$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bbd436c6-609a-31cb-bef7-f830a6f8ff9a.roa File: bbd436c6-609a-31cb-bef7-f830a6f8ff9a.roa (raw, json) Hash identifier: xPz+Kh7hLifgPuTdG3CscQTNpZLyXs2aPW8gaQgrqbA= Subject key identifier: F1:2A:B1:9B:13:15:CC:16:43:4E:DE:E0:17:4B:15:38:FF:FB:7B:CA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D9A2014C5E4891C34CEAF1DE0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bbd436c6-609a-31cb-bef7-f830a6f8ff9a.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 400810 IP address blocks: 204.2.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:14:c5:e4:89:1c:34:ce:af:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=7950260e-0354-4a4b-a538-1f210c28172e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:0e:c5:ae:94:11:fb:c2:1d:a3:e7:33:11: 65:e6:24:bf:06:2d:71:c7:2b:4d:9f:d3:d5:0b:5c: 37:5b:4a:e4:48:14:ba:13:f6:84:ef:de:05:e6:22: 31:af:35:4e:94:77:aa:ae:0b:ba:99:24:3e:20:58: 4a:5e:5b:01:b6:3f:11:c8:b6:e1:e2:4b:b1:e8:d5: 58:66:56:ed:ea:1c:95:23:76:f3:b9:a9:9f:f1:22: 5c:0e:0f:b0:01:db:6c:f6:1a:d3:bb:fd:10:c0:28: 5d:f4:5d:88:06:fb:95:36:2f:5e:3f:36:7a:8e:fa: 23:3f:bc:5b:59:09:ad:72:4d:28:94:df:9e:4d:ab: d2:2f:72:2f:87:8b:95:70:6a:f9:6b:af:c0:5a:62: cb:4d:6b:5a:2a:d4:68:6e:1a:06:a9:b8:76:f6:6c: 22:99:12:9e:bd:37:52:ff:b6:65:b8:ae:bc:53:9a: ac:fb:58:17:c1:4b:6b:02:aa:ad:97:26:37:2c:9c: b7:8d:f0:0c:32:9b:2c:18:b5:c5:c3:81:9c:e7:01: 37:17:b4:03:0b:19:28:d0:95:d7:52:b9:3e:cf:9b: 3c:ea:71:d6:f5:3f:e2:eb:12:56:f3:6f:ab:4f:52: fe:6a:3b:d5:9b:96:3f:ae:c2:48:97:06:ab:be:25: 93:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2A:B1:9B:13:15:CC:16:43:4E:DE:E0:17:4B:15:38:FF:FB:7B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bbd436c6-609a-31cb-bef7-f830a6f8ff9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:60:10:e4:7b:bc:37:79:25:0a:d8:75:84:45:f5:84:f6:56: 65:65:4e:f7:87:e4:5d:d6:84:78:96:48:69:af:01:4a:2e:8d: 30:f9:3b:b2:ad:8e:6c:a6:8a:f6:a9:9a:1e:39:b1:a6:b1:a5: 27:b5:59:78:82:d2:01:1c:65:42:21:63:44:6d:c4:41:5c:74: 50:04:41:7f:5f:ee:62:97:31:b4:1c:01:e4:da:50:05:03:7e: 83:da:70:ed:8a:4f:91:07:f9:b0:2c:ae:86:b4:e1:04:93:b2: 7d:39:15:8f:7e:4a:94:4c:45:16:9c:64:e6:bc:0f:72:6e:57: 9c:a0:5d:c1:4c:8b:0b:e7:75:a9:ae:d3:41:95:bc:3d:c6:ee: ca:14:23:76:32:bb:28:a6:59:46:4c:5a:a9:3a:00:cf:c8:95: 11:4d:d2:c4:66:4c:7d:45:24:74:e6:16:9e:8f:14:53:46:a2: b5:d7:6c:a5:40:c1:17:33:fd:0d:e5:38:a6:27:6b:b5:3f:59: 64:2b:58:ac:37:6d:55:93:ed:21:09:86:ff:f5:0d:1c:26:b8: e7:49:c1:cb:5f:88:36:89:16:b3:d4:7c:6c:75:78:a9:75:1c: 0b:9a:31:9b:59:4b:3e:79:7b:19:87:f2:8e:fe:ed:36:85:95: 13:12:76:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIBTF5IkcNM6vHeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk Nzk1MDI2MGUtMDM1NC00YTRiLWE1MzgtMWYyMTBjMjgxNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wIOxa6UEfvCHaPnMxFl5iS/Bi1xxytNn9PV C1w3W0rkSBS6E/aE794F5iIxrzVOlHeqrgu6mSQ+IFhKXlsBtj8RyLbh4kux6NVY Zlbt6hyVI3bzuamf8SJcDg+wAdts9hrTu/0QwChd9F2IBvuVNi9ePzZ6jvojP7xb WQmtck0olN+eTavSL3Ivh4uVcGr5a6/AWmLLTWtaKtRobhoGqbh29mwimRKevTdS /7ZluK68U5qs+1gXwUtrAqqtlyY3LJy3jfAMMpssGLXFw4Gc5wE3F7QDCxko0JXX Urk+z5s86nHW9T/i6xJW82+rT1L+ajvVm5Y/rsJIlwarviWTUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEqsZsTFcwWQ07e4BdLFTj/+3vKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmJkNDM2YzYtNjA5YS0z MWNiLWJlZjctZjgzMGE2ZjhmZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAKHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNgEOR7vDd5JQrYdYRF9YT2VmVlTveH5F3WhHiWSGmvAUoujTD5O7Kt jmymivapmh45saaxpSe1WXiC0gEcZUIhY0RtxEFcdFAEQX9f7mKXMbQcAeTaUAUD foPacO2KT5EH+bAsroa04QSTsn05FY9+SpRMRRacZOa8D3JuV5ygXcFMiwvndamu 00GVvD3G7soUI3YyuyimWUZMWqk6AM/IlRFN0sRmTH1FJHTmFp6PFFNGorXXbKVA wRcz/Q3lOKYna7U/WWQrWKw3bVWT7SEJhv/1DRwmuOdJwctfiDaJFrPUfGx1eKl1 HAuaMZtZSz55exmH8o7+7TaFlRMSdj4= -----END CERTIFICATE-----Generated at Wed May 13 11:54:45 2026 by rpki-client