$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa File: 8da6384b-e652-36de-b69d-ac9de12cdc66.roa (raw, json) Hash identifier: LXgdpf+P7AAXsdQr0OVupyUiPRc8DpS57Zn4KmL7sK4= Subject key identifier: BE:97:EB:96:97:1F:C8:07:EC:B7:0D:8D:33:5E:86:D7:52:BE:03:B4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F498BE8E94BDC7CF26BA72680 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 141193 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:e8:e9:4b:dc:7c:f2:6b:a7:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bc64dbae-3121-45be-91ad-d7bc216eda60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:53:4f:80:2e:ec:48:d3:58:99:e8:02:98: 9e:da:c0:30:23:08:23:86:ef:b9:c1:da:60:00:a7: b3:94:ac:31:de:3c:4f:d5:fc:aa:06:4c:bd:db:2b: e4:be:80:5f:e9:de:6c:40:93:ec:c4:e2:f0:c3:65: 99:a7:f9:bb:c1:b9:b2:c2:9c:c3:71:07:04:8d:80: b8:08:1d:e4:52:65:fa:fd:bf:c4:79:36:5d:cb:df: 28:ab:93:e7:55:6a:1d:94:c1:a4:c9:11:80:24:94: 5b:65:d4:bd:04:58:ae:5d:fe:0e:0d:69:3a:9d:af: b8:a6:17:1f:bd:04:ca:83:3a:4c:5d:a5:20:88:78: ab:14:b4:a1:c9:0e:be:ee:91:0c:a9:0d:c6:c5:b0: c4:92:dc:f6:7a:92:a8:87:cb:09:0f:cb:11:61:5d: b7:d0:a6:74:f0:24:60:7c:ef:de:01:83:de:4d:21: 68:68:f4:4c:b3:18:d3:a2:81:42:1e:e2:7b:35:f9: 20:30:63:e5:66:38:dc:28:80:97:4c:e7:36:9b:71: 1b:b8:e3:ed:cd:3a:27:2e:05:13:0e:46:3d:d9:bb: 3b:17:ee:5c:29:cc:1c:8d:9d:35:7b:0c:12:8a:69: 8b:73:eb:70:96:0a:ab:7f:78:4f:32:24:cd:95:35: 02:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:97:EB:96:97:1F:C8:07:EC:B7:0D:8D:33:5E:86:D7:52:BE:03:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:bc:12:dd:b3:0c:40:5b:af:f6:61:af:ea:72:0f:0a:df:11: c8:0b:ce:de:80:67:7b:bd:5d:bd:00:0d:81:2c:17:a2:9d:9b: 8a:95:08:44:2c:49:04:76:6f:1a:5e:a2:a5:19:98:85:fa:42: d5:0e:41:d0:37:a1:c8:ee:0b:c7:fa:05:cb:fb:be:2a:69:b7: 04:aa:76:bd:32:64:8b:2e:2d:cd:63:ec:41:f9:c1:d0:49:5d: 14:55:34:f0:a2:5b:77:cd:10:32:cb:db:75:e6:6e:03:06:ba: ea:1b:e7:1a:97:ad:ea:f2:1d:dc:02:9e:7e:43:f5:a9:64:c2: b7:7e:e0:65:e1:62:e6:32:50:69:7c:d4:1e:ea:9a:4d:ec:e0: f9:73:47:ab:95:63:ad:4f:78:81:e5:9f:2f:1f:e3:76:b2:22: a6:b7:f8:ef:21:1d:8e:9e:f7:5c:ff:6f:ac:78:72:3d:67:3c: cd:bf:c1:75:78:8c:dd:49:16:6b:bb:4e:83:89:8c:be:ad:d4: dd:02:d8:22:09:02:d4:98:4d:33:af:b1:d2:fd:cb:b2:13:11: d3:c0:72:05:27:66:3b:78:ce:94:c0:62:a4:a5:9e:4f:50:22: 6a:4c:27:fb:19:71:d2:00:82:53:0b:15:2e:e2:12:45:78:25: 0a:a3:cf:20 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE9Ji+jpS9x88munJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmM2NGRiYWUtMzEyMS00NWJlLTkxYWQtZDdiYzIxNmVkYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFpTT4Au7EjTWJnoApie2sAwIwgjhu+5wdpg AKezlKwx3jxP1fyqBky92yvkvoBf6d5sQJPsxOLww2WZp/m7wbmywpzDcQcEjYC4 CB3kUmX6/b/EeTZdy98oq5PnVWodlMGkyRGAJJRbZdS9BFiuXf4ODWk6na+4phcf vQTKgzpMXaUgiHirFLShyQ6+7pEMqQ3GxbDEktz2epKoh8sJD8sRYV230KZ08CRg fO/eAYPeTSFoaPRMsxjTooFCHuJ7NfkgMGPlZjjcKICXTOc2m3EbuOPtzTonLgUT DkY92bs7F+5cKcwcjZ01ewwSimmLc+twlgqrf3hPMiTNlTUCEwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFL6X65aXH8gH7LcNjTNehtdSvgO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGRhNjM4NGItZTY1Mi0z NmRlLWI2OWQtYWM5ZGUxMmNkYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKu8Et2zDEBbr/Zhr+pyDwrfEcgLzt6AZ3u9Xb0A DYEsF6Kdm4qVCEQsSQR2bxpeoqUZmIX6QtUOQdA3ocjuC8f6Bcv7vipptwSqdr0y ZIsuLc1j7EH5wdBJXRRVNPCiW3fNEDLL23XmbgMGuuob5xqXreryHdwCnn5D9alk wrd+4GXhYuYyUGl81B7qmk3s4PlzR6uVY61PeIHlny8f43ayIqa3+O8hHY6e91z/ b6x4cj1nPM2/wXV4jN1JFmu7ToOJjL6t1N0C2CIJAtSYTTOvsdL9y7ITEdPAcgUn Zjt4zpTAYqSlnk9QImpMJ/sZcdIAglMLFS7iEkV4JQqjzyA= -----END CERTIFICATE-----Generated at Fri Sep 25 16:08:45 2026 by rpki-client