$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/e22cd4fa-5665-39d4-843f-a7ad97b70800.roa File: e22cd4fa-5665-39d4-843f-a7ad97b70800.roa (raw, json) Hash identifier: k8wCEl3WiAcybVD5chLUV/CShhObsCdPRKS3QBkWcTQ= Subject key identifier: 46:C4:EA:30:A5:60:62:63:90:ED:A4:93:7C:0B:B8:D2:66:7C:E2:21 Certificate issuer: /CN=40163235-a725-497c-92e8-c077e46672e7 Certificate serial: 010D0C9F4328584F498744E9EC01938260FEB880 Authority key identifier: 09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/e22cd4fa-5665-39d4-843f-a7ad97b70800.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33083 IP address blocks: 209.135.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:44:e9:ec:01:93:82:60:fe:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40163235-a725-497c-92e8-c077e46672e7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1eca137d-d030-4924-8003-65c4e278e299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f5:b1:c1:79:be:16:cf:64:58:ac:7e:53:6c: 3b:6f:f2:c4:88:70:78:86:ba:77:b2:7e:97:25:87: ec:04:8e:3d:89:40:d7:1d:0d:0b:0f:b6:60:65:72: 5a:3f:e3:bb:05:8d:46:32:66:48:be:5f:15:2f:f6: 42:f4:75:87:05:5b:b9:23:cc:79:a3:35:51:c0:3c: b2:be:1f:21:b7:bb:54:e7:15:e9:a4:f6:7c:d5:48: 02:7e:54:c9:25:ca:d2:ba:ee:6b:37:6c:54:13:a8: 4c:78:31:6d:22:25:75:73:5d:55:87:3b:76:3f:64: 97:1d:5d:0b:ef:b5:b1:f1:ec:66:e0:8d:66:db:e5: 88:02:49:7f:d1:4a:e3:ea:ff:72:cc:9e:16:c4:16: 65:2f:dc:e5:31:7a:62:ce:c6:24:14:3a:be:98:d7: 51:7d:02:6c:4c:1d:99:6a:07:48:f1:d6:8e:6c:3f: 5d:ef:17:3a:d0:a2:6b:7c:b1:12:e6:bb:72:14:c1: 88:72:46:bf:b4:59:9e:d5:d2:9a:7a:27:02:c8:91: 7d:00:62:47:dc:9d:f7:c0:72:7c:bc:2f:8f:7e:3b: 7d:40:c4:68:45:c1:ad:11:e7:c9:28:fc:87:ea:dd: 5d:5d:5c:a1:23:ba:03:43:f0:ca:b8:9b:e0:3f:d3: 77:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C4:EA:30:A5:60:62:63:90:ED:A4:93:7C:0B:B8:D2:66:7C:E2:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/e22cd4fa-5665-39d4-843f-a7ad97b70800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl X509v3 Authority Key Identifier: keyid:09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer sbgp-ipAddrBlock: critical IPv4: 209.135.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:59:8a:34:57:6b:78:20:2d:9b:c1:59:86:74:ec:b1:94:9b: 38:cc:46:e7:97:9d:55:32:89:c6:8e:fe:26:78:7e:ca:f5:89: 98:48:1d:56:0e:d0:8c:1b:a7:45:d8:56:17:ee:1e:d2:41:bd: 61:26:81:95:16:b0:58:17:d0:13:b6:7a:9e:29:79:f3:64:dc: ce:8f:18:3d:58:5a:34:82:4f:52:2e:13:a7:9f:c3:d7:da:1b: 09:d4:14:5d:0b:61:e7:9f:89:d0:bc:c6:8a:4f:8d:1d:df:a5: fd:67:0f:c9:e6:3b:29:04:00:5a:fa:6a:1e:d4:90:f1:28:a1: ba:0b:08:b6:c6:43:f6:bb:03:39:d3:27:c8:f4:98:f5:2e:aa: 18:c6:c5:fe:09:83:0d:0c:97:b2:c8:d7:9f:2b:ab:bf:b5:3c: cf:1f:d2:fb:3e:83:3f:e6:0b:54:7b:d9:b3:af:a7:2f:8f:31: 35:93:ee:72:71:14:71:5d:0b:d6:95:6f:f4:16:79:25:a4:b4: a5:2e:04:b2:c8:74:fd:dd:e0:8b:aa:f1:c0:2b:8e:8c:2d:fc: 7e:d8:e7:cd:49:92:f5:ab:28:6a:8a:53:ad:4d:fc:c1:be:7e: a6:a1:87:cc:42:39:e2:f6:f1:af:d1:85:32:cc:f0:0e:b2:ed: 8b:82:2e:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh0Tp7AGTgmD+uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxNjMyMzUtYTcyNS00OTdjLTkyZTgtYzA3N2U0NjY3 MmU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWVjYTEzN2QtZDAzMC00OTI0LTgwMDMtNjVjNGUyNzhlMjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/WxwXm+Fs9kWKx+U2w7b/LEiHB4hrp3sn6X JYfsBI49iUDXHQ0LD7ZgZXJaP+O7BY1GMmZIvl8VL/ZC9HWHBVu5I8x5ozVRwDyy vh8ht7tU5xXppPZ81UgCflTJJcrSuu5rN2xUE6hMeDFtIiV1c11Vhzt2P2SXHV0L 77Wx8exm4I1m2+WIAkl/0Urj6v9yzJ4WxBZlL9zlMXpizsYkFDq+mNdRfQJsTB2Z agdI8daObD9d7xc60KJrfLES5rtyFMGIcka/tFme1dKaeicCyJF9AGJH3J33wHJ8 vC+Pfjt9QMRoRcGtEefJKPyH6t1dXVyhI7oDQ/DKuJvgP9N3lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbE6jClYGJjkO2kk3wLuNJmfOIhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2 MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3ZTQ2NjcyZTcvZTIyY2Q0ZmEtNTY2NS0z OWQ0LTg0M2YtYTdhZDk3YjcwODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDAxNjMyMzUtYTcyNS00OTdjLTky ZTgtYzA3N2U0NjY3MmU3LzQwMTYzMjM1LWE3MjUtNDk3Yy05MmU4LWMwNzdlNDY2 NzJlNy5jcmwwHwYDVR0jBBgwFoAUCYUiBa+uuTCs/kMuklPsES+zM88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3 ZTQ2NjcyZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YenMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBZijRXa3ggLZvBWYZ07LGUmzjMRueXnVUyicaO/iZ4fsr1iZhIHVYO 0Iwbp0XYVhfuHtJBvWEmgZUWsFgX0BO2ep4pefNk3M6PGD1YWjSCT1IuE6efw9fa GwnUFF0LYeefidC8xopPjR3fpf1nD8nmOykEAFr6ah7UkPEooboLCLbGQ/a7AznT J8j0mPUuqhjGxf4Jgw0Ml7LI158rq7+1PM8f0vs+gz/mC1R72bOvpy+PMTWT7nJx FHFdC9aVb/QWeSWktKUuBLLIdP3d4Iuq8cArjowt/H7Y581JkvWrKGqKU61N/MG+ fqahh8xCOeL28a/RhTLM8A6y7YuCLtE= -----END CERTIFICATE-----Generated at Sat Oct 10 13:19:25 2026 by rpki-client