$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3c334b7c-b500-3368-b581-9227a6af0c8b.roa File: 3c334b7c-b500-3368-b581-9227a6af0c8b.roa (raw, json) Hash identifier: gtL366Jaf1JWDVKSIu9rSkR97eytiqg9n4I0AVodn/w= Subject key identifier: A2:45:D3:10:E7:E5:C7:6D:64:0F:5E:97:E6:AC:3E:87:70:3C:51:58 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584F4973936C9F88CDB081343D80 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3c334b7c-b500-3368-b581-9227a6af0c8b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10794 IP address blocks: 171.159.112.0/21 maxlen: 21 171.159.112.0/24 maxlen: 24 171.159.113.0/24 maxlen: 24 171.159.114.0/23 maxlen: 23 171.159.114.0/24 maxlen: 24 171.159.115.0/24 maxlen: 24 171.159.116.0/24 maxlen: 24 171.159.117.0/24 maxlen: 24 171.159.118.0/24 maxlen: 24 171.159.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:93:6c:9f:88:cd:b0:81:34:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5ec5ed43-dfd7-45b7-9762-bfeab09809aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:58:e3:43:55:85:fb:2a:64:f9:11:0d:b7: 4a:dd:b7:b3:4c:9d:c8:e0:09:12:fb:00:bd:ad:67: f0:b1:f9:55:82:f4:5d:a5:a5:04:71:1e:11:3b:bc: 3c:2c:98:2e:23:58:6e:89:dc:68:87:24:dd:71:11: 77:1a:d2:d3:87:fc:38:0d:b8:3d:07:08:13:31:9f: f1:cd:f2:ed:7b:d6:78:88:59:78:1b:8b:a2:71:d8: 9d:3c:e7:09:2a:d7:57:c1:16:83:a8:76:59:4f:99: e0:1d:ae:2a:e1:09:94:0a:ca:af:58:07:8d:2a:63: 13:3d:6d:ea:65:9f:75:1b:1c:9f:3a:a2:86:19:8c: b7:6c:21:d2:97:ab:fa:e2:8a:44:fc:fd:5f:67:f6: d5:63:7a:db:3a:a2:e0:a5:1c:9a:eb:6b:f6:14:82: 96:d6:3a:5c:02:f2:1a:93:0a:1f:14:9d:e2:83:84: 64:a2:64:44:8e:06:c2:7c:94:cc:b4:66:fa:55:87: c0:65:46:c1:c0:ef:41:23:fc:8c:ae:b6:b7:ee:02: 95:fe:3b:4b:ff:8b:c7:ed:0d:10:14:b9:b1:63:17: 66:4c:32:f1:08:e6:43:03:da:05:af:c2:8a:20:95: 6e:af:6d:8f:57:82:22:38:c1:5a:3e:65:c6:58:d6: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:45:D3:10:E7:E5:C7:6D:64:0F:5E:97:E6:AC:3E:87:70:3C:51:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3c334b7c-b500-3368-b581-9227a6af0c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.159.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:ba:fc:46:1c:4b:8c:9b:98:4c:b5:f3:9b:3b:45:98:1b:6d: 0f:9f:59:09:45:79:65:69:22:c8:68:67:45:7b:71:ac:a8:64: ca:f5:61:34:7e:31:4d:d8:7d:74:18:1c:fa:7e:fc:c9:98:7d: 05:7a:68:c8:88:7b:24:82:18:65:c3:9b:b9:5e:4b:51:a1:21: 48:cd:4e:3d:68:46:dc:eb:9e:ed:50:31:d6:aa:25:d2:2a:8f: e9:1b:db:fa:82:28:95:cd:5d:46:3d:6b:b1:06:98:c6:c3:cf: ac:75:22:86:08:4b:9f:ce:53:07:9a:7f:68:26:6f:a2:17:09: 3e:c5:02:f5:eb:08:67:85:8a:11:62:36:39:d8:20:40:f7:3b: d4:0d:6b:b1:54:6b:4c:b5:e1:c3:15:15:38:01:98:ad:74:52: 4d:43:ce:ce:4a:22:42:c0:40:b7:65:d2:22:ce:b6:6b:f3:61: 80:bf:66:60:2f:a5:04:7d:6d:f8:74:81:d2:c6:01:6d:07:0d: 06:e3:c7:6b:8d:7c:22:5e:f2:65:36:b9:89:9c:4d:6b:3c:bd: 53:1d:cb:c6:74:d7:61:23:54:53:17:8b:af:f6:76:d3:86:2a: ae:e1:59:04:8e:26:ce:30:2d:a4:8e:0a:1b:0b:1f:e9:0b:28: 83:b7:e8:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5Nsn4jNsIE0PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWVjNWVkNDMtZGZkNy00NWI3LTk3NjItYmZlYWIwOTgwOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIJY40NVhfsqZPkRDbdK3bezTJ3I4AkS+wC9 rWfwsflVgvRdpaUEcR4RO7w8LJguI1huidxohyTdcRF3GtLTh/w4Dbg9BwgTMZ/x zfLte9Z4iFl4G4uicdidPOcJKtdXwRaDqHZZT5ngHa4q4QmUCsqvWAeNKmMTPW3q ZZ91GxyfOqKGGYy3bCHSl6v64opE/P1fZ/bVY3rbOqLgpRya62v2FIKW1jpcAvIa kwofFJ3ig4RkomREjgbCfJTMtGb6VYfAZUbBwO9BI/yMrra37gKV/jtL/4vH7Q0Q FLmxYxdmTDLxCOZDA9oFr8KKIJVur22PV4IiOMFaPmXGWNaVRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJF0xDn5cdtZA9el+asPodwPFFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvM2MzMzRiN2MtYjUwMC0z MzY4LWI1ODEtOTIyN2E2YWYwYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDq59wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm6/EYcS4ybmEy185s7RZgbbQ+fWQlFeWVpIshoZ0V7cayoZMr1YTR+ MU3YfXQYHPp+/MmYfQV6aMiIeySCGGXDm7leS1GhIUjNTj1oRtzrnu1QMdaqJdIq j+kb2/qCKJXNXUY9a7EGmMbDz6x1IoYIS5/OUweaf2gmb6IXCT7FAvXrCGeFihFi NjnYIED3O9QNa7FUa0y14cMVFTgBmK10Uk1Dzs5KIkLAQLdl0iLOtmvzYYC/ZmAv pQR9bfh0gdLGAW0HDQbjx2uNfCJe8mU2uYmcTWs8vVMdy8Z012EjVFMXi6/2dtOG Kq7hWQSOJs4wLaSOChsLH+kLKIO36PA= -----END CERTIFICATE-----Generated at Fri Sep 25 19:09:09 2026 by rpki-client