$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3f189d5f-ab0f-32ee-b788-b14a7c6e92e8.roa File: 3f189d5f-ab0f-32ee-b788-b14a7c6e92e8.roa (raw, json) Hash identifier: cr8HjU9iqqvpmWZ5Aa/O2pMEXbHjmBg9dNn4PwpbtS4= Subject key identifier: B7:73:F6:80:56:84:F5:E2:74:C6:89:C7:10:7E:27:BC:A3:2F:0D:D1 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F3B7D1F420800423100AC4A00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3f189d5f-ab0f-32ee-b788-b14a7c6e92e8.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 273990 IP address blocks: 154.17.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1f:42:08:00:42:31:00:ac:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=cf7caeb1-de3b-44e4-bd87-7f8b8a47a811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:00:23:97:86:a3:18:90:c4:e0:b2:ca:86: e0:44:4a:93:26:d2:e2:63:de:f2:6e:35:7a:97:4b: 2c:c0:80:09:72:b6:c3:c6:93:56:61:f1:71:0b:e0: 2a:97:6c:54:cc:ec:de:69:d2:56:92:5c:0b:b1:17: 62:fc:38:d9:b9:52:d0:17:e0:48:7c:f5:28:51:59: 07:5c:b8:c8:76:0f:3d:79:90:bb:9d:af:d4:95:02: 78:b3:9c:19:2e:6e:7a:44:99:23:2a:4d:c0:db:3f: f8:b5:31:e9:82:71:cf:cc:c1:6d:20:c0:af:00:6b: ca:dd:67:c7:d0:0c:c0:ed:07:0b:9e:ec:40:65:18: 72:94:1f:7b:a0:c2:bb:5a:fc:97:93:0c:87:ed:e0: 58:52:a7:9c:5b:07:da:10:73:86:31:d3:74:ac:5b: 80:3d:7a:bc:ca:d9:62:7a:25:fc:ab:83:c1:0a:89: d9:76:fe:bb:03:db:a4:3a:bf:74:c5:dd:3d:a0:a0: c7:23:08:33:ae:b8:9e:91:24:24:dd:be:35:66:7f: e9:ff:8e:aa:49:b1:18:a6:3b:9e:ea:5d:66:31:14: 45:c9:0e:6c:dc:92:0c:13:cd:b1:5b:40:b3:23:d9: 27:4b:af:94:4e:f2:c5:9f:b3:6d:51:8f:44:b1:c9: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:73:F6:80:56:84:F5:E2:74:C6:89:C7:10:7E:27:BC:A3:2F:0D:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3f189d5f-ab0f-32ee-b788-b14a7c6e92e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 154.17.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:1f:e9:1d:40:5f:95:6c:3f:45:43:c4:06:20:04:df:cf:10: 3a:b7:03:76:05:d8:9e:dd:00:4a:ef:41:f5:36:c0:c6:70:ba: ff:16:4e:a5:d7:6a:53:46:ad:3d:cd:7b:aa:ac:43:1c:69:8d: 8a:da:5c:fd:9b:de:37:f7:a3:b3:f1:f5:3e:ba:f5:ac:a5:74: 4d:f2:42:d6:7e:34:c3:4d:d4:2b:d9:a1:46:bb:da:36:5d:c1: d3:70:3b:ea:2d:f0:49:31:ec:d5:c2:55:1c:9c:14:bd:8a:4a: 7f:f7:c8:85:c1:b5:8d:18:42:0e:04:24:51:79:78:01:22:4c: f3:80:3c:f7:88:65:d6:b9:41:04:0d:e4:8f:39:6d:81:1c:18: 2a:44:d9:2a:65:49:d1:17:6e:8d:7c:7c:ab:1e:19:8e:6d:02: 42:d5:8c:46:11:06:8c:06:a7:f1:77:50:67:04:ec:72:cf:66: 67:84:ec:5f:99:ed:16:56:07:1f:56:19:7c:0c:e5:4a:ed:6a: e6:d2:90:58:85:16:28:6f:51:73:5c:9b:e3:24:46:aa:db:4f: 55:5c:fd:68:9a:97:fb:ff:55:a5:05:1a:f6:c7:d3:37:e8:fd: 97:b0:9d:6b:6e:6c:2e:39:46:0f:ce:55:a0:28:32:d4:b7:ee: c3:da:97:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fR9CCABCMQCsSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk Y2Y3Y2FlYjEtZGUzYi00NGU0LWJkODctN2Y4YjhhNDdhODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2cAI5eGoxiQxOCyyobgREqTJtLiY97ybjV6 l0sswIAJcrbDxpNWYfFxC+Aql2xUzOzeadJWklwLsRdi/DjZuVLQF+BIfPUoUVkH XLjIdg89eZC7na/UlQJ4s5wZLm56RJkjKk3A2z/4tTHpgnHPzMFtIMCvAGvK3WfH 0AzA7QcLnuxAZRhylB97oMK7WvyXkwyH7eBYUqecWwfaEHOGMdN0rFuAPXq8ytli eiX8q4PBConZdv67A9ukOr90xd09oKDHIwgzrriekSQk3b41Zn/p/46qSbEYpjue 6l1mMRRFyQ5s3JIME82xW0CzI9knS6+UTvLFn7NtUY9Escn37wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdz9oBWhPXidMaJxxB+J7yjLw3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2YxODlkNWYtYWIwZi0z MmVlLWI3ODgtYjE0YTdjNmU5MmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANAf6R1AX5VsP0VDxAYgBN/PEDq3A3YF2J7dAErvQfU2wMZwuv8WTqXX alNGrT3Ne6qsQxxpjYraXP2b3jf3o7Px9T669ayldE3yQtZ+NMNN1CvZoUa72jZd wdNwO+ot8Ekx7NXCVRycFL2KSn/3yIXBtY0YQg4EJFF5eAEiTPOAPPeIZda5QQQN 5I85bYEcGCpE2SplSdEXbo18fKseGY5tAkLVjEYRBowGp/F3UGcE7HLPZmeE7F+Z 7RZWBx9WGXwM5UrtaubSkFiFFihvUXNcm+MkRqrbT1Vc/Wial/v/VaUFGvbH0zfo /ZewnWtubC45Rg/OVaAoMtS37sPal8s= -----END CERTIFICATE-----Generated at Sun Sep 27 14:59:19 2026 by rpki-client