$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/db543947-2169-3dfb-b2f9-fa34abb5eed6.roa File: db543947-2169-3dfb-b2f9-fa34abb5eed6.roa (raw, json) Hash identifier: GULNyoVtXDgT2ayOh1TQc14EPBQsKSG/QUkSey4lU7k= Subject key identifier: 9B:43:D7:CB:2F:40:7C:B8:42:99:47:3E:B2:44:C9:97:AF:95:7A:4E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DA81585FE3F1A5D7DA413BE00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/db543947-2169-3dfb-b2f9-fa34abb5eed6.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 45102 IP address blocks: 206.54.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:85:fe:3f:1a:5d:7d:a4:13:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=5da2da73-d4cd-4022-b6f5-0fc42a5012bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:91:9f:6c:7f:f3:72:b2:de:d0:db:86:35:c4: 7d:dd:3a:b7:ab:f3:ab:26:67:ee:a7:36:dc:c7:6b: e3:5b:09:bc:49:35:44:dd:70:e0:a4:e7:b1:de:3a: 72:76:15:4c:d7:05:0e:88:b2:83:15:cb:f8:28:1b: df:e5:cf:14:62:7b:82:ad:ee:a7:eb:ab:49:ea:13: e5:0d:e9:92:4e:c6:6e:0f:c1:bd:a7:b8:34:3c:69: 7f:cb:d5:95:c9:5d:3f:ec:d7:51:e1:11:95:0d:cc: 8c:00:c0:95:87:10:1d:d5:b2:03:26:5c:7d:79:ed: 4d:f8:64:50:70:07:63:71:ac:a2:41:70:ba:d8:bf: 07:eb:3c:0b:22:b4:36:71:55:16:9d:bf:5a:3d:5a: cb:d5:ef:bb:12:07:db:af:28:27:9e:aa:92:5a:8b: d9:ed:16:02:70:dd:39:52:9d:ba:7d:2f:23:44:58: 62:d4:6c:15:30:5b:11:03:8c:16:02:f9:38:78:68: 0e:fc:70:9e:93:14:97:ca:6f:08:b8:44:ef:3f:1c: 54:4a:b1:26:22:d6:ad:02:74:54:5e:9f:24:c1:cd: ae:9c:a2:a1:36:4d:2f:48:8b:e0:e6:e0:4b:73:e6: 86:a3:77:20:48:cf:a4:77:f6:bc:63:4d:fe:c1:f9: 2e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:43:D7:CB:2F:40:7C:B8:42:99:47:3E:B2:44:C9:97:AF:95:7A:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/db543947-2169-3dfb-b2f9-fa34abb5eed6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:88:e9:28:11:e5:dc:6f:19:8f:3a:f0:9f:72:f7:1c:d7:78: 75:9e:cc:33:be:bb:1e:7e:47:51:b6:b7:d4:3a:9f:b8:53:fa: 1b:dc:0e:29:11:53:6c:a9:c6:05:ca:ea:81:95:4d:f0:92:d0: 1d:4d:94:3e:73:d9:8b:c3:1d:d6:8d:00:f6:7d:24:8d:d4:8e: d0:61:1e:22:a4:0e:db:b0:3f:0b:fa:11:41:ee:89:2c:ff:dd: 32:ff:03:ff:6a:47:60:e6:03:0f:b3:08:64:93:33:5e:e7:74: 7b:41:99:bc:4c:a2:1a:be:7f:ff:6a:88:f2:7e:a9:36:00:ad: 16:2a:9f:7c:79:71:45:0d:37:b9:5e:b0:6b:7c:c1:cd:fc:c3: b8:b2:6d:07:3f:07:19:99:0a:0a:46:b3:6a:4d:22:8c:98:f3: 05:5d:b5:10:47:40:7c:0c:65:2b:74:ed:7c:a2:f1:24:3c:d5: cd:45:5a:7d:33:7d:1d:cc:70:ce:a3:48:74:a4:e3:5f:28:5a: 5a:d5:94:a7:ba:67:89:22:70:a9:e5:d9:32:9f:f3:df:92:41: 5d:67:0e:ca:8e:e9:41:ab:47:45:a3:3d:4d:06:dc:a7:a8:a7: e0:7c:bd:10:fb:58:f2:ed:83:0a:d3:a6:fa:42:65:da:de:ab: 8a:e1:f8:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYX+PxpdfaQTvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk NWRhMmRhNzMtZDRjZC00MDIyLWI2ZjUtMGZjNDJhNTAxMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJGfbH/zcrLe0NuGNcR93Tq3q/OrJmfupzbc x2vjWwm8STVE3XDgpOex3jpydhVM1wUOiLKDFcv4KBvf5c8UYnuCre6n66tJ6hPl DemSTsZuD8G9p7g0PGl/y9WVyV0/7NdR4RGVDcyMAMCVhxAd1bIDJlx9ee1N+GRQ cAdjcayiQXC62L8H6zwLIrQ2cVUWnb9aPVrL1e+7EgfbrygnnqqSWovZ7RYCcN05 Up26fS8jRFhi1GwVMFsRA4wWAvk4eGgO/HCekxSXym8IuETvPxxUSrEmItatAnRU Xp8kwc2unKKhNk0vSIvg5uBLc+aGo3cgSM+kd/a8Y03+wfku4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtD18svQHy4QplHPrJEyZevlXpOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGI1NDM5NDctMjE2OS0z ZGZiLWIyZjktZmEzNGFiYjVlZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzjYSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiI6SgR5dxvGY868J9y9xzXeHWezDO+ux5+R1G2t9Q6n7hT+hvcDikR U2ypxgXK6oGVTfCS0B1NlD5z2YvDHdaNAPZ9JI3UjtBhHiKkDtuwPwv6EUHuiSz/ 3TL/A/9qR2DmAw+zCGSTM17ndHtBmbxMohq+f/9qiPJ+qTYArRYqn3x5cUUNN7le sGt8wc38w7iybQc/BxmZCgpGs2pNIoyY8wVdtRBHQHwMZSt07Xyi8SQ81c1FWn0z fR3McM6jSHSk418oWlrVlKe6Z4kicKnl2TKf89+SQV1nDsqO6UGrR0WjPU0G3Keo p+B8vRD7WPLtgwrTpvpCZdreq4rh+PU= -----END CERTIFICATE-----Generated at Wed May 13 07:37:08 2026 by rpki-client