$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c/904a5c33-a5ce-3c81-9cb6-7acbe85a6105.roa File: 904a5c33-a5ce-3c81-9cb6-7acbe85a6105.roa (raw, json) Hash identifier: 0+4FDcM2j/1KfY0cHI3F1DPvl6mUqZ+6ugZ83xTq9Ww= Subject key identifier: 88:C4:0B:42:CA:29:B4:F3:62:55:F2:47:CC:D2:3F:21:AB:6D:1C:05 Certificate issuer: /CN=138c0ded-cfd2-4f72-990a-14e5d333a61c Certificate serial: 010D0C9F4328584F0D6CFEFE50B9E561F1A03780 Authority key identifier: 8B:ED:E4:4F:0D:1A:DE:B3:F6:3C:0D:68:53:FE:D1:80:08:78:EC:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c/904a5c33-a5ce-3c81-9cb6-7acbe85a6105.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 55201 IP address blocks: 169.128.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c/138c0ded-cfd2-4f72-990a-14e5d333a61c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c/138c0ded-cfd2-4f72-990a-14e5d333a61c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:fe:fe:50:b9:e5:61:f1:a0:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=138c0ded-cfd2-4f72-990a-14e5d333a61c Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=e89ca5f9-5dc0-4ea0-9e53-58be7afdff31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b0:1a:33:76:d5:3d:be:ab:4b:9b:1c:1a:30: 84:9f:ea:97:93:83:c6:95:1c:74:a1:0d:cf:86:ea: fc:5b:c8:a8:d2:f7:c1:db:cb:ce:ca:a7:36:2f:8a: 8e:2c:d0:37:e4:93:c9:df:86:8d:48:e4:55:4f:7d: 40:fc:2f:ca:63:e9:02:cc:6c:f9:83:e3:01:25:9f: 96:7b:68:f7:dd:8c:7a:42:a7:92:74:c6:6c:49:0b: b8:f1:7f:46:00:66:b3:5b:0b:e2:d8:d2:6c:45:a8: 5f:46:b1:29:4d:ce:3f:c9:c9:88:35:50:a3:da:3e: 2d:38:ae:19:b9:d8:bb:ca:a2:3c:86:92:74:9a:53: 97:69:5c:95:2c:ab:d5:4d:a3:37:fa:3a:55:b0:00: e7:64:4f:a3:ab:72:a7:38:ba:7b:a3:ec:cd:05:b0: 32:4a:0c:8c:3d:41:cc:2a:3a:86:7a:ee:02:66:ce: 4e:c6:d8:73:2b:25:1a:38:7f:ee:f1:54:e8:59:55: 1f:a7:df:19:5d:a6:4c:b2:a1:a1:0b:78:ba:8e:a4: 15:79:22:6e:a6:20:be:8c:bc:48:34:9e:37:40:03: 9c:40:d2:ef:f9:d0:ee:34:68:fd:00:3d:ab:ff:44: 36:89:ec:fb:df:b9:27:22:0e:2a:68:f6:f1:f9:35: 42:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C4:0B:42:CA:29:B4:F3:62:55:F2:47:CC:D2:3F:21:AB:6D:1C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c/904a5c33-a5ce-3c81-9cb6-7acbe85a6105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c/138c0ded-cfd2-4f72-990a-14e5d333a61c.crl X509v3 Authority Key Identifier: keyid:8B:ED:E4:4F:0D:1A:DE:B3:F6:3C:0D:68:53:FE:D1:80:08:78:EC:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/138c0ded-cfd2-4f72-990a-14e5d333a61c.cer sbgp-ipAddrBlock: critical IPv4: 169.128.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:df:14:88:48:08:90:19:80:64:1f:90:b2:24:2e:67:56:a6: 4b:a0:64:60:ab:5a:d7:7b:94:32:ed:8f:95:4d:5f:46:df:d4: 15:85:22:11:5d:c0:cb:8c:e8:df:35:ad:1f:7f:23:91:3e:10: 09:c8:bc:2e:d9:94:a7:83:86:c1:f3:98:41:4d:25:22:84:eb: d5:43:f7:e2:e9:99:2d:87:52:d0:17:31:e6:17:5d:2c:21:7e: c5:7b:6d:49:89:98:0f:7b:62:9c:b2:dd:cc:16:a0:ee:76:38: 0c:c7:05:94:f5:a7:44:1a:dc:1c:a1:1e:3c:23:5e:34:c9:ec: 78:ff:fe:f7:d1:d7:b9:25:b3:02:c8:41:86:73:e7:ca:66:08: 16:1d:11:1c:3b:5c:cc:49:7a:e1:61:c7:f2:23:a0:37:c9:70: 60:2a:dc:77:69:79:15:df:b3:69:c6:86:ff:a3:44:7a:73:ed: 1f:7b:48:57:9f:89:e7:87:02:b9:5f:de:c7:4d:ed:b1:78:39: 48:e9:30:56:7a:5b:2b:dc:0b:ce:47:8b:65:d2:d4:b3:50:dc: 60:15:9f:54:15:cb:1a:7f:e2:5a:a8:1f:ee:ad:e8:85:4b:0b: 1c:7b:40:c3:ad:70:49:a0:ec:b9:4b:60:e8:a0:17:07:8f:81: 12:aa:92:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbP7+ULnlYfGgN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4YzBkZWQtY2ZkMi00ZjcyLTk5MGEtMTRlNWQzMzNh NjFjMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZTg5Y2E1ZjktNWRjMC00ZWEwLTllNTMtNThiZTdhZmRmZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLAaM3bVPb6rS5scGjCEn+qXk4PGlRx0oQ3P hur8W8io0vfB28vOyqc2L4qOLNA35JPJ34aNSORVT31A/C/KY+kCzGz5g+MBJZ+W e2j33Yx6QqeSdMZsSQu48X9GAGazWwvi2NJsRahfRrEpTc4/ycmINVCj2j4tOK4Z udi7yqI8hpJ0mlOXaVyVLKvVTaM3+jpVsADnZE+jq3KnOLp7o+zNBbAySgyMPUHM KjqGeu4CZs5OxthzKyUaOH/u8VToWVUfp98ZXaZMsqGhC3i6jqQVeSJupiC+jLxI NJ43QAOcQNLv+dDuNGj9AD2r/0Q2iez737knIg4qaPbx+TVCOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjEC0LKKbTzYlXyR8zSPyGrbRwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xMzhj MGRlZC1jZmQyLTRmNzItOTkwYS0xNGU1ZDMzM2E2MWMvOTA0YTVjMzMtYTVjZS0z YzgxLTljYjYtN2FjYmU4NWE2MTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMTM4YzBkZWQtY2ZkMi00ZjcyLTk5 MGEtMTRlNWQzMzNhNjFjLzEzOGMwZGVkLWNmZDItNGY3Mi05OTBhLTE0ZTVkMzMz YTYxYy5jcmwwHwYDVR0jBBgwFoAUi+3kTw0a3rP2PA1oU/7RgAh47LAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xMzhjMGRlZC1jZmQyLTRmNzItOTkwYS0xNGU1 ZDMzM2E2MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqYDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPfFIhICJAZgGQfkLIkLmdWpkugZGCrWtd7lDLtj5VNX0bf1BWFIhFd wMuM6N81rR9/I5E+EAnIvC7ZlKeDhsHzmEFNJSKE69VD9+LpmS2HUtAXMeYXXSwh fsV7bUmJmA97Ypyy3cwWoO52OAzHBZT1p0Qa3ByhHjwjXjTJ7Hj//vfR17klswLI QYZz58pmCBYdERw7XMxJeuFhx/IjoDfJcGAq3HdpeRXfs2nGhv+jRHpz7R97SFef ieeHArlf3sdN7bF4OUjpMFZ6WyvcC85Hi2XS1LNQ3GAVn1QVyxp/4lqoH+6t6IVL Cxx7QMOtcEmg7LlLYOigFwePgRKqkk4= -----END CERTIFICATE-----Generated at Tue Sep 22 11:37:28 2026 by rpki-client