$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a7468b8f-bf6d-3561-a73f-12c58a6ce800.roa File: a7468b8f-bf6d-3561-a73f-12c58a6ce800.roa (raw, json) Hash identifier: agSiCzjCBdtamvn7/ZEvBTVUEC7l9NU3zWczFQGZn/Y= Subject key identifier: D9:34:C5:FF:99:11:1B:1A:83:43:19:9A:17:D5:EF:A7:6A:F4:02:4F Certificate issuer: /CN=a33a8548-3254-4c75-b176-b888068a1694 Certificate serial: 010D0C9F4328584F58CD4BC4F923930774B58700 Authority key identifier: 12:A7:CD:E9:E8:60:3D:5C:D8:93:A1:D2:11:87:85:CD:A1:30:AC:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a7468b8f-bf6d-3561-a73f-12c58a6ce800.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 402847 IP address blocks: 169.128.120.0/23 maxlen: 23 198.22.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a33a8548-3254-4c75-b176-b888068a1694.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a33a8548-3254-4c75-b176-b888068a1694.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:4b:c4:f9:23:93:07:74:b5:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a33a8548-3254-4c75-b176-b888068a1694 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=f33363f2-1639-43b9-9c2c-545984cd448e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c1:0b:27:2d:08:fc:5c:ec:88:df:bd:be:b5: 42:90:cf:14:a1:74:22:19:ce:2d:a1:83:bf:7e:50: c0:94:ca:0f:77:cd:ce:f2:62:68:fa:bc:15:15:72: c8:ec:b8:75:36:64:4f:ac:78:82:de:12:19:40:8c: cc:86:f4:ce:d9:93:34:1d:ed:69:29:19:7b:5b:eb: 32:d1:c3:4f:0f:f0:bd:94:bf:aa:a9:88:92:58:72: 5e:52:87:45:5a:98:e3:08:1e:4c:93:fa:f2:05:48: c1:d0:41:72:3e:8c:4f:bb:87:35:4a:2b:09:f9:8d: db:8e:9b:38:c8:3a:9d:b9:40:b7:c0:20:50:0b:ef: 40:98:21:1c:24:26:86:60:4e:a0:b4:89:11:37:52: 16:9d:36:86:55:2b:cb:26:4a:65:0e:de:3e:9d:85: 5c:0c:32:2b:17:84:39:7c:f3:43:6d:82:ca:e8:ce: b6:7e:f3:67:76:91:24:3d:48:d9:21:d0:4e:1e:ae: ef:c1:29:b0:68:ea:13:f3:12:f8:66:d2:c6:5e:60: 09:3c:6e:99:1f:d6:18:51:44:e6:2a:64:26:cc:77: 80:dc:04:e9:ae:fd:2a:2a:f2:83:bd:87:24:20:e0: e1:75:e6:8d:a4:97:d4:c8:65:4c:b1:83:38:08:30: 04:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:34:C5:FF:99:11:1B:1A:83:43:19:9A:17:D5:EF:A7:6A:F4:02:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a7468b8f-bf6d-3561-a73f-12c58a6ce800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a33a8548-3254-4c75-b176-b888068a1694.crl X509v3 Authority Key Identifier: keyid:12:A7:CD:E9:E8:60:3D:5C:D8:93:A1:D2:11:87:85:CD:A1:30:AC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694.cer sbgp-ipAddrBlock: critical IPv4: 169.128.120.0/23 198.22.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:76:a9:f7:19:16:72:f7:8b:fb:b3:d0:0a:b4:52:c8:23:2a: 02:40:59:90:14:38:a2:2c:ec:e3:71:4b:28:d1:8d:25:31:44: da:f7:1e:ab:79:ef:f2:b7:78:97:ed:64:48:e4:68:8b:6b:99: a7:e4:2e:40:a4:42:ec:92:9b:a3:8f:49:ad:45:e6:ea:a4:cd: b9:76:8d:05:b3:66:10:fb:dc:94:c0:bd:68:c7:5c:7f:ef:ad: e4:67:ac:44:04:d6:69:52:e4:ac:ef:02:8e:18:4b:8b:5c:53: fa:0f:33:81:f2:33:46:a5:dc:15:90:73:1f:4e:b8:09:18:5a: 14:fe:bb:2d:91:cd:6d:7f:5a:61:ea:90:70:df:60:d8:d8:87: 12:6e:a4:e7:33:73:2a:1d:1f:5c:22:ea:f7:34:bd:8c:b9:73: a4:b4:4e:ca:9e:11:16:15:b7:d0:21:eb:85:fd:49:e1:02:3b: ec:0b:3d:bb:75:4c:a1:40:5b:2b:d3:3a:e9:e8:6b:46:85:31: 57:cf:2d:d8:5e:2c:1d:8c:69:6e:1d:8e:9b:98:48:e6:d2:36: 0c:b2:8a:24:9c:b3:80:d9:99:00:d8:84:20:14:e5:23:ca:9c: 31:42:90:e4:c1:9d:a3:ee:5c:97:45:26:f9:8c:d6:31:06:bf: c6:e3:c1:17 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9YzUvE+SOTB3S1hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMzYTg1NDgtMzI1NC00Yzc1LWIxNzYtYjg4ODA2OGEx Njk0MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk ZjMzMzYzZjItMTYzOS00M2I5LTljMmMtNTQ1OTg0Y2Q0NDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMELJy0I/FzsiN+9vrVCkM8UoXQiGc4toYO/ flDAlMoPd83O8mJo+rwVFXLI7Lh1NmRPrHiC3hIZQIzMhvTO2ZM0He1pKRl7W+sy 0cNPD/C9lL+qqYiSWHJeUodFWpjjCB5Mk/ryBUjB0EFyPoxPu4c1SisJ+Y3bjps4 yDqduUC3wCBQC+9AmCEcJCaGYE6gtIkRN1IWnTaGVSvLJkplDt4+nYVcDDIrF4Q5 fPNDbYLK6M62fvNndpEkPUjZIdBOHq7vwSmwaOoT8xL4ZtLGXmAJPG6ZH9YYUUTm KmQmzHeA3ATprv0qKvKDvYckIODhdeaNpJfUyGVMsYM4CDAEQQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNk0xf+ZERsag0MZmhfV76dq9AJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMzNh ODU0OC0zMjU0LTRjNzUtYjE3Ni1iODg4MDY4YTE2OTQvYTc0NjhiOGYtYmY2ZC0z NTYxLWE3M2YtMTJjNThhNmNlODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYTMzYTg1NDgtMzI1NC00Yzc1LWIx NzYtYjg4ODA2OGExNjk0L2EzM2E4NTQ4LTMyNTQtNGM3NS1iMTc2LWI4ODgwNjhh MTY5NC5jcmwwHwYDVR0jBBgwFoAUEqfN6ehgPVzYk6HSEYeFzaEwrBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMzNhODU0OC0zMjU0LTRjNzUtYjE3Ni1iODg4 MDY4YTE2OTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBqYB4AwQA xhaMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKB2qfcZFnL3i/uz0Aq0UsgjKgJAWZAUOKIs7ONxSyjRjSUx RNr3Hqt57/K3eJftZEjkaItrmafkLkCkQuySm6OPSa1F5uqkzbl2jQWzZhD73JTA vWjHXH/vreRnrEQE1mlS5KzvAo4YS4tcU/oPM4HyM0al3BWQcx9OuAkYWhT+uy2R zW1/WmHqkHDfYNjYhxJupOczcyodH1wi6vc0vYy5c6S0TsqeERYVt9Ah64X9SeEC O+wLPbt1TKFAWyvTOunoa0aFMVfPLdheLB2MaW4djpuYSObSNgyyiiScs4DZmQDY hCAU5SPKnDFCkOTBnaPuXJdFJvmM1jEGv8bjwRc= -----END CERTIFICATE-----Generated at Sun Oct 11 20:13:37 2026 by rpki-client