$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dacc3826-a49a-31ce-8af8-aff620dec6e2.roa File: dacc3826-a49a-31ce-8af8-aff620dec6e2.roa (raw, json) Hash identifier: ShrkDO79HXc3lLiRqM+Auh2DRRjwkFoVzoyc/4GGumY= Subject key identifier: 11:92:CE:11:68:BE:AA:78:F3:77:72:31:76:F2:05:0D:3E:4D:66:94 Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584F3E47E9932CE411ABDD84BE00 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dacc3826-a49a-31ce-8af8-aff620dec6e2.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 12119 IP address blocks: 140.177.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e9:93:2c:e4:11:ab:dd:84:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=37e8bc28-2dde-4ccf-9587-c255fdcee208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:26:89:bb:65:7f:1c:6c:55:ae:64:25:61:a4: 5e:1b:b6:88:b0:04:9c:3e:b6:c3:7c:4e:da:74:34: 53:b4:b0:80:a9:c7:20:ca:4f:4b:1d:b0:f2:41:9c: a2:51:73:b2:4d:23:ce:7d:cf:c5:56:ce:83:9b:19: b9:78:23:cc:d7:b6:b6:f3:68:83:05:18:8e:75:eb: 30:85:a6:0a:eb:63:1e:ad:81:d4:ad:25:5a:f9:64: d7:d6:57:4d:ac:ba:50:29:9e:55:3b:2c:96:b7:b9: e9:fd:40:ae:4e:3a:94:20:5c:ce:e8:94:dc:74:83: 4b:fe:96:fb:26:b6:0e:cf:42:29:08:08:51:67:37: ba:8e:9b:84:ac:19:0e:85:cf:7e:ca:c9:fb:1e:db: 96:a0:32:ce:e6:c8:f2:ed:47:49:94:27:43:dc:c1: 9f:86:87:03:a2:b0:8d:6e:53:45:47:0b:fd:a8:e6: 7f:57:4c:1f:be:7a:e4:31:fc:05:0c:42:85:51:92: 65:9e:4b:a6:c1:5f:bd:c3:09:f6:3f:89:d1:67:00: 6b:eb:77:e8:ea:ad:09:c8:84:64:da:14:ca:7c:11: f0:6b:8d:92:8b:e0:b8:a5:53:90:b5:e9:41:56:06: bb:82:ef:66:8a:ff:16:fd:99:af:a6:fc:87:79:9b: ec:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:92:CE:11:68:BE:AA:78:F3:77:72:31:76:F2:05:0D:3E:4D:66:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/dacc3826-a49a-31ce-8af8-aff620dec6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 140.177.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:11:5e:67:8a:3b:95:14:c7:b9:c9:d6:d0:96:b8:2f:8d:c9: 8a:17:d0:ca:19:24:d6:06:6a:36:79:58:e4:25:06:4e:28:18: 08:93:e3:33:b8:ea:a4:3d:9e:2b:08:c6:c9:ad:9a:08:2b:b2: 6e:8d:c8:a0:14:6c:1e:a2:3c:b1:1f:05:dc:53:43:ba:c9:b8: 71:be:45:95:f7:57:b4:1e:72:2c:32:55:64:2b:41:29:6d:35: 61:d8:0e:6c:eb:c8:23:92:0d:3a:ce:bf:e8:66:3e:0b:c7:8b: 4f:4d:a8:3c:5e:de:21:25:37:75:12:26:2a:6a:67:71:8c:0b: 89:2b:4e:77:de:c9:b6:a3:af:e5:15:fe:77:b8:bc:e8:39:b5: 3a:d0:f2:7e:bb:23:80:f7:96:3d:ce:60:10:d3:ed:ac:f1:9b: 08:7a:6d:0a:db:d4:86:6c:95:1c:3a:b8:da:f9:67:3d:72:00: ae:6c:c7:ab:9e:72:9d:95:38:97:20:6d:94:c9:69:ba:fb:00: 8a:e1:9c:68:c9:91:77:2f:f5:35:fb:23:d0:06:14:38:35:b3: 51:f1:69:77:dc:c2:f5:d0:03:62:6b:1a:12:a8:31:1f:7f:1e: b0:f9:11:5a:c6:1b:19:7f:d1:61:fd:83:2f:65:cd:c0:cb:03: 92:81:2a:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+mTLOQRq92EvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MzdlOGJjMjgtMmRkZS00Y2NmLTk1ODctYzI1NWZkY2VlMjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyaJu2V/HGxVrmQlYaReG7aIsAScPrbDfE7a dDRTtLCAqccgyk9LHbDyQZyiUXOyTSPOfc/FVs6Dmxm5eCPM17a282iDBRiOdesw haYK62MerYHUrSVa+WTX1ldNrLpQKZ5VOyyWt7np/UCuTjqUIFzO6JTcdINL/pb7 JrYOz0IpCAhRZze6jpuErBkOhc9+ysn7HtuWoDLO5sjy7UdJlCdD3MGfhocDorCN blNFRwv9qOZ/V0wfvnrkMfwFDEKFUZJlnkumwV+9wwn2P4nRZwBr63fo6q0JyIRk 2hTKfBHwa42Si+C4pVOQtelBVga7gu9miv8W/ZmvpvyHeZvsewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGSzhFovqp483dyMXbyBQ0+TWaUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvZGFjYzM4MjYtYTQ5YS0z MWNlLThhZjgtYWZmNjIwZGVjNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjLGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIRXmeKO5UUx7nJ1tCWuC+NyYoX0MoZJNYGajZ5WOQlBk4oGAiT4zO4 6qQ9nisIxsmtmggrsm6NyKAUbB6iPLEfBdxTQ7rJuHG+RZX3V7QeciwyVWQrQSlt NWHYDmzryCOSDTrOv+hmPgvHi09NqDxe3iElN3USJipqZ3GMC4krTnfeybajr+UV /ne4vOg5tTrQ8n67I4D3lj3OYBDT7azxmwh6bQrb1IZslRw6uNr5Zz1yAK5sx6ue cp2VOJcgbZTJabr7AIrhnGjJkXcv9TX7I9AGFDg1s1HxaXfcwvXQA2JrGhKoMR9/ HrD5EVrGGxl/0WH9gy9lzcDLA5KBKnM= -----END CERTIFICATE-----Generated at Mon Sep 28 09:45:21 2026 by rpki-client