$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a59a4b39-5f64-366e-8310-41f56bd1475a.roa File: a59a4b39-5f64-366e-8310-41f56bd1475a.roa (raw, json) Hash identifier: 1KbJLQistuDwAMXw60UAXtZ1pkK1loW69+NEIe/YyUY= Subject key identifier: E8:BC:6E:54:D8:3C:AE:E5:2C:1E:9A:CC:37:BD:80:6E:99:C7:E5:98 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DC4004339A5B77F2FD803C980 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a59a4b39-5f64-366e-8310-41f56bd1475a.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 36222 IP address blocks: 128.241.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:43:39:a5:b7:7f:2f:d8:03:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=98011bed-863f-479b-83a1-a3c848001fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c8:24:29:a3:2b:52:f0:e9:9b:28:cb:9c:de: 4c:c4:24:35:f3:e5:9d:1d:96:b0:37:3c:d9:6d:5d: 43:25:06:6c:24:74:72:cf:f7:bd:aa:ef:02:0a:b9: db:dd:8f:c8:25:59:5c:d7:c3:14:fd:60:ee:d9:e1: f9:7f:fb:d1:55:04:81:6c:e5:68:f6:21:3c:2b:5d: c5:2c:34:a8:e7:1a:88:6b:4f:79:57:4f:f3:35:6f: c7:26:bd:28:0a:f7:ff:4c:86:e8:2c:20:99:66:fd: cf:73:0f:d6:cc:3d:10:65:c5:e2:60:e6:d8:69:40: 2e:b9:1c:99:91:d2:df:80:63:aa:6d:00:44:5f:4a: c8:81:ce:06:f3:40:ba:2f:f8:a3:43:69:43:86:ab: c9:da:b2:71:1c:67:33:3b:38:4b:1f:da:cb:94:6d: 9f:2a:48:f4:f1:04:94:c1:d9:98:e3:d3:a4:f0:72: bc:04:92:4f:ed:c9:ac:c0:2b:11:ec:45:c4:3e:b2: c5:be:ec:95:82:c3:4f:ac:18:d3:ec:3d:cd:eb:35: 1f:1f:d2:dd:c3:77:1e:e3:10:01:c1:32:eb:e8:b4: 22:fa:70:8c:fe:81:76:ed:9f:40:17:a0:c3:45:3d: 0c:c6:30:6f:aa:af:69:ee:e2:35:d6:47:b2:5b:e5: 5c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BC:6E:54:D8:3C:AE:E5:2C:1E:9A:CC:37:BD:80:6E:99:C7:E5:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a59a4b39-5f64-366e-8310-41f56bd1475a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:97:33:24:f1:17:2b:62:fe:fa:be:68:72:a4:f9:42:53:e0: e4:4b:4b:e9:12:e4:16:45:54:eb:c9:3a:46:52:3e:ee:7f:0c: 00:60:2f:14:51:8e:f5:c9:10:de:9a:a2:59:42:73:ba:bf:3e: ec:ae:5f:49:4b:e5:dd:ae:84:e8:df:90:27:7d:5f:9b:61:cb: 4c:a6:d2:93:53:46:86:31:a2:c9:12:eb:13:5c:d6:0d:a6:d0: fa:ac:fa:db:f0:3d:83:3e:0c:c3:08:e3:4a:74:57:8b:70:9c: 0c:cd:f5:16:ce:c3:ec:a4:45:cb:7b:04:51:02:cf:e1:6a:a2: 29:f6:65:63:c3:c2:00:5d:34:ff:d1:2e:b0:14:a5:7a:20:57: 60:d8:7c:52:3e:a5:61:ff:21:2e:a6:d4:6a:a1:71:b1:62:08: e1:63:df:f2:7b:60:38:18:eb:2a:d3:c7:c8:6c:1c:4b:09:b4: 9a:db:2b:2b:e8:41:1c:00:87:4f:4c:6e:6d:e2:3e:d9:18:65: cc:7f:4b:a8:4a:ff:b3:08:a3:69:ee:18:99:7e:95:55:18:3e: 5f:06:a7:e6:41:73:5a:4e:f4:6e:71:5f:fd:04:1e:b0:b6:91: 82:94:cc:2d:bc:ce:47:0f:db:cb:6b:7a:f5:17:46:a4:8c:4f: 50:1f:ff:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAEM5pbd/L9gDyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk OTgwMTFiZWQtODYzZi00NzliLTgzYTEtYTNjODQ4MDAxZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcgkKaMrUvDpmyjLnN5MxCQ18+WdHZawNzzZ bV1DJQZsJHRyz/e9qu8CCrnb3Y/IJVlc18MU/WDu2eH5f/vRVQSBbOVo9iE8K13F LDSo5xqIa095V0/zNW/HJr0oCvf/TIboLCCZZv3Pcw/WzD0QZcXiYObYaUAuuRyZ kdLfgGOqbQBEX0rIgc4G80C6L/ijQ2lDhqvJ2rJxHGczOzhLH9rLlG2fKkj08QSU wdmY49Ok8HK8BJJP7cmswCsR7EXEPrLFvuyVgsNPrBjT7D3N6zUfH9Ldw3ce4xAB wTLr6LQi+nCM/oF27Z9AF6DDRT0MxjBvqq9p7uI11keyW+VcyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi8blTYPK7lLB6azDe9gG6Zx+WYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTU5YTRiMzktNWY2NC0z NjZlLTgzMTAtNDFmNTZiZDE0NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgPHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaXMyTxFyti/vq+aHKk+UJT4ORLS+kS5BZFVOvJOkZSPu5/DABgLxRR jvXJEN6aollCc7q/PuyuX0lL5d2uhOjfkCd9X5thy0ym0pNTRoYxoskS6xNc1g2m 0Pqs+tvwPYM+DMMI40p0V4twnAzN9RbOw+ykRct7BFECz+Fqoin2ZWPDwgBdNP/R LrAUpXogV2DYfFI+pWH/IS6m1GqhcbFiCOFj3/J7YDgY6yrTx8hsHEsJtJrbKyvo QRwAh09Mbm3iPtkYZcx/S6hK/7MIo2nuGJl+lVUYPl8Gp+ZBc1pO9G5xX/0EHrC2 kYKUzC28zkcP28trevUXRqSMT1Af/w4= -----END CERTIFICATE-----Generated at Wed May 13 08:13:53 2026 by rpki-client