$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/07c330fc-bf74-4a7d-a884-e2b3341e8935/3733e7c5-9389-33e6-b4a9-f9fe285fe60e.roa File: 3733e7c5-9389-33e6-b4a9-f9fe285fe60e.roa (raw, json) Hash identifier: BPtmgjzVcEXk4w1RO9xje6gAbneAOUIolmFWuqHSfFQ= Subject key identifier: AA:2B:0B:5E:9B:67:6E:34:8C:49:B1:BC:27:06:4C:4D:F9:BB:3E:A3 Certificate issuer: /CN=07c330fc-bf74-4a7d-a884-e2b3341e8935 Certificate serial: 010D0C9F4328584F916A6464E1230E9AEBCA5C00 Authority key identifier: FC:08:CC:CC:F6:08:94:87:EA:46:A0:EF:21:8C:11:7D:F8:B3:69:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/07c330fc-bf74-4a7d-a884-e2b3341e8935.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/07c330fc-bf74-4a7d-a884-e2b3341e8935/3733e7c5-9389-33e6-b4a9-f9fe285fe60e.roa Signing time: Tue 20 Oct 2026 19:42:02 +0000 ROA not before: Tue 20 Oct 2026 19:42:02 +0000 ROA not after: Mon 18 Jan 2027 20:42:02 +0000 asID: 395072 IP address blocks: 204.225.122.0/23 maxlen: 23 204.225.122.0/24 maxlen: 24 204.225.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/07c330fc-bf74-4a7d-a884-e2b3341e8935/07c330fc-bf74-4a7d-a884-e2b3341e8935.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/07c330fc-bf74-4a7d-a884-e2b3341e8935/07c330fc-bf74-4a7d-a884-e2b3341e8935.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/07c330fc-bf74-4a7d-a884-e2b3341e8935.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:91:6a:64:64:e1:23:0e:9a:eb:ca:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c330fc-bf74-4a7d-a884-e2b3341e8935 Validity Not Before: Oct 20 19:42:02 2026 GMT Not After : Jan 18 20:42:02 2027 GMT Subject: CN=395a7cf3-513a-4fbb-ac09-2d75f26b95ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:f2:5c:fe:5d:ac:8f:d0:19:28:8a:a9:d7: e4:eb:01:72:14:ab:26:96:7c:d8:57:8d:ec:f9:e0: 84:67:32:39:ed:83:ae:18:40:3b:79:6a:26:9d:70: e4:8b:6b:a2:c6:06:16:05:7b:d5:67:86:08:0b:f0: fb:dd:50:cd:05:ea:48:01:02:5f:e4:24:87:e4:7a: 46:a8:52:82:26:3b:fe:d4:dd:8e:43:93:68:6f:3d: da:36:fe:d4:25:5f:24:94:7b:8a:8d:ec:3d:40:ef: f3:65:3c:79:bc:9e:99:c3:29:a9:8e:78:da:ac:10: b1:86:23:df:a0:99:65:9f:a1:ef:85:b6:fb:19:ea: a1:01:98:36:58:83:51:bf:3d:b9:b7:42:23:d6:fe: cb:31:04:e4:c3:b8:b5:f0:88:cc:26:12:9d:ff:60: a8:45:4b:a2:2c:d0:d7:8e:ef:a1:6a:b6:3c:8b:f8: 4c:d4:10:47:e5:f1:4a:e3:1d:ee:4e:2e:3f:6f:8c: 58:8d:38:53:70:bd:5e:c5:01:f2:e6:6a:68:c7:f4: b4:c5:42:ee:27:db:19:a0:a5:c9:4b:40:ce:9e:b8: a7:7c:3e:83:10:38:33:4c:39:6f:cb:2d:f9:ac:b4: 2b:d0:59:f3:9e:e1:d2:ef:5d:ac:39:b5:3b:fa:21: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2B:0B:5E:9B:67:6E:34:8C:49:B1:BC:27:06:4C:4D:F9:BB:3E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/07c330fc-bf74-4a7d-a884-e2b3341e8935/3733e7c5-9389-33e6-b4a9-f9fe285fe60e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/07c330fc-bf74-4a7d-a884-e2b3341e8935/07c330fc-bf74-4a7d-a884-e2b3341e8935.crl X509v3 Authority Key Identifier: keyid:FC:08:CC:CC:F6:08:94:87:EA:46:A0:EF:21:8C:11:7D:F8:B3:69:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/07c330fc-bf74-4a7d-a884-e2b3341e8935.cer sbgp-ipAddrBlock: critical IPv4: 204.225.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:4b:3d:db:35:07:43:fc:0b:a2:26:7c:ad:8f:50:10:4c:c6: ed:59:12:78:bd:57:15:8d:61:30:8f:d9:97:95:63:28:71:71: af:91:17:99:aa:90:f7:56:9a:de:50:b4:a9:f7:1e:e9:94:4b: a7:61:00:87:7e:37:e3:81:30:3c:55:35:a0:6f:bf:72:ac:70: bf:3d:00:88:73:f1:82:bf:a7:f1:2b:43:d1:2b:c1:a4:d4:bd: e5:8f:12:41:0b:fa:44:d4:35:82:f8:c0:f3:e4:72:fa:d0:e5: f2:43:a3:42:fe:4a:b6:4f:81:9d:b2:87:00:a1:13:b6:25:f2: a9:0e:e3:a5:d5:1a:ae:6e:f3:dd:3b:22:99:27:28:eb:8e:52: da:31:31:d3:a1:8c:c6:85:13:ab:47:81:a3:2b:c3:1b:9b:d2: 89:3e:07:1e:06:b9:ea:98:6c:64:06:8b:89:b7:1e:95:77:91: bd:ea:e4:9c:c4:c5:a1:96:f5:78:4b:71:93:1f:b7:d2:d1:f1: fb:f7:e9:d2:32:0f:fc:77:ea:f6:50:f2:a4:15:73:87:74:97: 6b:7d:96:1b:2f:94:d5:b1:ec:f3:d7:b5:c6:c7:7f:81:5d:14: d8:83:8f:fd:ab:0a:3a:6f:c5:b6:3c:a2:d5:4b:20:89:84:0f: c2:86:ac:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+RamRk4SMOmuvKXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDdjMzMwZmMtYmY3NC00YTdkLWE4ODQtZTJiMzM0MWU4 OTM1MB4XDTI2MTAyMDE5NDIwMloXDTI3MDExODIwNDIwMlowLzEtMCsGA1UEAxMk Mzk1YTdjZjMtNTEzYS00ZmJiLWFjMDktMmQ3NWYyNmI5NWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7zyXP5drI/QGSiKqdfk6wFyFKsmlnzYV43s +eCEZzI57YOuGEA7eWomnXDki2uixgYWBXvVZ4YIC/D73VDNBepIAQJf5CSH5HpG qFKCJjv+1N2OQ5Nobz3aNv7UJV8klHuKjew9QO/zZTx5vJ6ZwympjnjarBCxhiPf oJlln6Hvhbb7GeqhAZg2WINRvz25t0Ij1v7LMQTkw7i18IjMJhKd/2CoRUuiLNDX ju+harY8i/hM1BBH5fFK4x3uTi4/b4xYjThTcL1exQHy5mpox/S0xULuJ9sZoKXJ S0DOnrinfD6DEDgzTDlvyy35rLQr0FnznuHS712sObU7+iH+FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKorC16bZ240jEmxvCcGTE35uz6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wN2Mz MzBmYy1iZjc0LTRhN2QtYTg4NC1lMmIzMzQxZTg5MzUvMzczM2U3YzUtOTM4OS0z M2U2LWI0YTktZjlmZTI4NWZlNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMDdjMzMwZmMtYmY3NC00YTdkLWE4 ODQtZTJiMzM0MWU4OTM1LzA3YzMzMGZjLWJmNzQtNGE3ZC1hODg0LWUyYjMzNDFl ODkzNS5jcmwwHwYDVR0jBBgwFoAU/AjMzPYIlIfqRqDvIYwRffizaUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8wN2MzMzBmYy1iZjc0LTRhN2QtYTg4NC1lMmIz MzQxZTg5MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzOF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5LPds1B0P8C6ImfK2PUBBMxu1ZEni9VxWNYTCP2ZeVYyhxca+RF5mq kPdWmt5QtKn3HumUS6dhAId+N+OBMDxVNaBvv3KscL89AIhz8YK/p/ErQ9ErwaTU veWPEkEL+kTUNYL4wPPkcvrQ5fJDo0L+SrZPgZ2yhwChE7Yl8qkO46XVGq5u8907 IpknKOuOUtoxMdOhjMaFE6tHgaMrwxub0ok+Bx4GueqYbGQGi4m3HpV3kb3q5JzE xaGW9XhLcZMft9LR8fv36dIyD/x36vZQ8qQVc4d0l2t9lhsvlNWx7PPXtcbHf4Fd FNiDj/2rCjpvxbY8otVLIImED8KGrJc= -----END CERTIFICATE-----Generated at Wed Nov 4 14:26:26 2026 by rpki-client