$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b7a7450d-0a22-30aa-8a66-05f18258110b.roa File: b7a7450d-0a22-30aa-8a66-05f18258110b.roa (raw, json) Hash identifier: GbvlT2yInYjkTbzr29ai3r3G8ESLC/BoaMPGlDkZHsA= Subject key identifier: 40:25:D0:05:01:14:39:75:0A:D3:D6:CF:1A:6B:FB:E4:C2:13:7D:37 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F1B624A501AC2B70D4E1D9680 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b7a7450d-0a22-30aa-8a66-05f18258110b.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 142132 IP address blocks: 206.54.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4a:50:1a:c2:b7:0d:4e:1d:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=fde9b3ba-5df0-4a39-8efa-fc7f304e4ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8f:d4:de:5e:77:5e:80:bf:f9:13:f4:9f:84: 1d:5d:29:39:34:a2:6d:8c:b4:f5:e6:5a:f3:e5:cc: e9:2b:bf:0c:39:dc:95:83:2d:6f:f1:87:52:99:c9: 50:a8:d8:41:55:4a:8a:5f:33:ab:d1:c1:76:c9:eb: 63:d4:bc:78:35:c4:de:32:1d:1a:f4:1d:3f:d1:d8: 8f:66:f3:58:37:8a:af:a0:3a:6d:7b:27:93:8d:f7: 09:54:f5:ba:07:31:18:37:5d:17:30:de:4a:f1:8e: 1e:e5:0f:e9:b5:db:04:23:61:f1:2d:e1:b1:b8:a4: ca:d7:db:42:e5:01:f4:bc:13:07:b3:32:26:6c:ad: 1f:a1:10:97:20:ea:c2:df:48:e7:44:9c:4c:dd:02: 02:00:97:67:b5:9e:c3:00:66:c7:bb:9d:c5:4a:3a: cc:7f:22:8f:fb:1a:20:26:d0:72:3c:30:25:97:6c: 9e:eb:64:3b:09:3c:16:25:bc:ab:d7:69:9c:33:8c: c8:d1:1b:b7:75:1f:f3:f9:12:c4:00:09:ac:a8:2e: 41:c1:0a:cb:ec:0c:28:0c:b0:8a:a2:c0:79:d9:7a: b6:b3:e3:7e:80:79:b1:5a:5e:44:b4:c3:55:1c:18: 4c:1c:fe:b6:43:25:9d:8e:48:89:ab:3d:95:d5:6b: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:25:D0:05:01:14:39:75:0A:D3:D6:CF:1A:6B:FB:E4:C2:13:7D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b7a7450d-0a22-30aa-8a66-05f18258110b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:34:1c:05:1e:6e:95:0d:74:86:77:05:cb:6b:bc:fa:6b:ef: 4d:27:06:42:10:0f:46:2a:26:ab:09:51:08:4a:00:1d:bb:36: 32:db:7e:cf:57:ca:b7:09:60:16:14:4e:b8:c6:a5:50:bd:b3: 6c:23:21:0f:f7:ce:00:01:ca:97:b5:8c:bc:a9:33:35:3c:d7: 88:5d:14:4b:aa:f5:80:74:50:3d:6f:fe:be:bc:14:f5:3a:37: 51:86:93:84:9c:55:89:80:8a:45:bc:24:1b:d7:ee:24:40:b5: 55:2a:f5:94:c9:de:39:8b:51:cd:d9:af:0c:1d:fe:b9:8f:c7: 07:c9:f1:5b:e8:74:f5:2a:1d:27:e2:a6:c7:28:5a:3d:d4:26: 40:5a:30:87:2f:37:5d:19:e2:24:38:52:b5:5a:fd:f1:e0:67: 27:d5:0c:de:84:6f:df:3c:c8:2c:90:34:1e:50:67:fc:25:6b: 65:a1:8e:2b:b5:1c:08:18:b1:a3:a0:8f:79:7b:bd:8f:af:41: 3c:12:8d:55:f0:28:98:27:42:8e:46:1d:33:a8:28:44:61:69: 07:c7:0f:9a:e8:5c:3e:53:a5:68:23:a5:4e:95:09:c0:5d:b0: 00:25:24:1c:a3:b9:03:de:dc:f0:a6:86:ed:65:73:90:af:8d: 92:0a:7a:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkpQGsK3DU4dloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZmRlOWIzYmEtNWRmMC00YTM5LThlZmEtZmM3ZjMwNGU0YWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74/U3l53XoC/+RP0n4QdXSk5NKJtjLT15lrz 5czpK78MOdyVgy1v8YdSmclQqNhBVUqKXzOr0cF2yetj1Lx4NcTeMh0a9B0/0diP ZvNYN4qvoDpteyeTjfcJVPW6BzEYN10XMN5K8Y4e5Q/ptdsEI2HxLeGxuKTK19tC 5QH0vBMHszImbK0foRCXIOrC30jnRJxM3QICAJdntZ7DAGbHu53FSjrMfyKP+xog JtByPDAll2ye62Q7CTwWJbyr12mcM4zI0Ru3dR/z+RLEAAmsqC5BwQrL7AwoDLCK osB52Xq2s+N+gHmxWl5EtMNVHBhMHP62QyWdjkiJqz2V1Wtv6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAl0AUBFDl1CtPWzxpr++TCE303MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjdhNzQ1MGQtMGEyMi0z MGFhLThhNjYtMDVmMTgyNTgxMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzjYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA0HAUebpUNdIZ3BctrvPpr700nBkIQD0YqJqsJUQhKAB27NjLbfs9X yrcJYBYUTrjGpVC9s2wjIQ/3zgABype1jLypMzU814hdFEuq9YB0UD1v/r68FPU6 N1GGk4ScVYmAikW8JBvX7iRAtVUq9ZTJ3jmLUc3Zrwwd/rmPxwfJ8VvodPUqHSfi pscoWj3UJkBaMIcvN10Z4iQ4UrVa/fHgZyfVDN6Eb988yCyQNB5QZ/wla2Whjiu1 HAgYsaOgj3l7vY+vQTwSjVXwKJgnQo5GHTOoKERhaQfHD5roXD5TpWgjpU6VCcBd sAAlJByjuQPe3PCmhu1lc5CvjZIKepo= -----END CERTIFICATE-----Generated at Sat Sep 26 00:14:46 2026 by rpki-client