$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa File: b4e78078-a443-3edc-9dba-d33315b67c0b.roa (raw, json) Hash identifier: 4H1Ld5rGx7AA9xTiCXPVvNAvzSlGJ38nP2af18GANbw= Subject key identifier: C0:FF:C4:41:E0:66:67:24:12:DD:82:D9:C8:11:C7:81:B9:9B:29:0A Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584F189796CD6A49CCD3AB8C6A00 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 33208 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:96:cd:6a:49:cc:d3:ab:8c:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=0c7e3130-7e55-48ad-adff-336751fe92de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:04:b8:bc:a9:6e:4d:54:a4:61:87:0c:5b:6f: 3d:99:5b:74:69:6e:c7:0f:c8:e2:6f:51:5b:87:1c: 4e:0a:d8:ff:cb:e0:cb:b0:5d:39:90:b4:93:c9:f1: b4:7c:21:d6:38:cf:68:15:5e:2a:16:a7:56:5f:53: a9:d8:19:d6:30:95:e6:97:8d:4e:f2:9b:ad:57:44: 00:d6:65:b2:3c:14:29:83:a6:01:71:80:87:9e:06: 44:83:5d:45:fc:85:37:da:de:87:9c:c2:87:4b:9d: 74:d2:ac:b8:0e:73:52:10:c5:b6:0b:7a:d8:70:c2: 1e:14:b4:7b:ac:cd:92:ac:f5:b0:41:dd:e1:70:7e: fa:47:c8:75:57:76:39:c8:38:48:13:81:c5:1d:d4: a6:fb:9d:c5:7f:8b:b9:09:f1:1c:af:50:fb:8e:4d: 29:89:85:e0:a2:b8:f0:cb:fd:e6:cb:b3:27:ad:82: fe:a3:fd:67:1d:52:f3:5a:5e:cf:b1:4d:d0:54:84: 51:55:f0:38:86:d7:ee:cd:53:95:c9:47:d8:65:2f: 1b:29:df:b7:20:8e:d1:db:71:02:25:d6:d0:ac:b9: aa:95:72:ec:dc:97:88:b3:8b:93:66:d4:5e:d7:20: e3:d7:1b:4b:88:b7:82:fb:27:ea:b7:f1:01:6a:fb: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FF:C4:41:E0:66:67:24:12:DD:82:D9:C8:11:C7:81:B9:9B:29:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b9:9a:c5:8f:21:cf:83:49:07:e9:30:c8:99:1b:19:36:7e: ed:28:0e:6d:53:da:b5:a6:ff:2a:76:d2:ab:24:a1:ec:a2:27: 60:69:f0:7d:8f:38:66:c9:8e:55:b6:be:62:5d:5e:1e:32:89: ff:6f:ab:6b:20:b4:8f:2e:41:dc:97:1e:c0:97:21:2f:e2:41: 52:31:4b:cd:c4:ab:6d:71:95:f1:85:44:2e:b9:61:7c:c1:2c: 72:ad:21:37:2e:61:46:88:8c:85:fa:8d:33:72:78:c7:5f:29: 9e:24:c0:dd:83:f2:77:58:f6:40:14:44:9e:19:2a:e1:d7:c1: 5a:f3:bc:a4:2c:55:6d:00:99:f7:50:15:96:17:69:9e:84:af: a5:7e:8a:26:d9:54:4a:10:31:c3:86:a7:60:5f:07:c8:45:1f: 37:c7:7b:c7:c4:a2:f2:43:e0:b1:90:8b:2c:15:c6:b3:7c:f0: 4f:9f:33:4b:d8:47:94:90:ad:40:61:59:64:db:f7:a3:a4:bf: aa:2b:24:07:2c:b9:38:14:cf:44:29:89:0c:74:c1:a3:31:7d: a5:d4:04:19:8b:f4:bb:06:eb:bb:ac:f7:e9:c8:cd:fb:d2:16: f6:90:b4:24:e1:84:c8:41:72:49:19:b0:e8:9b:6c:f0:26:76: 5b:10:fc:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5bNaknM06uMagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MGM3ZTMxMzAtN2U1NS00OGFkLWFkZmYtMzM2NzUxZmU5MmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAS4vKluTVSkYYcMW289mVt0aW7HD8jib1Fb hxxOCtj/y+DLsF05kLSTyfG0fCHWOM9oFV4qFqdWX1Op2BnWMJXml41O8putV0QA 1mWyPBQpg6YBcYCHngZEg11F/IU32t6HnMKHS5100qy4DnNSEMW2C3rYcMIeFLR7 rM2SrPWwQd3hcH76R8h1V3Y5yDhIE4HFHdSm+53Ff4u5CfEcr1D7jk0piYXgorjw y/3my7MnrYL+o/1nHVLzWl7PsU3QVIRRVfA4htfuzVOVyUfYZS8bKd+3II7R23EC JdbQrLmqlXLs3JeIs4uTZtRe1yDj1xtLiLeC+yfqt/EBavuZSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD/xEHgZmckEt2C2cgRx4G5mykKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvYjRlNzgwNzgtYTQ0My0z ZWRjLTlkYmEtZDMzMzE1YjY3YzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD65msWPIc+DSQfpMMiZGxk2fu0oDm1T2rWm/yp20qskoeyiJ2Bp8H2P OGbJjlW2vmJdXh4yif9vq2sgtI8uQdyXHsCXIS/iQVIxS83Eq21xlfGFRC65YXzB LHKtITcuYUaIjIX6jTNyeMdfKZ4kwN2D8ndY9kAURJ4ZKuHXwVrzvKQsVW0AmfdQ FZYXaZ6Er6V+iibZVEoQMcOGp2BfB8hFHzfHe8fEovJD4LGQiywVxrN88E+fM0vY R5SQrUBhWWTb96Okv6orJAcsuTgUz0QpiQx0waMxfaXUBBmL9LsG67us9+nIzfvS FvaQtCThhMhBckkZsOibbPAmdlsQ/Ko= -----END CERTIFICATE-----Generated at Fri Oct 2 15:02:02 2026 by rpki-client