$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa File: cafde11a-c375-36a5-a218-aad0aa1a246b.roa (raw, json) Hash identifier: Aqn9/Soy6gDi7WKZPzfV8EDkoRjYiso2Tl+oBvBNCew= Subject key identifier: 34:47:91:9D:43:A3:7F:C1:3F:0C:72:4F:4C:C6:9C:FF:F0:F5:54:F4 Certificate issuer: /CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6 Certificate serial: 010D0C9F4328584EA5AA6B5E4B9071582330D000 Authority key identifier: 16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 14618 IP address blocks: 135.109.194.0/24 maxlen: 24 135.109.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:6b:5e:4b:90:71:58:23:30:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=3edb2b64-14c8-4d26-aab6-c18cd6b2b844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:04:d8:2e:fa:64:41:19:4b:e8:58:cd:99:75: 59:13:c5:7e:2d:76:b7:19:f2:17:63:20:32:4b:d3: a4:e6:26:c5:c8:df:eb:08:ab:e4:fd:16:f2:4c:b5: a0:6d:3c:76:7e:75:23:ef:d9:d4:d9:ce:ad:ba:22: f7:4c:8d:75:01:76:51:c9:a7:8a:7f:4a:b8:6c:53: f7:11:57:01:ba:36:01:9a:7c:09:95:53:45:47:3b: 72:c8:4d:db:f3:fe:bb:d2:79:88:2c:54:4d:27:e8: 0b:9c:8e:66:85:5e:05:34:a9:f1:1c:e1:87:bd:82: 05:88:5c:37:d6:3d:ed:a4:ba:6a:fa:ce:bf:7c:5a: c6:e1:39:e1:83:b4:bf:a0:3c:70:17:2b:8a:d0:b8: 44:39:37:a6:fb:60:dc:8a:99:02:94:c9:4c:2a:96: dd:02:c4:fb:bf:6a:4a:1a:1d:75:58:58:42:a5:fc: 88:fd:4c:a9:6e:9d:db:43:f9:b9:89:f0:62:6d:ab: 1c:17:d0:7c:9d:fe:54:86:e5:37:63:f4:03:c2:1e: 74:41:da:8f:a4:fd:e0:5f:30:f5:7a:fb:23:11:54: 9c:9b:ef:02:0b:e5:a2:14:6f:0d:95:58:85:95:20: dc:fd:b0:0e:82:ac:a2:23:e4:76:b6:ab:07:46:c6: a9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:47:91:9D:43:A3:7F:C1:3F:0C:72:4F:4C:C6:9C:FF:F0:F5:54:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/cafde11a-c375-36a5-a218-aad0aa1a246b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl X509v3 Authority Key Identifier: keyid:16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer sbgp-ipAddrBlock: critical IPv4: 135.109.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:10:eb:48:d1:d1:07:d6:92:b9:cd:b1:a3:1c:07:db:e6:c3: 03:f3:d7:27:f8:aa:80:b4:18:1b:2c:e2:99:be:28:92:d1:6a: e0:cb:4f:35:cf:0a:5e:0c:d5:c6:a1:b2:d2:d1:76:a8:b3:85: 1e:43:ea:6b:15:38:ae:b7:d5:8e:89:28:2f:2d:c2:3e:32:53: 38:45:d3:23:cb:88:77:85:36:de:a7:69:48:da:3f:ad:33:03: 99:c2:9b:6f:99:5d:44:51:91:40:9e:c9:b6:f9:49:bc:cc:90: df:61:47:20:91:45:db:d2:c1:92:52:07:67:45:41:71:fd:c6: be:f1:15:e1:7b:99:de:bf:ca:69:ba:bc:45:6b:9a:aa:41:28: 88:e5:49:58:14:89:4b:7d:c2:11:b3:96:6a:4a:43:3f:aa:84: 3a:b8:43:d0:b1:a7:a0:49:98:5a:27:36:90:fa:cf:a2:86:1b: ea:d6:d8:c5:db:39:62:42:d1:38:39:bd:37:74:be:87:15:62: 3c:a1:69:0c:81:0d:12:3e:f4:1d:ff:c3:ce:b7:0c:28:80:a4: b8:fc:33:9a:35:0c:ea:2a:75:4b:94:10:a1:ef:53:c9:82:0a: 3f:42:38:21:20:89:0c:67:34:1c:b0:7b:d5:40:14:c1:4e:a1: c4:af:42:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqmteS5BxWCMw0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMzYzc0MzMtNmQ1ZC00ZjdjLWIyZWYtOThjY2IxZDEw OGQ2MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk M2VkYjJiNjQtMTRjOC00ZDI2LWFhYjYtYzE4Y2Q2YjJiODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQTYLvpkQRlL6FjNmXVZE8V+LXa3GfIXYyAy S9Ok5ibFyN/rCKvk/RbyTLWgbTx2fnUj79nU2c6tuiL3TI11AXZRyaeKf0q4bFP3 EVcBujYBmnwJlVNFRztyyE3b8/670nmILFRNJ+gLnI5mhV4FNKnxHOGHvYIFiFw3 1j3tpLpq+s6/fFrG4Tnhg7S/oDxwFyuK0LhEOTem+2DcipkClMlMKpbdAsT7v2pK Gh11WFhCpfyI/Uypbp3bQ/m5ifBibascF9B8nf5UhuU3Y/QDwh50QdqPpP3gXzD1 evsjEVScm+8CC+WiFG8NlViFlSDc/bAOgqyiI+R2tqsHRsapsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRHkZ1Do3/BPwxyT0zGnP/w9VT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNj NzQzMy02ZDVkLTRmN2MtYjJlZi05OGNjYjFkMTA4ZDYvY2FmZGUxMWEtYzM3NS0z NmE1LWEyMTgtYWFkMGFhMWEyNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTMzYzc0MzMtNmQ1ZC00ZjdjLWIy ZWYtOThjY2IxZDEwOGQ2L2UzM2M3NDMzLTZkNWQtNGY3Yy1iMmVmLTk4Y2NiMWQx MDhkNi5jcmwwHwYDVR0jBBgwFoAUFlvmbqkKMt6CtBNVP7s4vgT3Z9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNjNzQzMy02ZDVkLTRmN2MtYjJlZi05OGNj YjFkMTA4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh23CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkQ60jR0QfWkrnNsaMcB9vmwwPz1yf4qoC0GBss4pm+KJLRauDLTzXP Cl4M1cahstLRdqizhR5D6msVOK631Y6JKC8twj4yUzhF0yPLiHeFNt6naUjaP60z A5nCm2+ZXURRkUCeybb5SbzMkN9hRyCRRdvSwZJSB2dFQXH9xr7xFeF7md6/ymm6 vEVrmqpBKIjlSVgUiUt9whGzlmpKQz+qhDq4Q9Cxp6BJmFonNpD6z6KGG+rW2MXb OWJC0Tg5vTd0vocVYjyhaQyBDRI+9B3/w863DCiApLj8M5o1DOoqdUuUEKHvU8mC Cj9COCEgiQxnNBywe9VAFMFOocSvQuQ= -----END CERTIFICATE-----Generated at Tue Jul 28 21:45:13 2026 by rpki-client