$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a66a24e-bb89-3495-8eab-69765250b89c.roa File: 5a66a24e-bb89-3495-8eab-69765250b89c.roa (raw, json) Hash identifier: mp61d8jVM/YAKw3kQ68pYN75PwvOoDhwSauFZ/Ni5JU= Subject key identifier: 9C:0D:6C:47:C5:0A:5E:C3:21:C4:09:7C:41:79:4B:13:4F:4A:D5:26 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F49747B0A8DE7750620472410 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a66a24e-bb89-3495-8eab-69765250b89c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 140224 IP address blocks: 207.57.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:7b:0a:8d:e7:75:06:20:47:24:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=685a42e3-ed9a-4397-a7ed-cea3bef51304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bd:98:63:4f:01:5b:a2:fe:24:ce:f5:5f:5f: 66:4b:21:54:83:50:a1:da:38:6d:64:c6:80:9c:1d: ea:02:f1:ea:5f:6d:f7:d3:bf:01:f1:03:6f:f3:8a: c5:93:8d:7e:60:a0:35:14:03:ff:a7:0a:42:91:0f: 37:46:81:ff:ee:cf:ff:d1:87:b2:bc:18:ca:04:ce: aa:1e:2b:46:85:25:07:bc:95:61:53:6c:6d:a7:a9: 27:f8:3b:c1:47:f7:52:95:f8:18:b9:6f:5a:3f:48: ba:ef:d8:c5:54:17:ea:d8:59:39:83:7c:e5:cb:cd: c8:f6:3d:88:7d:e3:20:17:b1:18:b8:ea:c8:1f:63: b0:d0:18:b0:c0:d1:e9:5b:d7:3a:8d:be:b1:a5:82: 97:fc:9b:07:6e:a4:7f:94:71:8f:dc:bd:69:ab:e5: e2:6b:35:e8:bc:b3:ff:aa:3a:f8:44:ee:af:c6:eb: 1d:0d:27:e3:50:2c:46:5a:49:3e:0c:ed:4a:12:2b: 1a:a4:8d:ba:f6:54:d3:d3:f6:13:0d:ad:c2:b0:5b: 17:3e:20:8b:ae:ab:f0:72:2e:96:91:d3:48:18:5c: a2:dd:f3:80:50:2f:f1:2c:40:44:1b:07:f9:0a:de: ad:0e:dc:7b:1b:4d:0d:92:e7:e7:5f:48:5a:41:bb: 66:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0D:6C:47:C5:0A:5E:C3:21:C4:09:7C:41:79:4B:13:4F:4A:D5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a66a24e-bb89-3495-8eab-69765250b89c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.57.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c0:7f:6f:53:a1:6b:50:60:dc:e9:11:cf:56:d6:e4:c6:a8: f8:13:14:3e:e5:a6:b2:c1:86:b7:2d:62:54:23:93:a2:4e:72: e6:7d:21:5e:62:c2:81:5b:20:ba:cd:c3:4f:5b:5c:52:54:1e: 3d:af:8b:70:30:13:dc:2b:b4:f8:62:42:2e:41:1a:20:38:fe: aa:1c:cf:d6:fd:66:bd:8e:7f:3c:8e:45:e0:52:5e:f2:7d:24: c3:7d:cf:a3:b2:47:1c:a6:b7:31:86:c1:37:f6:59:64:b3:37: 74:f3:1b:00:29:14:dd:99:9d:be:16:2d:b0:f9:3f:ca:45:d1: 1b:bf:16:7a:c4:12:d1:20:55:51:b6:27:d6:2f:a1:9f:93:80: f4:20:ef:9d:b1:e6:27:9d:34:d3:30:72:30:a1:3d:0e:4d:8f: d5:c8:c2:d3:3e:38:8f:f9:86:88:16:62:28:fa:37:70:d1:7c: 8d:a7:d9:4a:ce:82:bf:97:df:8d:ff:c1:89:49:f6:78:ec:9d: a7:97:90:07:0e:e4:aa:bd:8e:60:55:4a:34:68:af:8c:1a:20: e8:2b:ea:f7:d2:12:f7:02:05:54:3e:80:2c:74:17:fe:ee:12: 59:3c:2a:89:8e:aa:ae:93:2d:cf:e9:ea:e1:21:ab:27:35:46: b5:df:f4:3c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JdHsKjed1BiBHJBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Njg1YTQyZTMtZWQ5YS00Mzk3LWE3ZWQtY2VhM2JlZjUxMzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL2YY08BW6L+JM71X19mSyFUg1Ch2jhtZMaA nB3qAvHqX233078B8QNv84rFk41+YKA1FAP/pwpCkQ83RoH/7s//0YeyvBjKBM6q HitGhSUHvJVhU2xtp6kn+DvBR/dSlfgYuW9aP0i679jFVBfq2Fk5g3zly83I9j2I feMgF7EYuOrIH2Ow0BiwwNHpW9c6jb6xpYKX/JsHbqR/lHGP3L1pq+XiazXovLP/ qjr4RO6vxusdDSfjUCxGWkk+DO1KEisapI269lTT0/YTDa3CsFsXPiCLrqvwci6W kdNIGFyi3fOAUC/xLEBEGwf5Ct6tDtx7G00NkufnX0haQbtmVwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJwNbEfFCl7DIcQJfEF5SxNPStUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWE2NmEyNGUtYmI4OS0z NDk1LThlYWItNjk3NjUyNTBiODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzzkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAacB/b1Oha1Bg3OkRz1bW5Mao+BMUPuWmssGGty1iVCOTok5y5n0hXmLC gVsgus3DT1tcUlQePa+LcDAT3Cu0+GJCLkEaIDj+qhzP1v1mvY5/PI5F4FJe8n0k w33Po7JHHKa3MYbBN/ZZZLM3dPMbACkU3ZmdvhYtsPk/ykXRG78WesQS0SBVUbYn 1i+hn5OA9CDvnbHmJ5000zByMKE9Dk2P1cjC0z44j/mGiBZiKPo3cNF8jafZSs6C v5ffjf/BiUn2eOydp5eQBw7kqr2OYFVKNGivjBog6Cvq99IS9wIFVD6ALHQX/u4S WTwqiY6qrpMtz+nq4SGrJzVGtd/0PA== -----END CERTIFICATE-----Generated at Fri Sep 25 22:49:28 2026 by rpki-client