$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5511acd-1775-3141-846f-61291d840ca3.roa File: f5511acd-1775-3141-846f-61291d840ca3.roa (raw, json) Hash identifier: 39wDgXeaFV3JYS0zgFzZ/rxqDmCBuNDc3nL+BTbFrlA= Subject key identifier: 37:B6:20:09:58:41:F6:9C:A7:1B:A0:C2:19:DF:2E:54:BA:C4:A3:73 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F3FAD47F801114CBC1E091F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5511acd-1775-3141-846f-61291d840ca3.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 701 IP address blocks: 141.153.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:47:f8:01:11:4c:bc:1e:09:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=f3a2431f-b8bb-4ced-b2a7-ad31fbb94eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:83:a9:3c:45:bd:65:ce:1a:42:77:cf:48:3a: 7f:fc:be:21:42:26:c9:13:32:e7:75:51:a9:ec:be: d9:b7:60:b9:25:24:fd:1a:a4:bb:55:b8:b7:fd:b0: c8:fa:fc:08:59:6c:99:0d:94:dd:34:08:c0:2f:b8: 3f:c9:96:b9:ab:98:6a:74:a6:b2:35:73:8a:ba:fc: 8f:c1:37:ee:5c:1e:88:bd:3c:2b:a9:27:2d:d7:f0: 89:4b:a7:0b:32:9e:ea:68:ef:e7:15:98:63:87:69: 85:af:db:55:b9:72:97:47:2e:9b:b0:de:92:04:0a: 5b:9c:4a:3c:31:b6:3c:15:00:be:e4:d2:dd:15:19: d2:57:b6:6c:ae:70:67:22:5d:7e:46:26:ab:a0:98: 94:e9:aa:8d:f4:2e:e3:c9:27:ec:51:34:b3:fc:49: c9:5a:b5:33:6a:f9:1f:f6:13:c3:1d:31:9f:1c:43: e0:a9:6d:e2:39:ec:10:61:bd:72:ae:75:c1:e3:8d: 00:9d:00:07:25:6d:20:d7:48:ce:e5:65:5a:ea:b3: de:b8:b1:4b:8c:15:d5:b4:a7:2e:61:53:0b:3e:24: b9:ce:c1:ef:83:8a:2f:7e:dd:b4:bd:25:af:75:60: c4:61:7b:6f:59:e8:4e:40:ea:95:5e:56:77:e0:d8: 59:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B6:20:09:58:41:F6:9C:A7:1B:A0:C2:19:DF:2E:54:BA:C4:A3:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5511acd-1775-3141-846f-61291d840ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.153.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:fb:9b:ae:30:3b:50:d4:32:bb:a1:44:7a:90:1f:53:5d:f9: 4c:71:af:72:09:22:d5:bc:47:d4:85:4e:8a:29:1f:58:67:22: f0:33:cb:03:9f:0e:14:4a:7f:60:6b:f6:6d:51:d2:b9:89:6f: 51:0a:c2:e8:80:27:75:1d:6e:15:6b:fc:f1:aa:ce:00:5f:92: 05:aa:36:8f:1c:85:2f:f1:18:aa:20:bc:89:8b:cb:e7:2a:77: 09:f8:30:45:d4:02:ad:f0:fd:20:d1:df:8d:32:fc:50:d9:f3: 52:6b:b9:26:ca:32:0e:e0:eb:67:eb:41:e7:27:97:13:d0:87: b0:9d:f0:c0:db:e6:c6:86:a6:06:bf:45:39:92:a7:4a:10:8c: 97:6f:71:09:36:10:78:21:b8:38:28:a8:c3:b2:e2:c4:3e:ba: bf:af:4b:e2:ad:58:24:34:0c:1d:26:4f:49:e3:18:bc:0f:24: fb:e5:82:b8:64:a8:87:7b:8a:e4:67:6c:cb:46:5a:25:ea:ae: a1:a9:4e:d9:df:05:be:62:b3:d6:cc:2c:76:5c:92:8b:29:9b: 4f:98:9b:02:8f:88:a4:2c:24:dd:8a:c0:ce:3e:8e:58:58:85: 93:5c:ff:4a:8e:cf:79:68:5b:82:74:8d:33:f3:e8:93:3a:68: 3a:7e:76:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUf4ARFMvB4JH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZjNhMjQzMWYtYjhiYi00Y2VkLWIyYTctYWQzMWZiYjk0ZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4OpPEW9Zc4aQnfPSDp//L4hQibJEzLndVGp 7L7Zt2C5JST9GqS7Vbi3/bDI+vwIWWyZDZTdNAjAL7g/yZa5q5hqdKayNXOKuvyP wTfuXB6IvTwrqSct1/CJS6cLMp7qaO/nFZhjh2mFr9tVuXKXRy6bsN6SBApbnEo8 MbY8FQC+5NLdFRnSV7ZsrnBnIl1+RiaroJiU6aqN9C7jySfsUTSz/EnJWrUzavkf 9hPDHTGfHEPgqW3iOewQYb1yrnXB440AnQAHJW0g10jO5WVa6rPeuLFLjBXVtKcu YVMLPiS5zsHvg4ovft20vSWvdWDEYXtvWehOQOqVXlZ34NhZHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe2IAlYQfacpxugwhnfLlS6xKNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjU1MTFhY2QtMTc3NS0z MTQxLTg0NmYtNjEyOTFkODQwY2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKT7m64wO1DUMruhRHqQH1Nd+Uxxr3IJItW8R9SFToopH1hnIvAzywOf DhRKf2Br9m1R0rmJb1EKwuiAJ3UdbhVr/PGqzgBfkgWqNo8chS/xGKogvImLy+cq dwn4MEXUAq3w/SDR340y/FDZ81JruSbKMg7g62frQecnlxPQh7Cd8MDb5saGpga/ RTmSp0oQjJdvcQk2EHghuDgoqMOy4sQ+ur+vS+KtWCQ0DB0mT0njGLwPJPvlgrhk qId7iuRnbMtGWiXqrqGpTtnfBb5is9bMLHZckospm0+YmwKPiKQsJN2KwM4+jlhY hZNc/0qOz3loW4J0jTPz6JM6aDp+dv8= -----END CERTIFICATE-----Generated at Mon Sep 28 10:12:45 2026 by rpki-client