$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33082064-85d3-3c03-a35c-1e9c0356d330.roa File: 33082064-85d3-3c03-a35c-1e9c0356d330.roa (raw, json) Hash identifier: PVBLE2uLTcuC3qtUsAk0fLvJBiIiTtE53mziRSHQK4k= Subject key identifier: 3F:25:90:F9:41:3A:EB:01:75:DB:E6:7F:73:DE:32:7C:36:16:CB:64 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584EDB2C905E9160E512EE002D40 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33082064-85d3-3c03-a35c-1e9c0356d330.roa Signing time: Sun 16 Aug 2026 13:00:12 +0000 ROA not before: Sun 16 Aug 2026 13:00:12 +0000 ROA not after: Sat 14 Nov 2026 14:00:12 +0000 asID: 29752 IP address blocks: 128.14.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:db:2c:90:5e:91:60:e5:12:ee:00:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Aug 16 13:00:12 2026 GMT Not After : Nov 14 14:00:12 2026 GMT Subject: CN=06823e28-d29a-4522-8951-4433eec93928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3f:f0:85:a2:54:a4:0e:a2:f6:7e:dc:88:66: 7e:23:28:f7:51:81:a4:d5:eb:1a:e4:ec:1f:8a:9d: 39:14:40:d2:9d:b1:9e:79:9f:2f:92:f7:22:7c:6a: a7:7f:39:4a:ee:f4:42:14:1e:72:bb:a4:ea:76:b6: 21:9e:a5:77:24:14:b8:8a:31:88:67:df:0f:de:d7: 38:ea:1d:e1:4a:da:d5:e8:3c:70:ab:12:ec:77:2f: 16:d6:49:a1:d1:49:80:95:a9:31:82:6a:21:6f:7a: 97:17:77:c1:20:c2:67:b1:50:67:1a:11:9b:5f:52: 0e:f6:eb:48:58:48:06:11:0a:51:25:1b:2b:7e:34: b8:1c:39:88:eb:b2:ac:4e:22:cd:d7:5f:46:b3:ad: 01:21:fa:79:c1:34:81:72:42:73:14:44:30:7b:d1: bf:fa:2d:ac:83:50:2b:3a:02:9e:a7:df:cf:7a:47: af:56:2a:ab:5f:27:e1:c5:85:1a:4d:f6:b3:b0:65: fd:6e:42:ea:95:ec:64:e9:56:c4:ff:26:20:79:c5: 13:4b:95:ac:bb:b3:61:4d:d8:15:7c:54:88:18:73: 0d:b5:c5:ff:b9:83:94:2f:7a:36:66:a3:5b:33:e8: 65:98:f7:13:a3:8d:c0:91:2a:83:89:f7:21:1d:2d: d1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:25:90:F9:41:3A:EB:01:75:DB:E6:7F:73:DE:32:7C:36:16:CB:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33082064-85d3-3c03-a35c-1e9c0356d330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.14.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ee:22:0d:16:c5:cf:c1:d5:df:ac:0c:55:cf:bd:ba:5f:6b: f2:62:4b:c0:a8:d1:77:a3:48:39:cb:22:29:bd:7c:ce:c5:22: 8a:8b:9b:8c:f9:2f:70:9d:b0:01:9f:87:a9:37:22:b7:a3:f9: df:ac:80:b0:d1:a9:6d:5a:c7:4b:96:29:5b:fd:23:7d:b5:45: 77:62:11:05:ff:ae:73:21:a3:98:d1:29:04:27:3b:61:a4:e0: b6:41:92:ae:01:6d:cd:03:b4:77:57:34:56:5f:31:5d:7a:07: 07:07:51:ad:a5:64:58:0e:59:20:06:ab:9e:bf:7d:ee:33:b1: 06:d5:78:73:52:ba:c6:ab:dc:a1:c9:47:db:12:2c:9c:25:2f: 03:28:14:11:78:80:2c:77:93:66:3e:41:52:76:55:13:37:20: bc:59:5c:aa:3d:7f:2d:f6:b1:4a:c4:1f:39:df:d0:89:98:d7: 0f:e2:a1:e7:a5:8f:f6:a5:63:76:02:4f:40:96:af:c0:72:a6: 75:ac:07:d1:c7:c5:f3:48:6e:28:c1:55:59:93:c2:1d:ce:a6: d5:75:23:5f:fd:68:51:64:28:8d:e1:a2:97:20:14:36:8a:58: 45:a6:30:2c:d4:08:1f:34:9a:e8:35:6b:79:e1:6e:c8:98:49: 27:9b:82:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7bLJBekWDlEu4ALUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk MDY4MjNlMjgtZDI5YS00NTIyLTg5NTEtNDQzM2VlYzkzOTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT/whaJUpA6i9n7ciGZ+Iyj3UYGk1esa5Owf ip05FEDSnbGeeZ8vkvcifGqnfzlK7vRCFB5yu6TqdrYhnqV3JBS4ijGIZ98P3tc4 6h3hStrV6DxwqxLsdy8W1kmh0UmAlakxgmohb3qXF3fBIMJnsVBnGhGbX1IO9utI WEgGEQpRJRsrfjS4HDmI67KsTiLN119Gs60BIfp5wTSBckJzFEQwe9G/+i2sg1Ar OgKep9/PekevViqrXyfhxYUaTfazsGX9bkLqlexk6VbE/yYgecUTS5Wsu7NhTdgV fFSIGHMNtcX/uYOUL3o2ZqNbM+hlmPcTo43AkSqDifchHS3RRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8lkPlBOusBddvmf3PeMnw2FstkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMzMwODIwNjQtODVkMy0z YzAzLWEzNWMtMWU5YzAzNTZkMzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA6hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbuIg0Wxc/B1d+sDFXPvbpfa/JiS8Co0XejSDnLIim9fM7FIoqLm4z5 L3CdsAGfh6k3Irej+d+sgLDRqW1ax0uWKVv9I321RXdiEQX/rnMho5jRKQQnO2Gk 4LZBkq4Bbc0DtHdXNFZfMV16BwcHUa2lZFgOWSAGq56/fe4zsQbVeHNSusar3KHJ R9sSLJwlLwMoFBF4gCx3k2Y+QVJ2VRM3ILxZXKo9fy32sUrEHznf0ImY1w/ioeel j/alY3YCT0CWr8BypnWsB9HHxfNIbijBVVmTwh3OptV1I1/9aFFkKI3hopcgFDaK WEWmMCzUCB80mug1a3nhbsiYSSebgpY= -----END CERTIFICATE-----Generated at Sun Sep 27 03:23:51 2026 by rpki-client