$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/4e337377-925e-334f-8f27-e615031587b5.roa File: 4e337377-925e-334f-8f27-e615031587b5.roa (raw, json) Hash identifier: bnqujdswU5hAsqmXyzFDkAAScKvHCrORRvVxn3faCGQ= Subject key identifier: 85:17:6F:E4:F9:BC:D0:C1:75:94:3B:A2:81:46:1C:A6:33:11:FD:1D Certificate issuer: /CN=6b94ef6e-7ebc-4239-94f3-7165ed163af5 Certificate serial: 010D0C9F4328584F9D3317A73839F1129BBEAC10 Authority key identifier: A4:8C:DF:01:15:04:7B:EA:BB:5F:6C:F7:FC:0A:5D:7D:AA:B8:1C:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/4e337377-925e-334f-8f27-e615031587b5.roa Signing time: Sun 25 Oct 2026 01:00:13 +0000 ROA not before: Sun 25 Oct 2026 01:00:13 +0000 ROA not after: Sat 23 Jan 2027 02:00:13 +0000 asID: 397903 IP address blocks: 137.220.8.0/21 maxlen: 21 172.83.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/6b94ef6e-7ebc-4239-94f3-7165ed163af5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/6b94ef6e-7ebc-4239-94f3-7165ed163af5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9d:33:17:a7:38:39:f1:12:9b:be:ac:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b94ef6e-7ebc-4239-94f3-7165ed163af5 Validity Not Before: Oct 25 01:00:13 2026 GMT Not After : Jan 23 02:00:13 2027 GMT Subject: CN=032c1537-3934-4211-8b75-b516b2b63070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:10:0b:b5:ed:0d:97:b7:86:3f:60:54:95:6f: 4f:9e:0c:dd:84:68:87:2f:76:56:4b:6f:ad:41:30: ab:70:4d:91:47:17:1f:01:cc:20:fc:e8:59:0c:67: 19:a2:c0:6d:17:24:98:77:29:3a:4d:ee:cd:4d:e0: 09:e0:a2:4a:60:bc:2a:21:05:3e:3e:2a:7e:3d:e9: 67:23:b8:bc:af:fe:8c:7d:dd:0e:1f:dc:07:92:8a: 6c:38:54:46:6e:e5:13:15:54:44:27:fe:94:45:d9: 73:ff:7f:66:d8:c1:6b:92:7f:0c:5e:9a:e1:26:e7: ea:3a:11:e8:77:48:df:6b:de:22:d0:8b:a3:06:b5: 80:06:d2:3e:b3:7e:cf:35:5a:ed:41:b1:c0:8f:f5: 4f:cd:33:00:c1:45:58:6a:d1:8c:7a:30:75:96:38: d9:8a:be:14:31:82:b6:83:90:bc:46:1e:12:2c:75: ab:5a:84:36:f0:83:00:41:06:25:77:6a:2d:33:96: 69:bf:2b:10:38:00:8f:99:56:17:f4:be:da:c7:02: db:71:18:a5:32:29:5f:81:4e:4a:42:73:51:9a:94: fb:f5:c2:32:35:e6:95:5e:bf:31:ea:44:d3:f4:21: 8b:27:54:5f:15:d2:f8:77:62:46:62:7b:08:2e:5b: 3d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:17:6F:E4:F9:BC:D0:C1:75:94:3B:A2:81:46:1C:A6:33:11:FD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/4e337377-925e-334f-8f27-e615031587b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/6b94ef6e-7ebc-4239-94f3-7165ed163af5.crl X509v3 Authority Key Identifier: keyid:A4:8C:DF:01:15:04:7B:EA:BB:5F:6C:F7:FC:0A:5D:7D:AA:B8:1C:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5.cer sbgp-ipAddrBlock: critical IPv4: 137.220.8.0/21 172.83.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:2f:18:64:a9:ae:f5:69:fc:69:cf:36:7e:8a:63:22:6b:d5: c2:20:ad:ae:88:a6:2f:53:f1:99:5d:6e:ab:98:5c:97:a7:37: f5:38:0a:7c:4b:5d:5c:f2:5d:15:d6:7d:21:83:96:b7:8a:e8: 64:13:ee:a2:1a:90:74:8d:13:62:14:2c:73:3e:ee:9e:7b:49: 09:1d:99:06:9f:ce:30:f6:54:9f:10:5f:33:02:3a:2e:01:8a: d9:39:12:95:74:f8:ad:a4:2b:86:73:09:95:18:89:2e:a6:72: 87:4f:ae:62:bf:71:f9:c8:70:e7:37:ec:0e:d4:14:dd:eb:45: 56:a0:8f:49:b0:7b:29:1c:a3:4a:ef:ad:20:47:10:b0:3a:cc: bc:a7:51:d0:56:d8:74:f6:90:83:51:cc:9c:41:11:1f:c9:b2: 2e:6a:56:0c:be:7b:16:fb:e1:04:28:bf:4e:e1:93:b7:f2:56: 64:2c:50:de:aa:70:15:2f:88:10:5d:17:b5:19:d7:48:f8:4e: 4d:86:07:81:45:20:48:3f:95:cf:07:a0:89:cc:08:22:53:06: b4:2f:8c:cd:f6:99:97:85:7b:b5:4f:c4:0f:2a:30:ab:57:df: d7:5a:a1:aa:8e:3e:7e:cd:5b:3f:78:58:84:17:1b:0b:36:7a: 1e:15:8b:f9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+dMxenODnxEpu+rBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmI5NGVmNmUtN2ViYy00MjM5LTk0ZjMtNzE2NWVkMTYz YWY1MB4XDTI2MTAyNTAxMDAxM1oXDTI3MDEyMzAyMDAxM1owLzEtMCsGA1UEAxMk MDMyYzE1MzctMzkzNC00MjExLThiNzUtYjUxNmIyYjYzMDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxALte0Nl7eGP2BUlW9PngzdhGiHL3ZWS2+t QTCrcE2RRxcfAcwg/OhZDGcZosBtFySYdyk6Te7NTeAJ4KJKYLwqIQU+Pip+Peln I7i8r/6Mfd0OH9wHkopsOFRGbuUTFVREJ/6URdlz/39m2MFrkn8MXprhJufqOhHo d0jfa94i0IujBrWABtI+s37PNVrtQbHAj/VPzTMAwUVYatGMejB1ljjZir4UMYK2 g5C8Rh4SLHWrWoQ28IMAQQYld2otM5ZpvysQOACPmVYX9L7axwLbcRilMilfgU5K QnNRmpT79cIyNeaVXr8x6kTT9CGLJ1RfFdL4d2JGYnsILls9rwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIUXb+T5vNDBdZQ7ooFGHKYzEf0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82Yjk0 ZWY2ZS03ZWJjLTQyMzktOTRmMy03MTY1ZWQxNjNhZjUvNGUzMzczNzctOTI1ZS0z MzRmLThmMjctZTYxNTAzMTU4N2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNmI5NGVmNmUtN2ViYy00MjM5LTk0 ZjMtNzE2NWVkMTYzYWY1LzZiOTRlZjZlLTdlYmMtNDIzOS05NGYzLTcxNjVlZDE2 M2FmNS5jcmwwHwYDVR0jBBgwFoAUpIzfARUEe+q7X2z3/Apdfaq4HDYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82Yjk0ZWY2ZS03ZWJjLTQyMzktOTRmMy03MTY1 ZWQxNjNhZjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDidwIAwQA rFP5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADQvGGSprvVp/GnPNn6KYyJr1cIgra6Ipi9T8ZldbquYXJen N/U4CnxLXVzyXRXWfSGDlreK6GQT7qIakHSNE2IULHM+7p57SQkdmQafzjD2VJ8Q XzMCOi4Bitk5EpV0+K2kK4ZzCZUYiS6mcodPrmK/cfnIcOc37A7UFN3rRVagj0mw eykco0rvrSBHELA6zLynUdBW2HT2kINRzJxBER/Jsi5qVgy+exb74QQov07hk7fy VmQsUN6qcBUviBBdF7UZ10j4Tk2GB4FFIEg/lc8HoInMCCJTBrQvjM32mZeFe7VP xA8qMKtX39daoaqOPn7NWz94WIQXGws2eh4Vi/k= -----END CERTIFICATE-----Generated at Thu Oct 29 00:46:52 2026 by rpki-client