$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ffcaa1ee-fb4b-332c-8522-52ce8e6d8af9.roa File: ffcaa1ee-fb4b-332c-8522-52ce8e6d8af9.roa (raw, json) Hash identifier: vWP2xT32IoMMYm2dP8m5/VY9lA18sEiHGqwlboZk1bk= Subject key identifier: F1:7E:EE:55:64:E5:3B:82:36:74:46:24:B5:74:65:32:A4:38:6B:01 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584F7FE2F709D446D8A11F131780 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ffcaa1ee-fb4b-332c-8522-52ce8e6d8af9.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 22616 IP address blocks: 137.83.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:f7:09:d4:46:d8:a1:1f:13:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=4729c410-2bcd-46ff-a3ae-4c441351ae84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:65:a4:ff:05:55:8f:3a:83:b7:ff:52:f9:8d: 15:11:c5:6c:6b:d3:6e:8d:b0:12:27:7b:04:1d:26: e0:7b:b6:01:ec:fc:55:2d:da:3d:6d:1e:ce:cc:71: a8:f6:e9:a1:7d:95:2b:b3:3d:a7:16:16:01:55:06: 5a:2c:53:64:b0:34:80:01:fc:a6:55:da:4f:95:fb: a3:40:3a:93:7d:a3:d2:49:65:8f:c7:1f:48:83:cb: 5d:01:2f:57:0d:a2:48:a3:bc:fe:e9:fa:c3:e7:0b: cd:e3:c2:fc:72:73:7d:95:b0:f7:6c:26:d0:37:59: ee:fe:4c:e8:21:1f:33:24:24:01:1e:6b:a5:e4:2a: a4:ed:6d:43:97:90:90:4f:cc:f0:21:0c:e1:ca:3d: fa:65:37:40:95:4f:f7:23:87:8d:7b:4b:0d:87:f7: 98:4a:ac:92:98:3e:2e:a0:28:41:c2:cd:36:d8:4d: 6e:8f:2a:8d:5e:c8:ee:5b:e0:23:90:e5:03:ee:3f: 8c:ac:11:5d:5a:3c:f1:e5:8e:a5:36:d5:d8:a0:b8: cf:cb:04:f1:d8:56:8c:32:2a:df:67:17:b6:9a:1b: 2a:74:3a:bd:62:fc:0e:04:91:47:db:b3:2c:00:c7: 1a:1d:2d:65:41:c4:74:01:84:51:d4:00:95:b7:df: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7E:EE:55:64:E5:3B:82:36:74:46:24:B5:74:65:32:A4:38:6B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ffcaa1ee-fb4b-332c-8522-52ce8e6d8af9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 137.83.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:f7:83:93:e8:33:17:2b:85:b3:d9:ed:34:bc:55:53:73:29: 51:81:5a:66:d8:a4:3e:5c:66:02:f9:6e:49:4a:0f:3c:44:af: 79:99:e1:7e:01:a9:69:65:8e:24:4d:7e:de:ef:63:cc:a5:60: af:89:3f:77:7c:11:8e:bf:e7:5f:9c:ec:ed:c2:88:cc:ee:0f: 73:d9:ae:39:b6:f0:ef:90:ec:58:7d:c4:c0:83:f2:4f:fc:d1: 68:39:89:c3:32:cd:54:58:04:4b:38:b8:00:0a:b5:d4:84:14: a4:ea:6d:f4:a6:65:57:b1:aa:e4:20:bf:b1:ef:cf:58:a3:d0: df:66:93:3d:d4:f3:b2:88:8b:92:db:4f:8a:10:f4:03:b6:80: bb:ec:95:cf:21:0b:13:98:b6:ba:bc:ae:62:62:47:70:1b:d9: bc:3d:ee:e1:b6:f2:00:b0:0c:dd:d5:12:5c:50:cf:65:54:eb: 14:52:d2:61:32:84:81:55:d9:0c:0e:26:e9:cb:49:d1:77:fa: ac:d0:a9:78:47:6a:85:92:8d:e6:85:fb:64:a9:ed:dd:5c:cd: 34:b0:ee:f6:1c:d3:9f:68:22:7b:c3:ea:b5:9c:9b:9c:c6:59: 48:5b:14:01:46:f3:58:21:77:12:25:07:25:1e:b6:50:bd:33: 96:f6:f3:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4vcJ1EbYoR8TF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk NDcyOWM0MTAtMmJjZC00NmZmLWEzYWUtNGM0NDEzNTFhZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWWk/wVVjzqDt/9S+Y0VEcVsa9NujbASJ3sE HSbge7YB7PxVLdo9bR7OzHGo9umhfZUrsz2nFhYBVQZaLFNksDSAAfymVdpPlfuj QDqTfaPSSWWPxx9Ig8tdAS9XDaJIo7z+6frD5wvN48L8cnN9lbD3bCbQN1nu/kzo IR8zJCQBHmul5Cqk7W1Dl5CQT8zwIQzhyj36ZTdAlU/3I4eNe0sNh/eYSqySmD4u oChBws022E1ujyqNXsjuW+AjkOUD7j+MrBFdWjzx5Y6lNtXYoLjPywTx2FaMMirf Zxe2mhsqdDq9YvwOBJFH27MsAMcaHS1lQcR0AYRR1ACVt98iPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPF+7lVk5TuCNnRGJLV0ZTKkOGsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZmZjYWExZWUtZmI0Yi0z MzJjLTg1MjItNTJjZThlNmQ4YWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALv3g5PoMxcrhbPZ7TS8VVNzKVGBWmbYpD5cZgL5bklKDzxEr3mZ4X4B qWlljiRNft7vY8ylYK+JP3d8EY6/51+c7O3CiMzuD3PZrjm28O+Q7Fh9xMCD8k/8 0Wg5icMyzVRYBEs4uAAKtdSEFKTqbfSmZVexquQgv7Hvz1ij0N9mkz3U87KIi5Lb T4oQ9AO2gLvslc8hCxOYtrq8rmJiR3Ab2bw97uG28gCwDN3VElxQz2VU6xRS0mEy hIFV2QwOJunLSdF3+qzQqXhHaoWSjeaF+2Sp7d1czTSw7vYc059oInvD6rWcm5zG WUhbFAFG81ghdxIlByUetlC9M5b288U= -----END CERTIFICATE-----Generated at Sun Nov 1 01:01:15 2026 by rpki-client