$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/150f1c0d-8c6a-3174-b80a-989042bf9d6a.roa File: 150f1c0d-8c6a-3174-b80a-989042bf9d6a.roa (raw, json) Hash identifier: DgcIrTFQDSZZwJVQxALiyVa6/HtejuJpN75SzSVgDEc= Subject key identifier: 98:75:13:F5:7A:64:CC:58:84:61:AE:59:1C:99:B2:A2:E4:91:A6:35 Certificate issuer: /CN=d3237408-0888-4b1f-bed5-a45886656401 Certificate serial: 010D0C9F4328584F0C078844B710A741E42D7A60 Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/150f1c0d-8c6a-3174-b80a-989042bf9d6a.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 399892 IP address blocks: 170.39.172.0/22 maxlen: 24 216.73.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:88:44:b7:10:a7:41:e4:2d:7a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=356e7b15-d2ca-4baa-a934-7cc2d9e89076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:75:4a:76:9b:fb:b3:76:4e:73:10:a0:5e: 4b:cf:2d:6a:23:50:4c:08:49:0c:4f:06:eb:ec:e5: 9b:91:07:1b:2e:b2:56:b5:84:04:5d:1b:85:09:d7: 3b:2b:ee:ae:dd:8d:1b:c7:87:28:fa:68:a5:c0:f4: a6:b1:e4:d7:c9:a1:5b:c7:ea:29:4e:92:13:53:d6: 12:39:1b:09:c7:32:26:9d:6a:d4:cd:2e:cf:20:00: 4a:7b:76:4d:fb:a7:3e:fa:87:ca:57:1c:89:f6:5c: 45:b3:04:64:94:00:46:02:d0:6c:65:6a:f7:0b:d0: 28:f4:6d:72:4a:38:9a:75:e5:6b:81:a6:76:40:77: ee:bd:7d:3e:35:57:2f:f0:2f:31:c0:80:48:5a:eb: ea:66:62:16:1d:53:59:66:ce:91:08:5b:87:ab:c9: b3:40:31:e6:2f:99:f8:0d:8d:cc:87:54:92:fb:b6: ad:32:4a:a6:a5:e6:4b:8c:f6:60:80:dd:06:c3:2e: 38:05:78:c2:79:f9:63:85:09:82:b5:1c:9a:d4:52: e0:66:23:ff:46:b5:94:7a:9c:d2:43:2c:b7:ee:75: d2:23:04:3a:27:53:ca:ef:19:ae:98:8b:a4:ac:eb: ff:6b:57:4e:d5:e0:0f:8d:73:6a:0f:57:03:bb:88: 24:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:75:13:F5:7A:64:CC:58:84:61:AE:59:1C:99:B2:A2:E4:91:A6:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/150f1c0d-8c6a-3174-b80a-989042bf9d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl X509v3 Authority Key Identifier: keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer sbgp-ipAddrBlock: critical IPv4: 170.39.172.0/22 216.73.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d3:7b:ab:91:89:80:a3:e0:80:ca:0d:5b:59:fe:07:a7:97: fc:7e:7c:b2:8b:35:f9:b4:65:b6:57:6a:9b:6a:9c:c7:e4:2f: de:53:1a:94:2a:42:9c:35:a0:ef:b9:26:f4:e8:23:d8:f6:c8: 19:d8:d8:02:e6:b4:05:be:cd:a3:eb:96:a9:24:7e:1b:5b:8a: 75:7b:8e:94:79:59:06:c4:df:b1:b9:c5:56:91:84:66:24:35: c3:b3:2b:88:88:91:51:77:cf:a1:35:59:e7:db:11:82:d0:5a: 50:0c:18:b2:1c:aa:4a:a7:40:d6:38:ae:26:9c:96:af:5c:dd: 99:49:1e:da:56:34:c0:93:3d:a3:05:1a:cf:0f:ff:04:74:61: 2e:5d:96:db:08:20:76:82:49:f0:84:f8:3a:89:8b:f0:5c:7b: 0f:61:f2:8b:b8:ee:9d:72:b2:eb:15:27:2c:94:ea:61:3e:f7: bc:0f:1c:64:3c:ad:b4:3e:63:74:4a:ac:24:57:26:93:dc:24: 4e:33:a7:71:e1:c4:7c:4e:9c:8c:01:6a:9b:b4:bf:fb:f3:4f: 0b:5d:b5:36:f9:13:17:ca:a4:1b:8c:66:e9:91:e6:2b:58:2d: 7b:c7:5c:0b:99:e5:bb:0c:f3:2e:15:a2:2c:d8:8b:ea:26:8a: 2a:ab:a3:13 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8MB4hEtxCnQeQtemAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMyMzc0MDgtMDg4OC00YjFmLWJlZDUtYTQ1ODg2NjU2 NDAxMB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk MzU2ZTdiMTUtZDJjYS00YmFhLWE5MzQtN2NjMmQ5ZTg5MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3B1Snab+7N2TnMQoF5Lzy1qI1BMCEkMTwbr 7OWbkQcbLrJWtYQEXRuFCdc7K+6u3Y0bx4co+milwPSmseTXyaFbx+opTpITU9YS ORsJxzImnWrUzS7PIABKe3ZN+6c++ofKVxyJ9lxFswRklABGAtBsZWr3C9Ao9G1y SjiadeVrgaZ2QHfuvX0+NVcv8C8xwIBIWuvqZmIWHVNZZs6RCFuHq8mzQDHmL5n4 DY3Mh1SS+7atMkqmpeZLjPZggN0Gwy44BXjCefljhQmCtRya1FLgZiP/RrWUepzS Qyy37nXSIwQ6J1PK7xmumIukrOv/a1dO1eAPjXNqD1cDu4gk0QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJh1E/V6ZMxYhGGuWRyZsqLkkaY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzIz NzQwOC0wODg4LTRiMWYtYmVkNS1hNDU4ODY2NTY0MDEvMTUwZjFjMGQtOGM2YS0z MTc0LWI4MGEtOTg5MDQyYmY5ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDMyMzc0MDgtMDg4OC00YjFmLWJl ZDUtYTQ1ODg2NjU2NDAxL2QzMjM3NDA4LTA4ODgtNGIxZi1iZWQ1LWE0NTg4NjY1 NjQwMS5jcmwwHwYDVR0jBBgwFoAU6NdV2XoY+vnTrgS31DEuvEX9JEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMzIzNzQwOC0wODg4LTRiMWYtYmVkNS1hNDU4 ODY2NTY0MDEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCqiesAwQC 2EmYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFXTe6uRiYCj4IDKDVtZ/genl/x+fLKLNfm0ZbZXaptqnMfk L95TGpQqQpw1oO+5JvToI9j2yBnY2ALmtAW+zaPrlqkkfhtbinV7jpR5WQbE37G5 xVaRhGYkNcOzK4iIkVF3z6E1WefbEYLQWlAMGLIcqkqnQNY4riaclq9c3ZlJHtpW NMCTPaMFGs8P/wR0YS5dltsIIHaCSfCE+DqJi/Bcew9h8ou47p1ysusVJyyU6mE+ 97wPHGQ8rbQ+Y3RKrCRXJpPcJE4zp3HhxHxOnIwBapu0v/vzTwtdtTb5ExfKpBuM ZumR5itYLXvHXAuZ5bsM8y4VoizYi+omiiqroxM= -----END CERTIFICATE-----Generated at Thu Oct 8 16:49:43 2026 by rpki-client