$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80/0e4817c3-ca9e-36e5-ab84-21fa74cc5f0f.roa File: 0e4817c3-ca9e-36e5-ab84-21fa74cc5f0f.roa (raw, json) Hash identifier: 1m6dY0n9FyB7z0YLumaM6HOjzD4EcvZ1DocdPy9NYNc= Subject key identifier: 11:28:67:82:CC:EF:96:92:9E:B1:8A:D7:B8:46:D5:28:EC:BF:38:25 Certificate issuer: /CN=3bbb2e75-122c-4afc-95e9-4be08f1d8b80 Certificate serial: 010D0C9F4328584FC9FBD84C91F77367B0D22700 Authority key identifier: 9F:82:B9:F7:21:9B:92:B7:9D:7A:45:4C:81:E2:36:53:6D:6E:36:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80/0e4817c3-ca9e-36e5-ab84-21fa74cc5f0f.roa Signing time: Tue 10 Nov 2026 02:00:13 +0000 ROA not before: Tue 10 Nov 2026 02:00:13 +0000 ROA not after: Mon 08 Feb 2027 02:00:13 +0000 asID: 399138 IP address blocks: 169.128.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80/3bbb2e75-122c-4afc-95e9-4be08f1d8b80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80/3bbb2e75-122c-4afc-95e9-4be08f1d8b80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c9:fb:d8:4c:91:f7:73:67:b0:d2:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbb2e75-122c-4afc-95e9-4be08f1d8b80 Validity Not Before: Nov 10 02:00:13 2026 GMT Not After : Feb 8 02:00:13 2027 GMT Subject: CN=fd994ac8-4c5f-42de-8521-8c54e4a3e74f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:8e:29:4d:b2:c5:8b:db:9a:fd:15:7c:6b: 8e:5b:1e:fb:dc:f7:32:a9:c0:ea:ef:b4:a2:b8:11: 35:a1:c0:80:50:c8:ef:f6:15:77:e4:16:a4:56:ea: 0a:be:68:49:d8:7c:59:86:11:e9:80:54:a1:dc:1e: 0d:51:32:6c:7c:01:d9:3c:38:77:64:ad:10:2a:af: d0:3f:3f:ba:44:0f:6d:1a:e2:11:3b:cd:87:f2:bd: 96:63:25:71:cf:de:c0:7c:24:bf:a1:1b:96:00:c3: 9a:88:ce:37:8d:16:66:63:3f:42:c1:41:a0:c3:db: e0:06:7f:fa:3b:2b:41:21:13:de:97:39:74:63:da: cf:f2:d5:f4:bc:55:04:6f:3b:f0:16:ee:d9:bd:3e: d8:97:99:7b:4a:3e:91:ec:49:66:7b:83:b4:b6:45: 2b:15:ee:49:02:aa:1a:4a:a6:be:c6:dc:0b:28:8e: a2:e2:87:6e:61:f1:d5:7a:a1:2e:f7:66:0e:ff:7a: 77:45:cf:58:4f:8f:89:e6:5d:e9:5e:6f:87:01:34: 3c:a8:bd:41:c9:77:9d:b9:0e:ca:d9:1c:80:bb:54: 3f:b3:e1:ef:eb:07:45:36:cc:14:6e:67:75:ed:c2: d1:6b:13:e7:d7:35:d1:54:a7:b5:3a:0e:43:04:ae: 54:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:28:67:82:CC:EF:96:92:9E:B1:8A:D7:B8:46:D5:28:EC:BF:38:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80/0e4817c3-ca9e-36e5-ab84-21fa74cc5f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80/3bbb2e75-122c-4afc-95e9-4be08f1d8b80.crl X509v3 Authority Key Identifier: keyid:9F:82:B9:F7:21:9B:92:B7:9D:7A:45:4C:81:E2:36:53:6D:6E:36:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3bbb2e75-122c-4afc-95e9-4be08f1d8b80.cer sbgp-ipAddrBlock: critical IPv4: 169.128.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b4:76:0e:6b:63:ee:9b:c2:d2:69:3e:94:cb:a8:8b:6e:7c: a0:86:2e:d8:1e:f5:68:62:2c:72:1e:e7:85:1c:96:17:34:fc: 33:35:3e:95:1e:3a:82:67:fe:d3:07:f4:9f:a0:c8:5c:ad:0a: 04:ba:7a:5e:ed:5e:66:79:3c:f7:5b:64:d5:6e:9a:40:83:92: 55:95:38:67:46:f0:03:3e:d6:ab:0d:ea:1f:42:28:01:cf:d1: 30:eb:3d:e9:e0:8b:74:f4:66:7a:e3:28:26:fb:50:78:cf:36: 8e:d7:7c:34:6b:4d:02:2d:28:59:ad:22:aa:a4:86:9f:50:a3: de:fe:d4:1a:b6:7f:5c:23:6b:d9:32:41:4f:0d:88:48:33:16: 1d:53:0b:0e:95:99:50:18:86:01:c9:6e:4e:ca:a6:c5:62:bc: b3:40:78:ad:38:30:5b:17:d7:26:3d:b7:94:2c:64:22:61:b5: 3c:f0:8e:cb:ae:f2:c2:27:61:f3:a2:79:c0:22:5b:43:a5:ee: b4:1c:7a:86:9f:30:80:7a:6e:12:45:22:39:3f:13:32:2a:22: 55:b1:f7:95:b7:b1:42:11:3d:0d:fc:d8:f7:01:c7:13:6a:57: 67:ee:85:8a:d1:a6:2c:89:41:f1:ed:ce:5f:38:bf:17:28:21: 89:e0:67:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/J+9hMkfdzZ7DSJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiYjJlNzUtMTIyYy00YWZjLTk1ZTktNGJlMDhmMWQ4 YjgwMB4XDTI2MTExMDAyMDAxM1oXDTI3MDIwODAyMDAxM1owLzEtMCsGA1UEAxMk ZmQ5OTRhYzgtNGM1Zi00MmRlLTg1MjEtOGM1NGU0YTNlNzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslmOKU2yxYvbmv0VfGuOWx773PcyqcDq77Si uBE1ocCAUMjv9hV35BakVuoKvmhJ2HxZhhHpgFSh3B4NUTJsfAHZPDh3ZK0QKq/Q Pz+6RA9tGuIRO82H8r2WYyVxz97AfCS/oRuWAMOaiM43jRZmYz9CwUGgw9vgBn/6 OytBIRPelzl0Y9rP8tX0vFUEbzvwFu7ZvT7Yl5l7Sj6R7Elme4O0tkUrFe5JAqoa Sqa+xtwLKI6i4oduYfHVeqEu92YO/3p3Rc9YT4+J5l3pXm+HATQ8qL1ByXeduQ7K 2RyAu1Q/s+Hv6wdFNswUbmd17cLRaxPn1zXRVKe1Og5DBK5UqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEoZ4LM75aSnrGK17hG1SjsvzglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zYmJi MmU3NS0xMjJjLTRhZmMtOTVlOS00YmUwOGYxZDhiODAvMGU0ODE3YzMtY2E5ZS0z NmU1LWFiODQtMjFmYTc0Y2M1ZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2JiYjJlNzUtMTIyYy00YWZjLTk1 ZTktNGJlMDhmMWQ4YjgwLzNiYmIyZTc1LTEyMmMtNGFmYy05NWU5LTRiZTA4ZjFk OGI4MC5jcmwwHwYDVR0jBBgwFoAUn4K59yGbkredekVMgeI2U21uNvswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zYmJiMmU3NS0xMjJjLTRhZmMtOTVlOS00YmUw OGYxZDhiODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACK0dg5rY+6bwtJpPpTLqItufKCGLtge9WhiLHIe54Uclhc0/DM1PpUe OoJn/tMH9J+gyFytCgS6el7tXmZ5PPdbZNVumkCDklWVOGdG8AM+1qsN6h9CKAHP 0TDrPengi3T0ZnrjKCb7UHjPNo7XfDRrTQItKFmtIqqkhp9Qo97+1Bq2f1wja9ky QU8NiEgzFh1TCw6VmVAYhgHJbk7KpsVivLNAeK04MFsX1yY9t5QsZCJhtTzwjsuu 8sInYfOiecAiW0Ol7rQceoafMIB6bhJFIjk/EzIqIlWx95W3sUIRPQ382PcBxxNq V2fuhYrRpiyJQfHtzl84vxcoIYngZ2Y= -----END CERTIFICATE-----Generated at Sun Nov 15 17:52:13 2026 by rpki-client