$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/833998ac-b1fb-3172-8bef-f1a4bb72b6f3.roa File: 833998ac-b1fb-3172-8bef-f1a4bb72b6f3.roa (raw, json) Hash identifier: tCJQ53jrjvaWaIPmJuNCzCClF3o80EW2UqGKzwaNFtQ= Subject key identifier: 42:0F:9E:33:F7:85:D1:B3:27:3F:7B:BA:9A:EF:26:64:E7:B2:66:A0 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E97B50E86148F5B043DFDAB80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/833998ac-b1fb-3172-8bef-f1a4bb72b6f3.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 203020 IP address blocks: 128.121.128.0/17 maxlen: 24 128.241.48.0/20 maxlen: 24 128.241.64.0/20 maxlen: 24 128.241.96.0/19 maxlen: 24 128.242.64.0/20 maxlen: 24 128.242.160.0/20 maxlen: 24 130.94.160.0/20 maxlen: 24 130.94.224.0/20 maxlen: 24 131.103.32.0/19 maxlen: 24 131.103.64.0/19 maxlen: 24 131.103.144.0/20 maxlen: 24 140.174.112.0/20 maxlen: 24 157.238.96.0/19 maxlen: 24 168.143.80.0/20 maxlen: 24 168.143.192.0/19 maxlen: 24 192.204.112.0/20 maxlen: 24 192.204.128.0/20 maxlen: 24 192.204.160.0/19 maxlen: 24 198.64.96.0/19 maxlen: 24 198.64.128.0/18 maxlen: 24 198.64.224.0/20 maxlen: 24 204.0.32.0/20 maxlen: 24 204.1.144.0/20 maxlen: 24 204.1.224.0/20 maxlen: 24 204.3.0.0/19 maxlen: 24 204.3.64.0/18 maxlen: 24 204.141.64.0/20 maxlen: 24 209.139.0.0/17 maxlen: 24 209.207.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:0e:86:14:8f:5b:04:3d:fd:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=f37fc08b-3cd1-411c-9691-ea2fae064ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:97:83:60:3a:a0:f6:4a:9d:7d:80:f1:a7:f7: 09:ff:33:6c:01:e0:85:fc:1e:01:5a:03:1a:e2:03: a9:93:0c:52:9e:ef:05:b6:ce:1f:9b:ee:69:9b:e5: f9:cd:a6:1e:b8:96:90:ee:c1:25:e7:9c:cc:f9:86: 18:ad:b9:e2:bc:39:e8:d8:c1:8c:d3:cf:80:d8:26: c7:6d:05:b1:e3:44:83:a8:ab:5e:bc:40:8b:53:6f: cb:09:0b:f1:27:2e:1f:f0:e6:26:07:40:f1:a5:2e: 7a:57:0b:da:fa:ff:16:ae:6d:c7:12:d2:19:ba:f8: 09:08:41:80:6f:b8:1f:7a:81:56:67:8f:e2:fe:44: 33:e0:21:24:01:0f:dc:99:86:a9:51:6f:eb:40:3d: cf:74:51:bc:0c:80:ee:d5:79:4a:31:82:cb:8e:1a: 9b:dd:8b:ee:8a:fd:53:28:5a:3b:c5:f4:c1:47:8b: 48:b1:fb:47:c9:2d:21:13:8a:cb:7f:d7:83:5c:4b: da:0c:32:87:b4:7e:90:11:b1:50:2c:26:49:0c:e1: 6a:83:81:e0:c4:50:bf:38:31:72:47:b6:21:64:46: b6:45:0e:cd:8c:46:0c:53:87:73:b4:48:3a:28:4c: 40:3b:57:52:73:42:5a:31:21:e1:2c:05:ae:cc:08: 57:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0F:9E:33:F7:85:D1:B3:27:3F:7B:BA:9A:EF:26:64:E7:B2:66:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/833998ac-b1fb-3172-8bef-f1a4bb72b6f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.128.0/17 128.241.48.0-128.241.79.255 128.241.96.0/19 128.242.64.0/20 128.242.160.0/20 130.94.160.0/20 130.94.224.0/20 131.103.32.0-131.103.95.255 131.103.144.0/20 140.174.112.0/20 157.238.96.0/19 168.143.80.0/20 168.143.192.0/19 192.204.112.0-192.204.143.255 192.204.160.0/19 198.64.96.0-198.64.191.255 198.64.224.0/20 204.0.32.0/20 204.1.144.0/20 204.1.224.0/20 204.3.0.0/19 204.3.64.0/18 204.141.64.0/20 209.139.0.0/17 209.207.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e5:22:d5:d9:a1:99:93:c5:cf:cb:e6:f1:5e:96:4c:35:ad: c0:8b:a7:18:6d:c2:fe:94:ff:5b:99:60:44:48:19:61:4c:95: 2c:2d:e3:60:4e:ad:6e:48:28:dd:88:c9:3f:f8:6c:12:fd:8f: e5:94:b9:e8:3f:d7:05:7d:a5:82:d3:b3:ff:80:6e:d5:22:4c: af:68:01:e8:94:aa:b0:47:80:39:a0:eb:f9:c7:37:b6:15:41: 4e:95:26:b8:a4:ed:15:04:4c:88:d3:7f:82:33:d3:20:fc:bc: 26:9b:e2:fe:6d:4c:e3:82:e2:c8:7b:b6:08:34:0d:76:79:51: 7f:76:60:cd:59:66:b2:98:a9:33:59:56:a6:9c:a3:a9:24:d8: 1c:32:48:de:d5:1b:e0:ec:78:2c:b7:27:5f:1f:d3:1d:22:af: f4:54:3d:93:06:b7:66:30:f5:6f:34:ac:9f:56:5c:10:6b:f7: 88:bd:36:3b:0d:2f:c9:37:32:82:84:d5:a9:60:ad:f6:e3:2b: d6:78:79:38:a1:ec:87:ee:f9:3c:58:8a:c7:3a:6d:35:98:72: 3b:68:09:7b:b4:f9:8d:23:33:7e:98:be:a3:4a:a0:2c:9d:a1: b6:32:9e:22:ce:60:f0:69:c4:13:82:4e:3c:14:ea:44:f7:4d: 8e:34:8e:61 -----BEGIN CERTIFICATE----- MIIG+DCCBeCgAwIBAgIUAQ0Mn0MoWE6XtQ6GFI9bBD39q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk ZjM3ZmMwOGItM2NkMS00MTFjLTk2OTEtZWEyZmFlMDY0ZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJeDYDqg9kqdfYDxp/cJ/zNsAeCF/B4BWgMa 4gOpkwxSnu8Fts4fm+5pm+X5zaYeuJaQ7sEl55zM+YYYrbnivDno2MGM08+A2CbH bQWx40SDqKtevECLU2/LCQvxJy4f8OYmB0DxpS56Vwva+v8Wrm3HEtIZuvgJCEGA b7gfeoFWZ4/i/kQz4CEkAQ/cmYapUW/rQD3PdFG8DIDu1XlKMYLLjhqb3Yvuiv1T KFo7xfTBR4tIsftHyS0hE4rLf9eDXEvaDDKHtH6QEbFQLCZJDOFqg4HgxFC/ODFy R7YhZEa2RQ7NjEYMU4dztEg6KExAO1dSc0JaMSHhLAWuzAhXXQIDAQABo4IECjCC BAYwHQYDVR0OBBYEFEIPnjP3hdGzJz97uprvJmTnsmagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODMzOTk4YWMtYjFmYi0z MTcyLThiZWYtZjFhNGJiNzJiNmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBvQQCAAEwgbYDBAeA eYAwDAMEBIDxMAMEBIDxQAMEBYDxYAMEBIDyQAMEBIDyoAMEBIJeoAMEBIJe4DAM AwQFg2cgAwQFg2dAAwQEg2eQAwQEjK5wAwQFne5gAwQEqI9QAwQFqI/AMAwDBATA zHADBATAzIADBAXAzKAwDAMEBcZAYAMEBsZAgAMEBMZA4AMEBMwAIAMEBMwBkAME BMwB4AMEBcwDAAMEBswDQAMEBMyNQAMEB9GLAAMEB9HPgDBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBi5SLV 2aGZk8XPy+bxXpZMNa3Ai6cYbcL+lP9bmWBESBlhTJUsLeNgTq1uSCjdiMk/+GwS /Y/llLnoP9cFfaWC07P/gG7VIkyvaAHolKqwR4A5oOv5xze2FUFOlSa4pO0VBEyI 03+CM9Mg/Lwmm+L+bUzjguLIe7YINA12eVF/dmDNWWaymKkzWVamnKOpJNgcMkje 1Rvg7HgstydfH9MdIq/0VD2TBrdmMPVvNKyfVlwQa/eIvTY7DS/JNzKChNWpYK32 4yvWeHk4oeyH7vk8WIrHOm01mHI7aAl7tPmNIzN+mL6jSqAsnaG2Mp4izmDwacQT gk48FOpE902ONI5h -----END CERTIFICATE-----Generated at Fri Jul 24 13:09:37 2026 by rpki-client