$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa File: 0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa (raw, json) Hash identifier: UklrSjbehQUnhfXhpN8g/sp5bh91NeLgyH54c/bF38U= Subject key identifier: 50:79:D4:A5:8F:8D:D9:E5:E2:34:79:BA:F1:C8:29:1D:05:D8:33:29 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584F7E7DC97A62BB327E8DED9BC0 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 10430 IP address blocks: 72.233.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:c9:7a:62:bb:32:7e:8d:ed:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=7c0b57d8-162d-472a-b4d2-19d1c4a4d13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:96:2b:ef:9e:b7:1e:82:7f:fa:1a:1c:94:ee: 94:47:b1:a0:7d:33:f7:da:df:7f:f6:98:6e:40:94: cd:b8:54:ff:9f:4d:15:d8:62:92:21:df:94:fc:07: 2c:ac:ba:e3:6a:9a:19:15:4b:e3:6f:7a:6c:41:03: 23:5a:f9:d3:89:d7:73:af:18:4e:3b:9e:d1:06:32: 19:88:e5:a3:6f:52:e8:99:4a:d0:ce:5e:83:03:20: 81:cd:e6:c5:18:71:f4:11:71:21:e4:33:e1:d4:28: 8e:20:9c:b8:96:01:1c:3b:e8:31:ec:02:6b:fc:f1: 00:ec:10:75:99:a4:d2:c3:b0:c8:dd:25:b9:c5:37: 95:2b:7e:ff:25:13:f0:1a:a0:04:e4:43:a9:5a:c6: 84:68:34:27:11:6a:44:f2:ed:4f:f3:dc:de:62:21: 89:55:e5:3b:5c:84:c7:0e:36:7b:f3:28:9f:84:12: 5f:e8:8e:2e:db:7f:c0:e2:60:4d:5e:89:dd:5d:4b: ae:a9:f3:a9:72:1c:65:7b:44:37:fc:e7:25:78:05: 31:d7:e4:40:fe:58:18:0b:ca:f9:88:e9:f8:2a:b7: 65:ca:ce:78:2a:44:d0:eb:9b:b6:30:94:7f:90:d0: b5:e1:c7:2a:80:56:12:61:53:ce:01:bb:52:1e:19: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:79:D4:A5:8F:8D:D9:E5:E2:34:79:BA:F1:C8:29:1D:05:D8:33:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f3:15:88:d3:03:90:56:c3:57:bb:39:e7:10:56:17:15:26: 7a:28:3b:1f:b4:1c:0b:90:be:a1:28:47:98:65:22:d9:72:26: 45:1c:b5:53:8d:e2:2c:da:85:7b:b0:ef:f0:f6:9f:98:7b:73: a8:a3:e4:40:3d:ef:28:87:51:e9:00:e2:a8:a5:dd:0a:69:5d: 48:4c:03:91:43:ab:f1:56:8a:c6:db:28:e8:d7:a0:24:a3:71: 26:76:ea:e6:d3:07:ad:bf:76:c7:6b:00:0b:ca:65:93:ad:cf: fb:a5:3f:3e:95:ea:e6:11:f6:ee:3b:8e:6e:37:03:fa:9c:08: 7c:99:32:ac:6c:53:6b:a4:17:9e:50:aa:73:45:e2:db:b3:e9: 51:6f:5b:b5:34:32:f2:e5:91:34:12:f2:3c:d3:ba:b3:f6:e1: aa:ff:5c:0b:2b:0a:c1:0f:08:16:e1:35:e0:05:8f:6d:d2:a1: 9c:4c:bd:2a:76:df:2f:b9:9d:62:34:e0:0c:8a:37:f1:c4:95: fc:94:d9:08:cb:ae:fb:9d:c3:0b:5c:20:48:58:46:19:47:28: 45:0b:45:d3:cb:5c:37:30:6b:3b:9f:7d:0a:bb:91:f9:59:28: 0a:82:65:14:0e:02:6c:98:3d:d0:ae:42:84:8f:92:b2:61:41: d1:78:9a:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcl6Yrsyfo3tm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk N2MwYjU3ZDgtMTYyZC00NzJhLWI0ZDItMTlkMWM0YTRkMTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZYr7563HoJ/+hoclO6UR7GgfTP32t9/9phu QJTNuFT/n00V2GKSId+U/AcsrLrjapoZFUvjb3psQQMjWvnTiddzrxhOO57RBjIZ iOWjb1LomUrQzl6DAyCBzebFGHH0EXEh5DPh1CiOIJy4lgEcO+gx7AJr/PEA7BB1 maTSw7DI3SW5xTeVK37/JRPwGqAE5EOpWsaEaDQnEWpE8u1P89zeYiGJVeU7XITH DjZ78yifhBJf6I4u23/A4mBNXondXUuuqfOpchxle0Q3/OcleAUx1+RA/lgYC8r5 iOn4Krdlys54KkTQ65u2MJR/kNC14ccqgFYSYVPOAbtSHhlbjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB51KWPjdnl4jR5uvHIKR0F2DMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMGFmOWU2YTctZWMyNi0z Yjg4LThmYTQtOGQzMjU0OTg2ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHzFYjTA5BWw1e7OecQVhcVJnooOx+0HAuQvqEoR5hlItlyJkUctVON 4izahXuw7/D2n5h7c6ij5EA97yiHUekA4qil3QppXUhMA5FDq/FWisbbKOjXoCSj cSZ26ubTB62/dsdrAAvKZZOtz/ulPz6V6uYR9u47jm43A/qcCHyZMqxsU2ukF55Q qnNF4tuz6VFvW7U0MvLlkTQS8jzTurP24ar/XAsrCsEPCBbhNeAFj23SoZxMvSp2 3y+5nWI04AyKN/HElfyU2QjLrvudwwtcIEhYRhlHKEULRdPLXDcwazuffQq7kflZ KAqCZRQOAmyYPdCuQoSPkrJhQdF4mnc= -----END CERTIFICATE-----Generated at Sun Nov 15 18:40:00 2026 by rpki-client