$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589/ff33b93b-7074-34f7-be96-23293a5a9a44.roa File: ff33b93b-7074-34f7-be96-23293a5a9a44.roa (raw, json) Hash identifier: +T2pTPhqezWpjhJmTQtI4HVPjem5QtJYR/dad3JW/VQ= Subject key identifier: 0C:E6:C3:9A:9C:7B:C5:6F:0E:5C:32:2D:71:B7:11:8C:5D:85:2F:65 Certificate issuer: /CN=132c89a3-684e-47d8-bb59-9c1f38639589 Certificate serial: 010D0C9F4328584F37C6989683DC493D5A5F3F00 Authority key identifier: 09:E5:57:90:F4:6C:FB:74:52:D5:38:EF:C9:63:11:71:1E:F0:DB:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589/ff33b93b-7074-34f7-be96-23293a5a9a44.roa Signing time: Fri 18 Sep 2026 17:05:03 +0000 ROA not before: Fri 18 Sep 2026 17:05:03 +0000 ROA not after: Thu 17 Dec 2026 18:05:03 +0000 asID: 394994 IP address blocks: 144.208.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589/132c89a3-684e-47d8-bb59-9c1f38639589.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589/132c89a3-684e-47d8-bb59-9c1f38639589.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:c6:98:96:83:dc:49:3d:5a:5f:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132c89a3-684e-47d8-bb59-9c1f38639589 Validity Not Before: Sep 18 17:05:03 2026 GMT Not After : Dec 17 18:05:03 2026 GMT Subject: CN=00ea5246-23e1-4859-a352-905174bab955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:80:87:03:da:13:e3:fb:ce:3f:9f:dc:26:8f: 6c:39:81:32:84:9e:f2:f8:cb:fb:b5:d9:50:86:04: 99:91:65:08:17:90:af:b4:26:c7:03:de:cb:f3:37: fc:9d:f1:65:53:29:4a:eb:67:11:fb:c3:8b:d1:48: 90:9f:af:ed:06:e0:d9:d5:27:45:19:3d:dc:eb:e4: 4c:1d:12:dd:02:82:98:af:fc:f8:61:17:c4:50:56: 32:19:fa:93:df:eb:35:cd:c6:5e:9f:cc:30:9e:8b: 38:3b:f3:76:ca:a3:5f:08:a2:d7:70:2e:3f:d4:48: 64:11:f7:c5:ff:7a:80:b7:e5:27:00:c7:fb:93:f2: ed:ea:44:ef:71:90:9e:58:28:7c:ff:ed:24:da:a0: 87:06:05:a4:74:2a:31:36:a1:53:3c:77:0b:02:d7: ec:df:2a:ad:ac:14:a1:c1:a4:66:31:03:06:7b:b4: 71:c8:a5:95:2c:5b:4f:e1:b2:6e:f3:c5:5e:0c:f4: 2e:6f:d3:a6:a5:03:02:12:31:30:3c:08:cb:35:b8: 64:ca:b3:c2:77:b2:cc:b7:37:e6:74:08:d9:2d:86: 93:c9:c3:4c:78:04:ac:6f:92:10:f4:ff:7c:d7:bf: 65:62:c6:ba:f5:94:e4:40:a9:88:d4:24:4e:51:75: c3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E6:C3:9A:9C:7B:C5:6F:0E:5C:32:2D:71:B7:11:8C:5D:85:2F:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589/ff33b93b-7074-34f7-be96-23293a5a9a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589/132c89a3-684e-47d8-bb59-9c1f38639589.crl X509v3 Authority Key Identifier: keyid:09:E5:57:90:F4:6C:FB:74:52:D5:38:EF:C9:63:11:71:1E:F0:DB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/132c89a3-684e-47d8-bb59-9c1f38639589.cer sbgp-ipAddrBlock: critical IPv4: 144.208.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f1:ad:5d:fa:90:31:7e:45:b4:85:e9:be:10:60:6b:29:e0:cf: 15:f8:6b:b6:e3:85:40:a1:d0:a4:9c:bb:52:0b:9e:03:26:f8: 14:c2:17:17:fb:50:79:20:dd:26:35:b0:05:23:18:4f:b5:10: 12:c8:62:10:da:b1:69:9d:5b:9c:dd:7c:ec:dc:b1:9a:e9:77: 9f:8c:b9:e7:96:4e:8f:d4:9e:fa:03:35:c7:e2:b7:24:69:0e: 36:78:21:94:dd:21:96:2b:37:01:bc:55:b3:dd:4b:00:94:a9: 9c:8e:23:b5:5a:5b:9c:ed:06:ae:63:e0:48:19:99:43:14:98: f1:43:55:81:5a:6d:05:85:9e:a0:30:56:c7:13:a8:19:40:91: ee:73:1e:73:ae:6b:ab:f1:ef:9a:8e:87:ca:bf:b9:b8:64:98: f9:25:ba:cc:b9:fa:2c:d7:3b:84:38:f7:87:81:95:3b:1e:7d: 04:84:ca:02:9f:a0:8d:29:d2:ca:f1:55:01:ff:88:60:f2:9b: e3:56:0f:95:67:17:92:bb:a6:7c:bb:d4:ed:65:58:ed:57:2b: cf:0a:fd:a3:62:90:71:c8:c2:5f:5c:98:c0:b8:f2:f4:f4:bf: 05:98:d4:24:3f:ca:51:9d:14:fe:7b:0e:d9:30:1c:26:08:12: e6:08:b3:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83xpiWg9xJPVpfPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTMyYzg5YTMtNjg0ZS00N2Q4LWJiNTktOWMxZjM4NjM5 NTg5MB4XDTI2MDkxODE3MDUwM1oXDTI2MTIxNzE4MDUwM1owLzEtMCsGA1UEAxMk MDBlYTUyNDYtMjNlMS00ODU5LWEzNTItOTA1MTc0YmFiOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYCHA9oT4/vOP5/cJo9sOYEyhJ7y+Mv7tdlQ hgSZkWUIF5CvtCbHA97L8zf8nfFlUylK62cR+8OL0UiQn6/tBuDZ1SdFGT3c6+RM HRLdAoKYr/z4YRfEUFYyGfqT3+s1zcZen8wwnos4O/N2yqNfCKLXcC4/1EhkEffF /3qAt+UnAMf7k/Lt6kTvcZCeWCh8/+0k2qCHBgWkdCoxNqFTPHcLAtfs3yqtrBSh waRmMQMGe7RxyKWVLFtP4bJu88VeDPQub9OmpQMCEjEwPAjLNbhkyrPCd7LMtzfm dAjZLYaTycNMeASsb5IQ9P98179lYsa69ZTkQKmI1CROUXXDOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzmw5qce8VvDlwyLXG3EYxdhS9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMzJj ODlhMy02ODRlLTQ3ZDgtYmI1OS05YzFmMzg2Mzk1ODkvZmYzM2I5M2ItNzA3NC0z NGY3LWJlOTYtMjMyOTNhNWE5YTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTMyYzg5YTMtNjg0ZS00N2Q4LWJi NTktOWMxZjM4NjM5NTg5LzEzMmM4OWEzLTY4NGUtNDdkOC1iYjU5LTljMWYzODYz OTU4OS5jcmwwHwYDVR0jBBgwFoAUCeVXkPRs+3RS1TjvyWMRcR7w2+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMzJjODlhMy02ODRlLTQ3ZDgtYmI1OS05YzFm Mzg2Mzk1ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkNBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPGtXfqQMX5FtIXpvhBgayngzxX4a7bjhUCh0KScu1ILngMm+BTCFxf7 UHkg3SY1sAUjGE+1EBLIYhDasWmdW5zdfOzcsZrpd5+MueeWTo/UnvoDNcfityRp DjZ4IZTdIZYrNwG8VbPdSwCUqZyOI7VaW5ztBq5j4EgZmUMUmPFDVYFabQWFnqAw VscTqBlAke5zHnOua6vx75qOh8q/ubhkmPklusy5+izXO4Q494eBlTsefQSEygKf oI0p0srxVQH/iGDym+NWD5VnF5K7pny71O1lWO1XK88K/aNikHHIwl9cmMC48vT0 vwWY1CQ/ylGdFP57DtkwHCYIEuYIsxE= -----END CERTIFICATE-----Generated at Tue Sep 29 01:13:52 2026 by rpki-client