$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa File: 9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa (raw, json) Hash identifier: Km8Tb+2AhU2SCPwgCNzrnO82Knr2j4ss7+e9d3mqOLQ= Subject key identifier: 10:B4:75:05:72:58:81:0C:65:9A:60:FB:23:F4:41:59:14:51:49:2C Certificate issuer: /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Certificate serial: 010D0C9F4328584EE0C1F3097723577E9AB51E80 Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 11550 IP address blocks: 173.243.176.0/20 maxlen: 24 199.96.120.0/22 maxlen: 24 204.89.253.0/24 maxlen: 24 216.249.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c1:f3:09:77:23:57:7e:9a:b5:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=830cf883-93a1-418b-9fc8-c5701f536080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3c:74:da:99:06:24:d7:0e:49:3e:8b:5a:89: 75:6c:07:6c:f6:bc:8e:8d:a7:fb:0c:24:a7:1b:e0: c2:d9:a3:cc:d7:76:ce:c9:5a:29:11:57:5f:be:98: fc:ef:89:21:77:c6:10:46:3e:06:17:6a:97:b4:70: 0e:2b:61:08:55:ba:73:c8:cb:c7:f0:8a:c4:8e:40: 3e:e4:38:f3:a3:24:72:30:1c:5b:f8:aa:89:92:9f: 54:51:16:a6:06:13:f6:82:1b:f2:1b:bd:85:35:24: 3b:fd:b1:04:53:44:58:c8:18:d8:9b:ec:cf:16:c7: ab:a6:f8:8b:3c:b1:8a:36:6a:d8:6a:56:34:09:29: 83:17:09:c0:91:82:a6:19:bb:c8:ef:67:68:72:b8: 27:d2:91:a4:03:3d:dc:0e:f2:bf:c7:8a:15:fb:7b: 59:e4:08:7b:aa:d5:de:ad:35:d4:17:d2:ee:69:f5: ac:22:5e:a6:03:d7:a0:58:19:ed:b2:4d:e1:75:92: 35:33:42:c4:86:22:6c:19:e2:57:fe:cc:52:6e:c3: 45:5e:20:30:3d:ee:bd:52:3a:cd:94:f8:f6:14:3f: 5e:3b:ab:7a:10:61:81:6e:a1:d9:08:87:ae:41:09: b9:ca:69:8e:82:56:3e:b0:84:11:4b:1d:20:fa:38: 8a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B4:75:05:72:58:81:0C:65:9A:60:FB:23:F4:41:59:14:51:49:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl X509v3 Authority Key Identifier: keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer sbgp-ipAddrBlock: critical IPv4: 173.243.176.0/20 199.96.120.0/22 204.89.253.0/24 216.249.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c5:4e:36:50:ec:2a:f8:28:30:67:03:7e:41:a6:23:46:25: 80:3f:48:b2:e0:ad:4d:f4:9e:8f:4b:bf:61:4a:45:ad:04:36: b3:36:df:df:ef:4d:d2:93:83:7a:b0:b2:48:8e:ef:75:99:34: 26:38:88:45:50:c8:0d:b9:91:98:9f:0c:57:8f:31:d6:69:50: 8f:35:40:9c:d4:a2:87:3f:38:7d:fc:d7:53:90:37:47:28:2a: 1a:b6:1b:a0:e4:03:d5:26:30:dd:56:bd:d7:ce:08:f8:d2:c1: d8:4a:ca:bc:09:e6:3e:2e:37:41:85:77:db:12:44:88:22:8f: 4b:14:e9:f0:56:2f:4c:ec:28:40:2a:9e:5c:cb:db:c4:50:06: 78:13:4c:78:c1:89:ff:25:52:b6:41:31:d1:f5:0c:b7:e7:91: e9:40:0f:db:1b:c4:97:e9:16:1b:21:5b:03:44:af:20:5b:e4: ef:ca:09:a9:32:9e:01:a4:d4:dd:5e:b3:5c:ec:b8:b9:b4:87: ca:e2:ab:2b:0c:87:77:44:51:fe:5e:28:7a:ad:a6:e2:c9:76: 69:9c:b0:91:28:c7:67:b1:5a:c8:cc:68:aa:ce:4a:01:67:6c: ac:4d:bb:5d:db:6a:d2:43:77:6d:16:0c:cf:36:04:7d:d0:0d: 4d:1c:38:1e -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE7gwfMJdyNXfpq1HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VhYmE4MzAtMGYxNS00YzM2LTk5YjAtMGMxNGJmN2Vi ZjllMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk ODMwY2Y4ODMtOTNhMS00MThiLTlmYzgtYzU3MDFmNTM2MDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDx02pkGJNcOST6LWol1bAds9ryOjaf7DCSn G+DC2aPM13bOyVopEVdfvpj874khd8YQRj4GF2qXtHAOK2EIVbpzyMvH8IrEjkA+ 5DjzoyRyMBxb+KqJkp9UURamBhP2ghvyG72FNSQ7/bEEU0RYyBjYm+zPFserpviL PLGKNmrYalY0CSmDFwnAkYKmGbvI72docrgn0pGkAz3cDvK/x4oV+3tZ5Ah7qtXe rTXUF9LuafWsIl6mA9egWBntsk3hdZI1M0LEhiJsGeJX/sxSbsNFXiAwPe69UjrN lPj2FD9eO6t6EGGBbqHZCIeuQQm5ymmOglY+sIQRSx0g+jiKvQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFBC0dQVyWIEMZZpg+yP0QVkUUUksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFi YTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0YmY3ZWJmOWUvOWRhYjJmZjQtNmU0Ny0z ZTEyLTlhOTYtNGNkNzBiNGU4ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2VhYmE4MzAtMGYxNS00YzM2LTk5 YjAtMGMxNGJmN2ViZjllLzNlYWJhODMwLTBmMTUtNGMzNi05OWIwLTBjMTRiZjdl YmY5ZS5jcmwwHwYDVR0jBBgwFoAUtkIn1zQmnRVMSxbhUm+PwQP6MTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFiYTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0 YmY3ZWJmOWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQErfOwAwQC x2B4AwQAzFn9AwQF2PlAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABnFTjZQ7Cr4KDBnA35BpiNGJYA/SLLg rU30no9Lv2FKRa0ENrM239/vTdKTg3qwskiO73WZNCY4iEVQyA25kZifDFePMdZp UI81QJzUooc/OH3811OQN0coKhq2G6DkA9UmMN1WvdfOCPjSwdhKyrwJ5j4uN0GF d9sSRIgij0sU6fBWL0zsKEAqnlzL28RQBngTTHjBif8lUrZBMdH1DLfnkelAD9sb xJfpFhshWwNEryBb5O/KCakyngGk1N1es1zsuLm0h8riqysMh3dEUf5eKHqtpuLJ dmmcsJEox2exWsjMaKrOSgFnbKxNu13batJDd20WDM82BH3QDU0cOB4= -----END CERTIFICATE-----Generated at Fri Sep 11 15:12:58 2026 by rpki-client