$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5bf8f2a-f5b8-30c7-853d-3696e68c3e3b.roa File: b5bf8f2a-f5b8-30c7-853d-3696e68c3e3b.roa (raw, json) Hash identifier: CAYUTymTtaQgklwomjdNxam/hNERguGv7b2vs8KWLMo= Subject key identifier: E4:0F:9B:05:4C:4B:F0:FB:BC:22:3E:EC:D0:87:C4:AE:E1:21:46:23 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E8C8A42EAA1E79CFE1D6FB300 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5bf8f2a-f5b8-30c7-853d-3696e68c3e3b.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 7843 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:42:ea:a1:e7:9c:fe:1d:6f:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=ca54687b-f932-4170-bc7f-69a34ec0bf62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7d:0c:18:61:31:53:48:4a:14:a7:11:64:a7: ba:5f:6b:f6:a9:b0:48:07:5c:7a:ce:ea:75:06:7e: af:6b:00:ce:c7:db:8b:c5:97:6f:7f:b9:fc:f7:2f: c4:56:bf:a9:04:c4:51:8f:9f:10:5a:54:42:e8:7d: b8:92:96:96:4b:73:af:96:6f:b2:84:dc:25:a3:e5: ef:82:fc:5e:bc:5b:c7:29:83:65:bd:a4:99:9b:73: 2e:99:1e:f5:5e:9c:2a:dd:68:be:34:68:69:f7:19: 4d:a3:b9:b8:1c:e9:5e:17:59:a4:33:03:53:2a:8b: d2:37:6b:61:0f:07:59:df:8a:9d:ce:20:fb:27:8b: 17:9c:96:3a:1d:a4:53:5b:70:b3:f5:92:af:b5:52: 52:d6:89:69:0c:6f:0a:cc:28:09:95:62:7e:fe:03: 6e:8d:34:8b:9f:11:98:73:67:e8:5b:bd:37:e9:3b: 82:c3:41:dd:56:0c:9b:88:c6:07:b2:23:00:c3:81: 0a:0e:00:e0:b1:38:f3:97:56:5f:0c:30:e6:e0:a7: 78:c5:d8:b3:3c:c0:1a:d5:27:9f:18:f4:58:67:3d: e9:ac:88:00:dc:f3:69:3d:23:71:36:82:00:e0:7c: f2:e1:ef:43:7e:25:14:f7:64:33:1d:7f:6c:97:f6: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0F:9B:05:4C:4B:F0:FB:BC:22:3E:EC:D0:87:C4:AE:E1:21:46:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5bf8f2a-f5b8-30c7-853d-3696e68c3e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:6e:fd:f4:8c:7b:22:24:4b:b1:26:e4:a6:f8:32:8e:ca:73: 2a:01:a8:2c:eb:80:d2:b0:bf:8d:8d:b9:0b:b1:54:f4:47:66: d0:b4:e2:23:3b:06:aa:58:a7:0b:3c:84:93:fe:b4:26:63:01: be:39:75:fc:22:05:10:2e:b7:3d:53:f5:6a:93:51:80:88:48: 16:16:25:7c:36:66:a0:e8:13:4f:bb:41:35:8d:b2:4a:16:8c: 35:89:1e:02:e9:b3:2c:63:7a:e8:34:8c:2d:37:32:62:d9:df: c3:ce:9f:2a:be:21:d3:c0:01:39:94:5d:b4:7f:a7:e0:a2:14: 37:4c:4b:7c:34:54:25:98:3d:f2:74:00:17:4b:9c:34:10:80: ce:3e:63:40:84:11:98:d7:94:4c:f3:28:c9:a0:16:38:fb:d9: e4:a3:85:fc:07:61:3e:0f:7e:4b:af:4e:a9:08:7b:da:8a:af: e2:0a:6b:ee:25:a2:07:53:23:96:83:dd:5d:af:8b:e1:81:a8: 87:a7:b0:2a:c8:15:f2:e3:04:10:e0:1c:0d:be:d9:65:73:e8: 21:e1:ce:d3:92:e5:06:f0:90:23:19:44:f5:ac:2e:bf:6a:ca: 90:b1:75:74:a1:3b:90:01:ca:62:44:65:17:4f:be:4a:fb:61: b4:67:65:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6MikLqoeec/h1vswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk Y2E1NDY4N2ItZjkzMi00MTcwLWJjN2YtNjlhMzRlYzBiZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8n0MGGExU0hKFKcRZKe6X2v2qbBIB1x6zup1 Bn6vawDOx9uLxZdvf7n89y/EVr+pBMRRj58QWlRC6H24kpaWS3Ovlm+yhNwlo+Xv gvxevFvHKYNlvaSZm3MumR71Xpwq3Wi+NGhp9xlNo7m4HOleF1mkMwNTKovSN2th DwdZ34qdziD7J4sXnJY6HaRTW3Cz9ZKvtVJS1olpDG8KzCgJlWJ+/gNujTSLnxGY c2foW7036TuCw0HdVgybiMYHsiMAw4EKDgDgsTjzl1ZfDDDm4Kd4xdizPMAa1Sef GPRYZz3prIgA3PNpPSNxNoIA4Hzy4e9DfiUU92QzHX9sl/ZnvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQPmwVMS/D7vCI+7NCHxK7hIUYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjViZjhmMmEtZjViOC0z MGM3LTg1M2QtMzY5NmU2OGMzZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFu/fSMeyIkS7Em5Kb4Mo7KcyoBqCzrgNKwv42NuQuxVPRHZtC04iM7 BqpYpws8hJP+tCZjAb45dfwiBRAutz1T9WqTUYCISBYWJXw2ZqDoE0+7QTWNskoW jDWJHgLpsyxjeug0jC03MmLZ38POnyq+IdPAATmUXbR/p+CiFDdMS3w0VCWYPfJ0 ABdLnDQQgM4+Y0CEEZjXlEzzKMmgFjj72eSjhfwHYT4PfkuvTqkIe9qKr+IKa+4l ogdTI5aD3V2vi+GBqIensCrIFfLjBBDgHA2+2WVz6CHhztOS5QbwkCMZRPWsLr9q ypCxdXShO5ABymJEZRdPvkr7YbRnZXQ= -----END CERTIFICATE-----Generated at Thu Jul 23 23:19:31 2026 by rpki-client