$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3329155e-38f7-3fe9-8293-6884349bc139.roa File: 3329155e-38f7-3fe9-8293-6884349bc139.roa (raw, json) Hash identifier: NIfbRKoLYsOVnG2o2VdsMJHh86QhFu70u4DXzEOSgAk= Subject key identifier: 09:FE:CF:5F:08:D9:A6:9C:C3:BA:A9:9D:F7:BF:37:4E:87:1F:76:F8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DAC4569E38B764E25BFD69E00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3329155e-38f7-3fe9-8293-6884349bc139.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 7029 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:69:e3:8b:76:4e:25:bf:d6:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=f0ffff66-b8fd-4e26-8f97-4823454b2d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:17:da:ac:f9:59:7b:4d:a1:2a:4f:16:d1: 21:25:ce:03:6e:12:82:28:57:06:51:fb:d8:89:f7: 1b:17:9e:c5:eb:b5:a8:bf:f6:63:c2:ff:c2:e8:b0: 26:6b:88:50:3e:d6:c6:96:ca:0b:40:57:a7:bc:8e: a5:ad:00:a2:62:3d:c7:f7:70:c0:11:25:9c:73:42: 77:8b:e6:bf:3c:e7:a1:d0:01:e4:5a:e0:a0:5f:5e: 48:c5:ee:36:b1:90:91:c6:a4:75:cd:31:b7:48:04: 27:ad:1c:0c:43:ea:bc:4c:0d:a7:f0:30:64:37:52: 60:de:26:a2:3f:c0:35:f9:64:70:c4:e1:0e:04:92: b8:b9:03:eb:28:89:c9:2e:d5:3e:28:7f:ce:13:f0: 43:fe:c6:3a:66:2a:09:e0:02:d3:77:df:f6:4a:72: d6:ae:35:8f:0b:c4:ca:63:cc:e4:f6:9b:07:79:3e: 8d:40:d4:1a:98:7f:36:8e:43:b6:1a:a9:c6:d9:4a: ca:90:65:bf:5e:f7:45:a1:0a:de:ce:20:a2:ed:f3: 72:6c:08:ce:ed:51:35:75:dc:96:da:f7:e7:1c:43: f6:3f:fa:18:35:f1:30:35:11:e8:e6:95:44:6f:e2: 33:27:fc:17:31:07:48:35:b8:fd:89:95:6b:d8:13: 57:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FE:CF:5F:08:D9:A6:9C:C3:BA:A9:9D:F7:BF:37:4E:87:1F:76:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3329155e-38f7-3fe9-8293-6884349bc139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a3:27:2d:76:d3:5d:87:2a:73:03:33:fb:22:80:81:e0:a5: 4e:82:c6:eb:01:cb:9c:ec:ef:b7:f4:0e:54:23:b8:d8:44:b2: b1:2f:f9:49:02:95:8b:b8:02:bd:3c:85:69:c1:b3:d0:77:03: b1:98:4c:ce:6c:df:fd:7f:b4:81:c2:f5:f9:35:58:7f:e7:ad: fd:77:d4:21:cd:71:69:7c:0b:6a:b5:c5:9e:68:58:c3:f9:07: ea:0c:8b:da:46:85:1c:3f:e1:3a:fa:50:60:52:d5:03:e8:24: a6:6d:1d:65:8e:37:de:0f:31:b9:88:fb:1b:6d:60:7e:d1:83: 8f:e6:72:fa:fa:b0:a5:15:f4:9d:b3:11:c7:0e:92:10:4d:84: a6:5e:c2:1c:b5:e2:94:18:98:69:98:04:32:64:b2:f7:88:93: 7b:00:64:06:16:b2:02:1b:b4:54:a2:24:90:66:8c:ff:ec:5d: 0d:cb:69:6f:4d:a6:a2:6c:ea:b0:c2:1c:58:e9:e3:6f:02:a1: 66:a5:a4:d1:14:91:f4:33:b6:b3:e4:cb:ff:09:dc:b5:ca:1b: d3:fb:44:9f:41:e5:90:d4:29:46:eb:a0:5d:27:34:3f:78:54: f8:6e:c8:e9:a3:9d:de:0b:e2:34:fd:65:f5:e8:27:65:ca:ee: af:ee:2f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRWnji3ZOJb/WngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZjBmZmZmNjYtYjhmZC00ZTI2LThmOTctNDgyMzQ1NGIyZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz30X2qz5WXtNoSpPFtEhJc4DbhKCKFcGUfvY ifcbF57F67Wov/Zjwv/C6LAma4hQPtbGlsoLQFenvI6lrQCiYj3H93DAESWcc0J3 i+a/POeh0AHkWuCgX15Ixe42sZCRxqR1zTG3SAQnrRwMQ+q8TA2n8DBkN1Jg3iai P8A1+WRwxOEOBJK4uQPrKInJLtU+KH/OE/BD/sY6ZioJ4ALTd9/2SnLWrjWPC8TK Y8zk9psHeT6NQNQamH82jkO2GqnG2UrKkGW/XvdFoQreziCi7fNybAjO7VE1ddyW 2vfnHEP2P/oYNfEwNRHo5pVEb+IzJ/wXMQdINbj9iZVr2BNXpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn+z18I2aacw7qpnfe/N06HH3b4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzMyOTE1NWUtMzhmNy0z ZmU5LTgyOTMtNjg4NDM0OWJjMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSjJy12012HKnMDM/sigIHgpU6CxusBy5zs77f0DlQjuNhEsrEv+UkC lYu4Ar08hWnBs9B3A7GYTM5s3/1/tIHC9fk1WH/nrf131CHNcWl8C2q1xZ5oWMP5 B+oMi9pGhRw/4Tr6UGBS1QPoJKZtHWWON94PMbmI+xttYH7Rg4/mcvr6sKUV9J2z EccOkhBNhKZewhy14pQYmGmYBDJksveIk3sAZAYWsgIbtFSiJJBmjP/sXQ3LaW9N pqJs6rDCHFjp428CoWalpNEUkfQztrPky/8J3LXKG9P7RJ9B5ZDUKUbroF0nND94 VPhuyOmjnd4L4jT9ZfXoJ2XK7q/uL5c= -----END CERTIFICATE-----Generated at Wed May 13 11:54:40 2026 by rpki-client