$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa File: 3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa (raw, json) Hash identifier: M9ioNd/v4NMkDTqBq/FIiW7nLXUcAxOWzHvl03ncv0Y= Subject key identifier: 7B:EB:D1:C4:4F:37:F5:18:2A:B3:4D:82:CC:96:4A:60:5D:33:0B:96 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584F1467A53A1547378F9E9D4060 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 7181 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a5:3a:15:47:37:8f:9e:9d:40:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=dbf9f4f7-b63b-486a-a49e-2c0c80a88a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:a3:25:64:5e:5a:98:c1:64:c1:b2:75:7c: 22:32:58:c8:a1:6f:ea:84:7a:3e:61:3f:a0:f2:8b: 12:ef:b3:fc:89:a0:05:e3:99:13:91:1f:ba:b9:47: 28:02:04:d3:9f:c9:f0:15:7b:01:f5:3e:44:cd:5e: f5:80:bd:cb:38:d1:2a:a0:12:bc:fc:b2:21:6a:06: 37:4f:3e:d2:c1:16:97:4d:f1:bb:00:95:89:d1:47: b2:16:53:f0:73:83:75:2d:dd:d0:4a:18:77:31:f1: 67:39:e4:4d:8e:7a:dd:ca:d8:98:f2:0f:7c:63:4e: e7:2d:14:bf:c8:41:60:aa:ec:5b:c2:52:7c:40:4e: 27:78:48:38:d2:21:b2:43:98:c6:8b:95:e8:42:13: a0:53:05:12:d4:ee:fe:63:94:90:63:22:2a:63:b1: 90:92:bd:ef:72:e8:f7:90:12:d8:b1:d7:70:2a:3d: dd:68:11:ff:5a:72:44:b0:79:d0:66:ea:03:24:6c: 3e:f4:85:18:a6:4e:92:f3:82:28:c3:b2:a7:4c:59: fd:f7:d9:a4:88:67:24:bc:48:d0:ab:a8:c3:1c:00: ef:d9:e0:55:90:85:a2:0b:fb:2c:b5:d7:5e:01:d4: 21:a1:a7:f9:3a:37:76:77:e8:10:69:31:31:a7:22: 09:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EB:D1:C4:4F:37:F5:18:2A:B3:4D:82:CC:96:4A:60:5D:33:0B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:47:33:09:b8:77:e7:70:6e:81:a4:c9:4e:2c:c8:ab:c4:d0: e4:8e:9f:ca:55:c5:b4:8a:6e:2b:c5:69:62:93:a7:f2:c4:cc: 43:f2:28:52:79:ac:bb:6c:9e:54:a6:8d:b2:92:0c:34:e0:21: 41:69:e4:18:ca:43:dd:14:d6:d6:59:ac:69:3b:1f:81:dd:61: 99:04:ae:2f:a9:28:cc:0a:2a:85:18:60:e4:c9:d4:5d:9c:d3: 98:9c:b7:18:db:c4:dd:45:91:cb:c8:fe:93:3e:52:e1:16:95: d4:9e:0c:93:93:76:0c:d6:90:11:c9:63:88:53:3b:ec:3f:cc: 4a:17:b8:65:a4:5c:2a:5c:86:ce:bc:dd:dd:46:b8:ce:61:ee: 99:90:43:e4:15:ed:95:fe:b7:33:1a:af:c5:32:fe:51:0c:c2: eb:1b:96:b8:79:7c:ec:80:a5:f3:9b:54:af:99:98:5d:23:4b: 50:9b:ab:e6:b5:08:90:9c:a8:31:eb:fb:dd:27:85:9e:f5:8f: 56:6d:d2:5c:46:4b:29:45:cd:5f:d9:ef:e0:26:19:0e:12:be: 21:c2:e5:8d:4d:7f:74:c3:49:ed:21:ec:b3:91:1b:42:91:18: 00:af:cb:14:fa:98:8e:e2:24:71:0b:7c:47:3d:f3:59:77:17: a3:8b:cc:20 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE8UZ6U6FUc3j56dQGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZGJmOWY0ZjctYjYzYi00ODZhLWE0OWUtMmMwYzgwYTg4YTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySqjJWReWpjBZMGydXwiMljIoW/qhHo+YT+g 8osS77P8iaAF45kTkR+6uUcoAgTTn8nwFXsB9T5EzV71gL3LONEqoBK8/LIhagY3 Tz7SwRaXTfG7AJWJ0UeyFlPwc4N1Ld3QShh3MfFnOeRNjnrdytiY8g98Y07nLRS/ yEFgquxbwlJ8QE4neEg40iGyQ5jGi5XoQhOgUwUS1O7+Y5SQYyIqY7GQkr3vcuj3 kBLYsddwKj3daBH/WnJEsHnQZuoDJGw+9IUYpk6S84Iow7KnTFn999mkiGckvEjQ q6jDHADv2eBVkIWiC/sstddeAdQhoaf5Ojd2d+gQaTExpyIJrwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFHvr0cRPN/UYKrNNgsyWSmBdMwuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvM2RjM2U5YjUtOTg1My0z ZjVmLWIyYjYtMWVlYmVkMmI2ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANUczCbh353BugaTJTizIq8TQ5I6f ylXFtIpuK8VpYpOn8sTMQ/IoUnmsu2yeVKaNspIMNOAhQWnkGMpD3RTW1lmsaTsf gd1hmQSuL6kozAoqhRhg5MnUXZzTmJy3GNvE3UWRy8j+kz5S4RaV1J4Mk5N2DNaQ EcljiFM77D/MShe4ZaRcKlyGzrzd3Ua4zmHumZBD5BXtlf63MxqvxTL+UQzC6xuW uHl87ICl85tUr5mYXSNLUJur5rUIkJyoMev73SeFnvWPVm3SXEZLKUXNX9nv4CYZ DhK+IcLljU1/dMNJ7SHss5EbQpEYAK/LFPqYjuIkcQt8Rz3zWXcXo4vMIA== -----END CERTIFICATE-----Generated at Mon Sep 21 17:43:30 2026 by rpki-client