$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fdbf5dec-8f42-307e-8858-c6991bcb6706.roa File: fdbf5dec-8f42-307e-8858-c6991bcb6706.roa (raw, json) Hash identifier: 9W3Rgo8xCIL4QeMtsuRZe35lqya6B5YsGPIoQ4tdfxM= Subject key identifier: CF:46:6B:5D:4D:AF:5B:6E:C5:A3:FC:D8:57:67:AD:64:FC:97:84:EC Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F4973091C39FA36DC3A7CD2C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fdbf5dec-8f42-307e-8858-c6991bcb6706.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 50028 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:09:1c:39:fa:36:dc:3a:7c:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=077ee70a-a31f-4ab1-a471-a82fd5afac2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:37:6e:5a:ad:6b:d1:08:b2:5c:e8:31:ce:f9: a6:06:c5:7b:e0:e7:ad:2f:83:8e:42:9d:71:f0:ed: 3c:a9:b4:1b:03:1e:d0:b2:91:ab:73:a6:1e:63:77: 6d:58:65:ea:be:24:84:52:61:f0:c8:c0:35:cd:1e: 21:f9:46:db:f6:9a:a4:67:df:5e:b9:e6:5e:fa:58: 19:54:e1:ee:83:5c:7c:c0:76:ac:cf:6d:69:0f:6d: 43:e7:50:35:03:9f:3e:76:e1:ff:41:79:f1:37:f5: fb:a6:1f:d7:79:2d:fa:7b:69:ba:7b:a4:1c:bb:93: a3:9b:22:aa:06:c5:b7:a1:6e:28:67:cc:b9:97:b2: a6:15:98:05:cf:d7:fb:5f:17:4b:b1:35:01:72:6b: 0c:cc:28:35:ec:a4:29:22:d8:52:78:a2:56:71:a6: 1d:92:0e:8f:a8:7e:70:df:45:b4:b5:d7:0d:8b:b9: 37:34:64:ec:45:a0:08:4f:d1:a1:44:5f:49:e6:04: 7c:75:d9:e2:2a:56:12:5a:40:8c:4f:1f:98:9e:a7: b7:00:5f:8f:6f:aa:72:a1:15:60:8f:63:e7:a3:8c: 06:6f:b1:cd:1d:45:ec:00:22:97:74:71:d6:a5:60: f8:96:63:51:cd:86:3c:4a:36:60:df:4f:61:ec:de: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:46:6B:5D:4D:AF:5B:6E:C5:A3:FC:D8:57:67:AD:64:FC:97:84:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fdbf5dec-8f42-307e-8858-c6991bcb6706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:cf:f8:44:b7:de:e6:39:ee:9a:19:17:69:97:95:1f:08:22: 19:f6:fe:79:68:c3:31:f4:82:ec:49:c1:09:58:3d:99:71:30: dc:97:eb:44:39:c8:c2:9d:9c:47:3a:fa:ab:2c:d1:35:c7:91: e2:74:a2:79:ed:27:31:f3:c8:67:2f:ac:da:df:09:9b:96:37: 6e:00:4a:51:6b:36:05:cb:7a:dd:7e:9a:d7:4e:a7:eb:25:fa: b2:e5:7b:8d:11:fd:ab:be:68:9e:e1:f7:7c:99:10:ba:3e:e0: 4b:3e:e2:ad:cf:08:4e:86:eb:92:a8:fd:65:bd:bd:aa:bc:31: 9d:77:29:95:63:3a:a8:22:f4:25:b8:e0:6a:23:0b:7b:00:f7: 11:d1:e2:15:95:2c:c0:6b:b4:25:48:d0:f5:6f:11:4b:36:06: b6:a1:84:b2:ad:73:e7:70:2e:ae:06:de:d3:43:4d:f1:cd:f9: ae:37:52:3b:6d:44:a7:5e:50:2d:00:5b:5a:34:7b:02:b2:58: 74:de:b0:bc:b1:b5:8c:37:89:55:e5:95:18:c8:7e:56:76:49: c4:b3:a9:21:5b:56:83:f8:26:5c:25:37:bb:db:36:6c:a3:2d: 99:a5:6e:d5:ea:d1:7b:ec:d5:52:2a:4e:1b:a5:c4:d1:e5:62: 18:4b:c4:e8 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE9JcwkcOfo23Dp80sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDc3ZWU3MGEtYTMxZi00YWIxLWE0NzEtYTgyZmQ1YWZhYzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDduWq1r0QiyXOgxzvmmBsV74OetL4OOQp1x 8O08qbQbAx7QspGrc6YeY3dtWGXqviSEUmHwyMA1zR4h+Ubb9pqkZ99eueZe+lgZ VOHug1x8wHasz21pD21D51A1A58+duH/QXnxN/X7ph/XeS36e2m6e6Qcu5OjmyKq BsW3oW4oZ8y5l7KmFZgFz9f7XxdLsTUBcmsMzCg17KQpIthSeKJWcaYdkg6PqH5w 30W0tdcNi7k3NGTsRaAIT9GhRF9J5gR8ddniKlYSWkCMTx+Ynqe3AF+Pb6pyoRVg j2Pno4wGb7HNHUXsACKXdHHWpWD4lmNRzYY8SjZg309h7N6i9wIDAQABo4IDkTCC A40wHQYDVR0OBBYEFM9Ga11Nr1tuxaP82FdnrWT8l4TsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmRiZjVkZWMtOGY0Mi0z MDdlLTg4NTgtYzY5OTFiY2I2NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABHP+ES33uY57poZF2mXlR8IIhn2/nlowzH0guxJ wQlYPZlxMNyX60Q5yMKdnEc6+qss0TXHkeJ0onntJzHzyGcvrNrfCZuWN24ASlFr NgXLet1+mtdOp+sl+rLle40R/au+aJ7h93yZELo+4Es+4q3PCE6G65Ko/WW9vaq8 MZ13KZVjOqgi9CW44GojC3sA9xHR4hWVLMBrtCVI0PVvEUs2BrahhLKtc+dwLq4G 3tNDTfHN+a43UjttRKdeUC0AW1o0ewKyWHTesLyxtYw3iVXllRjIflZ2ScSzqSFb VoP4JlwlN7vbNmyjLZmlbtXq0Xvs1VIqThulxNHlYhhLxOg= -----END CERTIFICATE-----Generated at Sat Sep 26 12:54:29 2026 by rpki-client