$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/cca0876a-5604-3087-980d-a9fcf56fcb98.roa File: cca0876a-5604-3087-980d-a9fcf56fcb98.roa (raw, json) Hash identifier: wA1jqAq6jRyku0HVhudwoTIm05WtkDSmwm9mFfyMLDw= Subject key identifier: 27:06:22:86:16:44:3C:FB:5F:E6:C8:A5:64:9B:B6:95:8D:0F:30:25 Certificate issuer: /CN=18f4eabf-2388-491f-922c-4973961dfd2e Certificate serial: 010D0C9F4328584F3E47D60FB10E1FA20C3A3DA0 Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/cca0876a-5604-3087-980d-a9fcf56fcb98.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 33099 IP address blocks: 174.136.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d6:0f:b1:0e:1f:a2:0c:3a:3d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=7b62cc56-51f1-40ae-bba3-d2b2cfb0d33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dc:17:2a:34:2e:a9:5e:1a:3a:0f:44:e8:e4: d4:9c:e7:f4:be:ea:e0:85:b1:b0:8d:cd:93:18:64: f4:3f:be:1e:78:5c:c4:42:24:b6:cd:2c:9d:11:20: fd:2c:2e:05:79:de:86:f6:b5:b7:81:23:3f:d8:d4: 6b:fb:dd:b1:49:66:b6:24:82:3d:9f:2c:9e:31:2e: 06:76:02:45:6e:24:d3:d7:ab:f3:6d:e3:34:39:91: 54:a3:97:4e:73:16:b8:8d:57:2c:23:49:aa:11:7c: 62:5b:73:22:06:aa:dd:73:fb:4b:2c:80:bd:fe:5e: 4a:f6:7e:d5:2c:7b:4e:29:7e:92:00:2f:dc:ac:fe: 05:ab:38:0b:f7:8d:83:1e:bd:b8:c9:e1:00:fc:0e: dd:39:2f:53:ce:a8:f2:17:3a:e6:95:62:61:2c:7c: 76:c2:72:b9:68:af:22:21:f5:65:16:bc:43:c4:04: 52:ce:e0:c5:06:0f:bf:be:01:67:1e:64:58:ea:41: aa:34:b5:ca:bd:06:9c:73:16:80:2c:2f:b7:74:31: 3d:d8:88:69:47:b7:02:95:da:b9:e1:7b:9a:6f:35: 1f:f3:50:1c:9e:4c:c2:7b:1b:6b:8a:1a:84:dd:65: 7f:84:33:d0:83:6a:de:50:fe:c5:30:36:d9:c7:d6: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:06:22:86:16:44:3C:FB:5F:E6:C8:A5:64:9B:B6:95:8D:0F:30:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/cca0876a-5604-3087-980d-a9fcf56fcb98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl X509v3 Authority Key Identifier: keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer sbgp-ipAddrBlock: critical IPv4: 174.136.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:bd:97:04:40:e1:2b:6a:95:13:81:66:d8:d7:49:9d:6d:99: ff:c6:75:99:a9:21:59:7a:72:82:50:07:7f:a9:90:91:41:76: 35:e7:f4:5e:b7:f0:fa:44:e2:63:cc:da:5c:90:24:24:59:38: 4a:9f:b3:f1:37:6c:87:7e:3b:fb:41:58:ad:24:07:67:2c:59: 68:69:cf:9d:49:e1:c0:bf:d6:99:54:9d:a8:39:12:04:41:43: 13:90:c7:73:a1:d2:2b:16:1f:10:52:f3:60:8e:54:2b:c4:53: 86:86:92:de:09:c9:9f:9f:68:79:bd:53:c1:12:1b:f8:e6:4f: 79:04:93:39:26:4e:c0:ca:7d:1f:9c:54:85:ab:82:84:39:78: 2b:6e:ca:f5:f8:13:20:1b:11:d4:2e:54:c2:c0:4b:7d:a2:7e: 93:82:58:8f:7b:62:05:83:0d:07:6b:c9:30:bd:ec:7d:c5:b0: 65:39:a3:a2:c9:45:26:6d:6d:b4:e2:b2:9e:e0:6c:06:21:e4: 15:24:85:ae:48:80:b6:73:0a:7b:f6:c8:1e:51:64:1f:1e:de: f5:59:2e:27:e8:f8:e8:e6:7e:fe:d3:48:8c:e7:58:5a:b4:83: 62:da:20:d3:50:da:f2:bd:81:28:95:7f:44:50:0d:9f:cf:2c: 1a:25:19:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9YPsQ4fogw6PaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThmNGVhYmYtMjM4OC00OTFmLTkyMmMtNDk3Mzk2MWRm ZDJlMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk N2I2MmNjNTYtNTFmMS00MGFlLWJiYTMtZDJiMmNmYjBkMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNwXKjQuqV4aOg9E6OTUnOf0vurghbGwjc2T GGT0P74eeFzEQiS2zSydESD9LC4Fed6G9rW3gSM/2NRr+92xSWa2JII9nyyeMS4G dgJFbiTT16vzbeM0OZFUo5dOcxa4jVcsI0mqEXxiW3MiBqrdc/tLLIC9/l5K9n7V LHtOKX6SAC/crP4FqzgL942DHr24yeEA/A7dOS9TzqjyFzrmlWJhLHx2wnK5aK8i IfVlFrxDxARSzuDFBg+/vgFnHmRY6kGqNLXKvQaccxaALC+3dDE92IhpR7cCldq5 4XuabzUf81AcnkzCextrihqE3WV/hDPQg2reUP7FMDbZx9YCjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcGIoYWRDz7X+bIpWSbtpWNDzAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0 ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTczOTYxZGZkMmUvY2NhMDg3NmEtNTYwNC0z MDg3LTk4MGQtYTlmY2Y1NmZjYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMThmNGVhYmYtMjM4OC00OTFmLTky MmMtNDk3Mzk2MWRmZDJlLzE4ZjRlYWJmLTIzODgtNDkxZi05MjJjLTQ5NzM5NjFk ZmQyZS5jcmwwHwYDVR0jBBgwFoAUi40Z0YX62elbBk5pCgw0e2toc/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTcz OTYxZGZkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrojEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAe9lwRA4StqlROBZtjXSZ1tmf/GdZmpIVl6coJQB3+pkJFBdjXn9F63 8PpE4mPM2lyQJCRZOEqfs/E3bId+O/tBWK0kB2csWWhpz51J4cC/1plUnag5EgRB QxOQx3Oh0isWHxBS82COVCvEU4aGkt4JyZ+faHm9U8ESG/jmT3kEkzkmTsDKfR+c VIWrgoQ5eCtuyvX4EyAbEdQuVMLAS32ifpOCWI97YgWDDQdryTC97H3FsGU5o6LJ RSZtbbTisp7gbAYh5BUkha5IgLZzCnv2yB5RZB8e3vVZLifo+Ojmfv7TSIznWFq0 g2LaINNQ2vK9gSiVf0RQDZ/PLBolGW8= -----END CERTIFICATE-----Generated at Tue Sep 29 15:40:03 2026 by rpki-client