$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/365c666b-c4bc-3afb-83f1-a757b272848e.roa File: 365c666b-c4bc-3afb-83f1-a757b272848e.roa (raw, json) Hash identifier: YUxPPEvGtFP3tAKoG/LSNbZGA3geFCcmg9uPn8yu3UE= Subject key identifier: DD:52:9E:58:63:BB:45:8F:D6:7E:49:55:31:A7:FF:1A:E1:FE:FA:1E Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584F189796BF484786ED4287D5E0 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/365c666b-c4bc-3afb-83f1-a757b272848e.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 10747 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:96:bf:48:47:86:ed:42:87:d5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=c754879a-8d16-4720-8242-140c37524dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:be:bd:15:29:99:db:ec:50:d4:50:22:d8:46: 9a:ed:9a:b7:33:d5:3a:33:ec:b2:0c:7e:35:6a:05: f2:40:6f:62:30:f4:56:0b:c2:f2:4c:52:fe:22:6c: 06:0c:dc:04:ed:33:bb:6e:4a:96:dd:9a:4c:a3:08: a6:2c:67:d0:80:20:45:41:99:2f:08:7a:b0:8c:cf: 02:f0:8d:27:b3:40:98:27:61:b7:7a:a7:a9:57:85: c2:25:0f:76:dd:ec:0d:59:85:b8:56:40:86:81:12: 5a:61:54:6a:5a:bc:bb:1d:70:21:f6:31:1a:9e:06: bd:6a:66:33:2f:06:04:b2:2b:ee:6a:fa:99:76:3e: 4e:ca:ba:e0:49:1d:35:90:ca:7d:47:5e:ff:10:61: c1:65:29:a2:34:f1:2e:fa:be:7f:39:6d:63:fe:8b: 79:34:b2:bf:31:94:9b:9d:75:78:e0:0c:65:1b:2f: 68:d9:02:bb:8d:7a:a9:78:58:a5:42:27:08:57:5c: 59:9d:fb:29:27:08:a8:2a:e0:10:96:5c:55:d8:6a: 41:a1:2a:30:72:0a:40:8b:c7:ee:c5:c1:1a:80:3a: 55:22:46:00:27:0c:df:a6:88:af:59:23:d5:d7:41: c0:9e:57:df:1a:c0:db:e4:6b:79:df:29:5f:20:41: 79:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:52:9E:58:63:BB:45:8F:D6:7E:49:55:31:A7:FF:1A:E1:FE:FA:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/365c666b-c4bc-3afb-83f1-a757b272848e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:38:3d:b4:1e:4e:6c:d2:fe:42:87:bb:00:0a:77:3d:52:8f: 9f:8a:e7:3f:a0:42:0b:09:01:eb:43:0a:92:59:21:89:20:ea: 88:1f:6c:a5:98:09:df:22:fe:65:e1:3b:57:f3:fa:0f:83:f2: 6a:c6:c0:87:25:fa:e3:a2:b0:c7:42:ac:56:a5:9d:e6:23:98: f9:f3:39:18:fa:58:5f:c5:b2:47:e5:d4:bf:54:48:41:91:c3: e6:df:d0:ce:c3:0a:f3:8f:3d:a3:9f:7f:29:bf:ed:c5:ee:1c: 55:bc:2b:2a:60:65:28:00:0f:3a:83:7c:89:ae:44:af:37:c1: a1:34:10:6d:d2:e5:7a:3e:86:b4:c5:4c:87:1d:17:b0:f9:2a: eb:59:9b:3b:01:32:23:90:a4:5b:08:29:13:17:59:c4:78:75: 3b:eb:82:47:e6:10:e1:a1:16:e2:ff:85:e3:05:f2:9f:16:8b: 5d:51:2f:bb:65:62:a8:4b:cb:70:a3:30:66:a7:e9:99:24:0a: 57:df:bd:ac:97:18:fb:70:2f:3a:50:0a:96:24:4b:10:07:9e: 6f:f1:e2:3a:02:1d:0a:d7:52:6e:ee:b3:d6:90:cd:8b:ea:d3: 01:e2:47:9d:cb:0b:ec:f1:2d:05:7e:4b:f5:0d:23:ae:0b:bd: a1:6a:2f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5a/SEeG7UKH1eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk Yzc1NDg3OWEtOGQxNi00NzIwLTgyNDItMTQwYzM3NTI0ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr69FSmZ2+xQ1FAi2Eaa7Zq3M9U6M+yyDH41 agXyQG9iMPRWC8LyTFL+ImwGDNwE7TO7bkqW3ZpMowimLGfQgCBFQZkvCHqwjM8C 8I0ns0CYJ2G3eqepV4XCJQ923ewNWYW4VkCGgRJaYVRqWry7HXAh9jEanga9amYz LwYEsivuavqZdj5OyrrgSR01kMp9R17/EGHBZSmiNPEu+r5/OW1j/ot5NLK/MZSb nXV44AxlGy9o2QK7jXqpeFilQicIV1xZnfspJwioKuAQllxV2GpBoSowcgpAi8fu xcEagDpVIkYAJwzfpoivWSPV10HAnlffGsDb5Gt53ylfIEF52QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1Snlhju0WP1n5JVTGn/xrh/voeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvMzY1YzY2NmItYzRiYy0z YWZiLTgzZjEtYTc1N2IyNzI4NDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ4PbQeTmzS/kKHuwAKdz1Sj5+K5z+gQgsJAetDCpJZIYkg6ogfbKWY Cd8i/mXhO1fz+g+D8mrGwIcl+uOisMdCrFalneYjmPnzORj6WF/Fskfl1L9USEGR w+bf0M7DCvOPPaOffym/7cXuHFW8KypgZSgADzqDfImuRK83waE0EG3S5Xo+hrTF TIcdF7D5KutZmzsBMiOQpFsIKRMXWcR4dTvrgkfmEOGhFuL/heMF8p8Wi11RL7tl YqhLy3CjMGan6ZkkClffvayXGPtwLzpQCpYkSxAHnm/x4joCHQrXUm7us9aQzYvq 0wHiR53LC+zxLQV+S/UNI64LvaFqL1I= -----END CERTIFICATE-----Generated at Sun Oct 11 03:22:36 2026 by rpki-client