82:df: f0:6f:fa:c8:06:56:3d:ff:29:6b:a4:d5:f3:28:b6:cf:4f:1c: 70:34:48:68:7e:3e:88:2a:e7:bf:2b:78:97:55:c9:27:6f:77: d0:30:1c:4d:b5:00:69:b3:06:92:78:e7:8b:b0:c5:7a:5d:c0: b9:14:af:bd:b4:67:88:db:57:5d:85:a3:d5:24:c8:33:27:4a: c0:e2:b5:9f:4a:95:44:8d:96:66:1b:7e:fd:22:f8:1a:cb:15: 0f:cf:c8:db:1f:22:6c:3a:80:e3:68:d1:9a:c1:2d:1f:9a:3e: 18:13:8a:a4:c5:8d:2f:ac:32:ad:27:52:e0:4e:1f:29:d4:c0: 33:e0:10:9b -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWE9CjjMwaQb8zNNXCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkyMjEzNDUxOVoXDTI2MTIyMDIwMzU0MVowLzEtMCsGA1UEAxMk NmRlZmE3MjktNjhmOS00MWU4LWJlZWEtMDcwMzcxODZjMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytNRhtim4F1/t/hiHzAFonFkzStovOx3VFlg xAr+stGt/baqysbNQShIUjmBUfQ0T1I74GbxZ2N9n0e1QgymhNYuVIbUs/1olz4c SOYt8GeM77l9b0j3eFB/s4u/FVAhIuvW2Qw+5SkbwHztJonTKqwmlCSv6JQP5wJ5 JLlYXcFk8MKqRgudsb3RofPesqeSU2T2QRiCFc7Bnz7Pza8doC6bs3S6mdHLWXAa AGb/ahr6Z2M4+EcQfsPCloPrQzWip0bnbEvZh8SAf7lsqOj+ybqzwSUKbtcFwmdb OIbHKwQDK1oJS+6sS3Vl2eeWeAVYWfOjBCBaP498KGVYvolCNwIDAQABo4IDfzCC A3swHQYDVR0OBBYEFG+UFBiSM8iATI4OkYzNN7oGtGL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTdjMmIwZjItYTk1ZC0z YTM0LTkxYzktMmU5ZjZhOTk0OTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQDx+pIAwQD zCpgAwQDzCrwAwQDzI64AwQDzI8wAwQDzKooAwQEze4AAwQFze4gMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHCJTxkGlCft/OCeJNiMpbJT8Fi7teMP9kecgES4lzIc+WBFOCjYCDs/HgaJJGCI vKopKoujyNPEJ0tUA8h4YHNfJ3tvHUyRkuyx++4i0vkXd1RKuao+RteXTRvPQLbe L/HYoBUlV0Wqfj3DgMzlxcQCVhvZfSJj2x04I4WC3/Bv+sgGVj3/KWuk1fMots9P HHA0SGh+Pogq578reJdVySdvd9AwHE21AGmzBpJ454uwxXpdwLkUr720Z4jbV12F o9UkyDMnSsDitZ9KlUSNlmYbfv0i+BrLFQ/PyNsfImw6gONo0ZrBLR+aPhgTiqTF jS+sMq0nUuBOHynUwDPgEJs= -----END CERTIFICATE-----Generated at Wed Sep 23 10:15:41 2026 by rpki-client