$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa File: 3925ee21-557f-30f9-94cf-08e3240595ed.roa (raw, json) Hash identifier: Hn4Y2mw5KhMFcbjF0J3L+t85tO0vicfZbEWkVPY20N8= Subject key identifier: 5E:BA:46:E3:BB:D7:FB:15:E3:8E:27:5F:95:28:00:6B:A8:89:78:BE Certificate issuer: /CN=d03866eb-6362-4657-aa66-83307258d945 Certificate serial: 010D0C9F4328584EF87CB7C5767AA06922E10B80 Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 48678 IP address blocks: 192.101.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:b7:c5:76:7a:a0:69:22:e1:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03866eb-6362-4657-aa66-83307258d945 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=8c09fef2-4260-41d9-b0b2-2e3663f9df67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ad:f3:2e:54:30:89:a5:05:c6:c1:a9:8f:06: 0d:1c:74:94:51:ea:6f:ca:e9:e0:b1:03:d1:e7:2b: 10:b4:ed:df:00:ab:e6:14:67:79:94:f4:61:8c:e6: 8b:2c:93:1c:32:36:17:0e:f9:c8:61:26:ae:b5:3e: 2e:68:21:94:57:45:bb:7d:d1:bd:c5:12:19:9d:13: c9:e7:cb:b0:94:43:e0:f4:7f:3e:a2:ed:87:da:e3: 87:62:eb:4a:36:03:79:b1:62:97:f8:7f:24:a7:21: 09:fa:0e:20:5a:da:02:72:06:c3:18:d5:33:a1:ac: 85:eb:46:cd:c6:cd:66:bd:d6:fe:b7:1d:6b:1d:34: 2f:02:6d:02:0e:8c:49:98:ae:73:26:4d:a2:2d:b6: 0b:a0:d8:a0:0f:39:5d:06:27:c4:16:52:d1:66:59: 4e:2c:28:cd:30:c8:f6:b4:5b:51:2a:cf:67:1c:c4: d7:95:be:ed:80:de:a6:aa:20:9f:9c:b4:84:88:87: b0:f9:3a:2b:d7:5a:d3:63:be:38:35:3f:89:9b:de: cc:56:3c:af:5d:19:6f:b0:9c:e5:3e:bf:b0:e1:be: cc:63:64:68:56:cf:20:28:08:77:2c:d0:3d:85:01: c9:0b:15:e3:bd:c0:f5:3f:1d:19:66:82:c8:37:9c: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BA:46:E3:BB:D7:FB:15:E3:8E:27:5F:95:28:00:6B:A8:89:78:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl X509v3 Authority Key Identifier: keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer sbgp-ipAddrBlock: critical IPv4: 192.101.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2a:f3:e5:4b:0f:de:09:c4:e5:f6:f7:18:b2:23:76:37:e4: e6:5e:cd:b8:a8:84:97:50:46:4c:52:ee:c0:06:2f:5b:6e:bb: aa:c3:53:66:9d:56:e3:ca:cc:95:fb:89:f6:5c:7a:f7:52:36: 02:55:45:99:79:b3:12:61:db:f1:db:5a:2e:c8:12:8f:73:b3: 6e:59:9d:ca:3c:3d:63:af:71:88:ab:2f:71:8b:95:36:d4:7a: 43:d9:0a:f3:6d:e2:f9:25:e7:9f:61:3b:05:a6:4c:49:e0:52: 99:48:ef:45:32:45:72:06:30:1c:93:66:30:9e:9c:75:a4:b9: 54:0d:56:b6:b5:79:a0:a6:1f:b5:22:5b:8b:e8:2e:ff:e2:2b: 80:83:4d:a9:94:a0:a9:4a:13:7b:45:13:72:ba:83:ae:c2:f9: 2c:8b:43:63:05:4b:6c:94:da:cc:70:03:70:75:bd:9e:14:eb: 0c:a2:34:71:ac:c6:29:b4:d4:6c:89:e6:4b:70:35:11:2e:7b: f9:58:89:8a:42:a3:b1:99:0c:d5:43:be:02:94:ce:41:9d:fb: 51:50:3a:de:54:a6:89:74:fe:0c:4f:ab:5f:68:d0:c5:69:6f: 00:65:5a:35:78:5a:07:d2:d7:a9:01:d2:96:7f:98:11:65:cb: 5c:36:5f:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLfFdnqgaSLhC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzODY2ZWItNjM2Mi00NjU3LWFhNjYtODMzMDcyNThk OTQ1MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk OGMwOWZlZjItNDI2MC00MWQ5LWIwYjItMmUzNjYzZjlkZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a3zLlQwiaUFxsGpjwYNHHSUUepvyungsQPR 5ysQtO3fAKvmFGd5lPRhjOaLLJMcMjYXDvnIYSautT4uaCGUV0W7fdG9xRIZnRPJ 58uwlEPg9H8+ou2H2uOHYutKNgN5sWKX+H8kpyEJ+g4gWtoCcgbDGNUzoayF60bN xs1mvdb+tx1rHTQvAm0CDoxJmK5zJk2iLbYLoNigDzldBifEFlLRZllOLCjNMMj2 tFtRKs9nHMTXlb7tgN6mqiCfnLSEiIew+Tor11rTY744NT+Jm97MVjyvXRlvsJzl Pr+w4b7MY2RoVs8gKAh3LNA9hQHJCxXjvcD1Px0ZZoLIN5zmDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF66RuO71/sV444nX5UoAGuoiXi+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4 NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMwNzI1OGQ5NDUvMzkyNWVlMjEtNTU3Zi0z MGY5LTk0Y2YtMDhlMzI0MDU5NWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDAzODY2ZWItNjM2Mi00NjU3LWFh NjYtODMzMDcyNThkOTQ1L2QwMzg2NmViLTYzNjItNDY1Ny1hYTY2LTgzMzA3MjU4 ZDk0NS5jcmwwHwYDVR0jBBgwFoAUZWeWnFr3KGxcJOJP6Iqydn60KRcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMw NzI1OGQ5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGVHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoq8+VLD94JxOX29xiyI3Y35OZezbiohJdQRkxS7sAGL1tuu6rDU2ad VuPKzJX7ifZcevdSNgJVRZl5sxJh2/HbWi7IEo9zs25Znco8PWOvcYirL3GLlTbU ekPZCvNt4vkl559hOwWmTEngUplI70UyRXIGMByTZjCenHWkuVQNVra1eaCmH7Ui W4voLv/iK4CDTamUoKlKE3tFE3K6g67C+SyLQ2MFS2yU2sxwA3B1vZ4U6wyiNHGs xim01GyJ5ktwNREue/lYiYpCo7GZDNVDvgKUzkGd+1FQOt5Upol0/gxPq19o0MVp bwBlWjV4WgfS16kB0pZ/mBFly1w2X8Q= -----END CERTIFICATE-----Generated at Sat Sep 5 03:05:01 2026 by rpki-client