$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa File: 3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa (raw, json) Hash identifier: tGyDzJxQxty88unSWAX5F3cA2t1mXmbOiHwv2S7tgXk= Subject key identifier: 29:B4:A1:08:94:C8:96:31:5B:46:AE:15:BF:A2:2A:98:AB:78:ED:FF Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584FB6711D48DCBE80995E2C6160 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 7181 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:1d:48:dc:be:80:99:5e:2c:61:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=a6a0b2ae-ac9d-435f-8ee4-6b57570dbcc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f1:b6:04:76:ab:e7:f2:e7:5f:76:7f:e4:76: 6f:34:79:f7:31:1d:17:5a:13:27:26:d5:ac:0f:ba: 3c:e2:70:64:59:15:52:07:76:44:98:42:d8:29:07: c3:ca:1d:a9:0c:8b:e8:94:34:c6:af:65:21:ed:58: 25:d3:8f:da:5d:42:77:75:81:fc:aa:a5:9d:58:ff: 20:ae:e2:b6:09:0f:0e:3e:ba:e4:9b:d7:6b:85:c6: 38:c8:2a:89:d0:40:e8:97:5b:3b:2c:a7:c0:f8:0b: 3b:ed:f8:df:e3:f5:d6:d1:b1:6d:41:c5:32:c8:7a: b3:59:16:60:02:0b:a6:84:61:e7:98:3a:3a:40:9f: 8c:93:62:bb:a1:0a:43:05:ff:18:72:2d:fe:e4:91: f4:c4:7c:b4:3a:34:ae:44:ad:07:01:48:ee:62:77: a1:eb:19:49:02:8c:fd:60:7d:f3:6b:72:4a:71:e6: 1c:6d:aa:3a:68:3a:a0:02:c6:bb:b4:dd:87:8a:f4: cb:a3:a0:03:65:35:fb:ab:d7:c4:47:c4:77:ca:c1: 01:f8:99:f1:27:fc:de:1e:c9:0d:13:12:27:24:9a: 15:d2:02:83:bb:96:ab:f2:06:a7:94:30:34:4e:e7: 19:c7:21:15:fc:d9:23:b1:0c:4f:f4:db:c7:74:39: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B4:A1:08:94:C8:96:31:5B:46:AE:15:BF:A2:2A:98:AB:78:ED:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:bc:dd:f3:cc:47:df:ba:fd:b5:fb:2f:b1:97:a1:17:d2:63: 8f:d0:4a:cf:e6:26:53:e0:96:b3:42:d0:a4:af:15:e1:a0:62: 5d:c0:24:f5:09:10:6d:78:82:b2:c6:e6:fb:78:84:d1:a3:11: 77:4c:e6:ec:a9:19:7c:0a:4c:cf:34:16:9e:c5:d5:74:d9:ea: 05:e8:00:b0:bb:be:44:1c:4c:3d:07:00:e4:77:71:5c:ea:e1: 98:95:e9:28:80:bb:ef:c2:14:e6:3d:87:af:9c:cf:92:b5:4d: 24:52:3e:a2:bc:a7:32:32:23:cb:17:07:70:9a:5a:2a:09:b4: 30:a0:1f:17:ac:2e:35:42:de:ff:b4:b5:3d:49:9f:c7:45:b1: ca:8d:90:bc:94:86:54:9a:fa:1c:b7:c5:3b:97:34:79:a1:95: 37:5f:08:a7:4d:9d:9d:36:46:6b:ff:ea:19:56:6b:d2:da:ba: 81:4f:98:fa:4f:25:25:29:38:1c:fa:4d:a1:2d:57:65:a7:21: 6b:1b:1c:06:d0:f2:5b:60:7f:2f:2f:8e:59:1f:0e:2d:f4:ef: db:51:dc:d1:55:93:b4:0c:41:09:3d:49:20:af:95:72:53:5e: eb:db:3b:c0:13:52:b1:b2:33:8f:af:05:bb:76:79:7d:dd:34: e0:8e:ff:72 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE+2cR1I3L6AmV4sYWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk YTZhMGIyYWUtYWM5ZC00MzVmLThlZTQtNmI1NzU3MGRiY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvG2BHar5/LnX3Z/5HZvNHn3MR0XWhMnJtWs D7o84nBkWRVSB3ZEmELYKQfDyh2pDIvolDTGr2Uh7Vgl04/aXUJ3dYH8qqWdWP8g ruK2CQ8OPrrkm9drhcY4yCqJ0EDol1s7LKfA+As77fjf4/XW0bFtQcUyyHqzWRZg AgumhGHnmDo6QJ+Mk2K7oQpDBf8Yci3+5JH0xHy0OjSuRK0HAUjuYneh6xlJAoz9 YH3za3JKceYcbao6aDqgAsa7tN2HivTLo6ADZTX7q9fER8R3ysEB+JnxJ/zeHskN ExInJJoV0gKDu5ar8ganlDA0TucZxyEV/NkjsQxP9NvHdDk8PwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFCm0oQiUyJYxW0auFb+iKpireO3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvM2RjM2U5YjUtOTg1My0z ZjVmLWIyYjYtMWVlYmVkMmI2ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdrzd88xH37r9tfsvsZehF9Jjj9BK z+YmU+CWs0LQpK8V4aBiXcAk9QkQbXiCssbm+3iE0aMRd0zm7KkZfApMzzQWnsXV dNnqBegAsLu+RBxMPQcA5HdxXOrhmJXpKIC778IU5j2Hr5zPkrVNJFI+orynMjIj yxcHcJpaKgm0MKAfF6wuNULe/7S1PUmfx0Wxyo2QvJSGVJr6HLfFO5c0eaGVN18I p02dnTZGa//qGVZr0tq6gU+Y+k8lJSk4HPpNoS1XZachaxscBtDyW2B/Ly+OWR8O LfTv21Hc0VWTtAxBCT1JIK+VclNe69s7wBNSsbIzj68Fu3Z5fd004I7/cg== -----END CERTIFICATE-----Generated at Sun Nov 15 20:58:49 2026 by rpki-client