$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa File: c0815d17-83a5-3543-8437-c33f765a2be5.roa (raw, json) Hash identifier: aXt6IcbderTaIp7cQgmh3bn/FULG1koWJQVCkksMf4Y= Subject key identifier: AF:CA:3A:68:9B:35:0B:37:16:BB:21:A4:9C:A6:F0:AF:2B:CF:DD:5D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E5A4A02BF83D5505C4987D340 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 1225 IP address blocks: 198.64.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:02:bf:83:d5:50:5c:49:87:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=9d5d85a7-9c70-4d1e-a6a1-a72aad440cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:83:f8:47:c2:96:a2:30:5f:a4:77:26:66:b2: bd:cb:a3:25:3b:a4:2d:15:9e:ae:05:8d:25:05:43: 22:16:84:c8:25:f0:04:46:4a:31:e7:bb:c1:c2:7b: d1:93:21:df:7b:a4:67:2c:ee:b2:69:f8:24:52:eb: c9:63:15:c5:91:d3:a7:6b:5a:4d:fc:e8:28:5f:59: cb:12:41:16:70:f7:f3:aa:2b:2e:8d:0c:78:13:f6: c5:05:ae:47:83:5e:36:47:a8:30:d2:e1:23:ab:c0: f2:84:76:72:3a:c7:60:4a:ed:dc:c6:d9:24:dd:45: 2f:6a:8c:19:87:76:3b:3c:36:2c:60:43:74:ae:e5: 99:a0:2c:b8:6d:1c:97:32:8e:b6:92:77:42:6a:f4: 60:74:49:1e:02:d4:c6:6a:bd:54:a2:68:9b:3b:c3: cd:14:2b:c3:19:47:58:2f:9b:56:a6:ec:d8:96:07: 61:d8:38:8b:6d:14:9f:00:34:e2:c1:30:46:94:e7: 63:94:dd:9a:99:ef:9b:ed:75:4b:58:32:3a:bf:2f: e9:85:2c:d3:a7:04:d0:6d:9f:27:7d:d4:65:c0:5f: a8:a4:07:6a:d0:bb:40:e0:7e:6b:de:67:e9:75:1d: cf:fd:73:84:67:55:f7:4d:5f:93:3a:b8:00:a8:75: c8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CA:3A:68:9B:35:0B:37:16:BB:21:A4:9C:A6:F0:AF:2B:CF:DD:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c0815d17-83a5-3543-8437-c33f765a2be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.64.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c7:60:05:c5:3d:7e:fa:3c:02:5a:99:81:11:f9:cb:f9:c0: 26:2d:5b:bf:d8:3c:f8:96:ce:c7:d0:88:9c:b7:77:c3:41:d3: 52:c9:f8:1c:ca:c1:c0:63:98:e1:c0:8a:65:6c:1d:f2:5f:83: c6:1d:fe:d7:00:5a:98:3b:34:9f:ad:db:da:e2:95:f5:4e:19: 47:7c:96:49:52:2f:58:e1:19:af:b6:f4:af:1a:99:21:ef:2f: b8:50:39:0f:98:38:07:59:e6:7c:c4:db:78:3a:f4:f6:2c:f1: 4c:eb:83:83:23:8d:80:cd:fe:d0:71:ce:c3:b1:2e:8b:f1:dd: 54:38:04:72:c2:b7:af:90:1d:7c:75:75:75:a0:79:a5:f5:18: 0a:39:1f:31:a9:70:74:1d:84:86:63:3c:38:4b:7d:00:0b:48: d6:26:41:2a:e2:65:03:ab:a9:e2:74:5d:b3:27:81:e4:97:5d: e0:ef:c2:ac:2c:ee:2c:9d:c3:d4:cf:fc:6d:82:8a:7d:4e:d9: b1:c0:94:62:ac:aa:08:e1:d5:88:c6:80:ef:09:2f:c6:4b:cb: cf:e1:50:ce:bb:f0:e2:db:5b:a3:1e:a2:e1:ea:67:a1:66:70: ae:4d:d1:55:45:a9:f0:43:d2:89:fa:3b:dc:9b:fd:58:4b:88: a3:db:4d:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSgK/g9VQXEmH00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk OWQ1ZDg1YTctOWM3MC00ZDFlLWE2YTEtYTcyYWFkNDQwY2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYP4R8KWojBfpHcmZrK9y6MlO6QtFZ6uBY0l BUMiFoTIJfAERkox57vBwnvRkyHfe6RnLO6yafgkUuvJYxXFkdOna1pN/OgoX1nL EkEWcPfzqisujQx4E/bFBa5Hg142R6gw0uEjq8DyhHZyOsdgSu3cxtkk3UUvaowZ h3Y7PDYsYEN0ruWZoCy4bRyXMo62kndCavRgdEkeAtTGar1UomibO8PNFCvDGUdY L5tWpuzYlgdh2DiLbRSfADTiwTBGlOdjlN2ame+b7XVLWDI6vy/phSzTpwTQbZ8n fdRlwF+opAdq0LtA4H5r3mfpdR3P/XOEZ1X3TV+TOrgAqHXIwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/KOmibNQs3FrshpJym8K8rz91dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzA4MTVkMTctODNhNS0z NTQzLTg0MzctYzMzZjc2NWEyYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxkAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXHYAXFPX76PAJamYER+cv5wCYtW7/YPPiWzsfQiJy3d8NB01LJ+BzK wcBjmOHAimVsHfJfg8Yd/tcAWpg7NJ+t29rilfVOGUd8lklSL1jhGa+29K8amSHv L7hQOQ+YOAdZ5nzE23g69PYs8Uzrg4MjjYDN/tBxzsOxLovx3VQ4BHLCt6+QHXx1 dXWgeaX1GAo5HzGpcHQdhIZjPDhLfQALSNYmQSriZQOrqeJ0XbMngeSXXeDvwqws 7iydw9TP/G2Cin1O2bHAlGKsqgjh1YjGgO8JL8ZLy8/hUM678OLbW6MeouHqZ6Fm cK5N0VVFqfBD0on6O9yb/VhLiKPbTeE= -----END CERTIFICATE-----Generated at Thu Jul 23 21:53:08 2026 by rpki-client