$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa File: 8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa (raw, json) Hash identifier: WHYRZmk/pTxyRRODOI8gdfdbVkYX1BIkrGOvWDNcCGY= Subject key identifier: 75:CA:79:3F:9F:22:E2:09:81:88:46:AE:73:0C:E3:EB:E5:14:A8:EF Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584F1467A52AF433A8E8B1C35C00 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 17378 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a5:2a:f4:33:a8:e8:b1:c3:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=ae606fa8-827f-4036-8b7b-8603836a7cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:47:c7:f6:5c:66:09:64:04:b6:a7:40:25: 76:16:90:7b:87:a2:8e:30:25:dc:93:e4:21:c1:92: 6e:99:76:28:59:73:a4:14:72:bd:5b:0e:3f:06:32: 9d:c2:ed:e9:2c:98:06:73:43:d8:27:2a:d2:75:eb: 93:79:b6:ad:0c:03:f9:11:ea:34:d4:c9:80:e9:d1: d0:a3:60:96:d3:b6:98:ea:d7:22:6e:7d:0e:a4:2d: d3:93:f4:95:74:a5:96:38:40:19:ed:73:6e:91:89: 17:f8:f1:bb:a7:26:60:64:53:a0:6b:1f:7e:b2:f2: b7:ed:81:74:e6:6c:6d:52:cf:7e:b1:71:06:fb:f6: af:f6:76:f7:b6:ec:50:bd:4b:1c:0e:6b:76:a9:be: ab:35:a3:76:bd:e7:52:8b:08:3c:32:fb:cb:e2:19: 3c:44:f7:79:47:ad:93:55:d2:c7:05:3a:7a:e8:7a: d9:8a:e5:14:ab:7e:46:27:ef:a8:0f:d8:d5:fc:eb: e1:8d:8f:d2:ac:e5:75:eb:28:83:1f:62:78:24:69: b8:45:b9:55:ed:58:10:3d:4e:b3:b2:e9:1e:11:fd: 58:af:78:0f:f8:25:fa:90:ae:54:bf:b4:25:ec:51: 5d:fd:0f:54:fb:b3:83:8c:a5:b4:6d:77:7a:5f:e7: 03:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CA:79:3F:9F:22:E2:09:81:88:46:AE:73:0C:E3:EB:E5:14:A8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:6c:b1:fd:66:2c:6c:a9:19:74:97:2b:03:63:5a:ac:3a:da: 2b:82:1f:83:fe:c0:6c:b8:6c:b9:9e:33:d4:43:2b:6b:e0:35: 83:ce:04:ad:ec:8e:37:5a:c0:76:b9:0d:ff:35:b0:ca:3d:ed: d0:51:51:f3:bf:6d:b2:a2:06:3c:94:be:d7:41:94:a7:24:9a: 67:4a:f6:48:03:33:3e:64:8b:94:c3:d0:43:12:68:4b:60:7d: d1:bf:f1:cf:30:48:c6:b8:30:46:59:58:6d:e0:03:26:74:ec: 7e:9d:a2:56:59:e1:db:13:da:ef:63:ad:b8:1f:08:3b:49:05: 30:99:bd:c1:9f:56:01:93:92:4f:ac:52:ad:d1:ee:5f:29:f5: 32:33:da:3c:06:af:33:85:2e:a3:8c:67:e0:6b:17:43:c3:2f: 97:18:97:90:bc:c8:29:09:2e:ba:18:27:e5:fa:82:b2:76:e9: 95:21:69:fc:4c:f8:57:c2:41:09:eb:3c:e5:54:e6:89:71:2c: 4e:c8:ba:73:06:f0:d4:df:2f:cf:76:3e:24:3e:a5:7e:73:69: 78:13:71:8f:8d:6a:58:8a:f3:cb:70:95:a5:ef:17:37:56:da: 03:f9:49:49:b1:f9:a2:d8:08:ff:f2:28:b7:1c:d3:5b:86:56: dc:b3:20:d0 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE8UZ6Uq9DOo6LHDXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YWU2MDZmYTgtODI3Zi00MDM2LThiN2ItODYwMzgzNmE3Y2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxRHx/ZcZglkBLanQCV2FpB7h6KOMCXck+Qh wZJumXYoWXOkFHK9Ww4/BjKdwu3pLJgGc0PYJyrSdeuTebatDAP5Eeo01MmA6dHQ o2CW07aY6tcibn0OpC3Tk/SVdKWWOEAZ7XNukYkX+PG7pyZgZFOgax9+svK37YF0 5mxtUs9+sXEG+/av9nb3tuxQvUscDmt2qb6rNaN2vedSiwg8MvvL4hk8RPd5R62T VdLHBTp66HrZiuUUq35GJ++oD9jV/OvhjY/SrOV16yiDH2J4JGm4RblV7VgQPU6z sukeEf1Yr3gP+CX6kK5Uv7Ql7FFd/Q9U+7ODjKW0bXd6X+cDIQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFHXKeT+fIuIJgYhGrnMM4+vlFKjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvOGE0Nzc5YjItNzQ0YS0z NDUwLWE0M2QtYmYyYmY1ZGQ3YmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjmyx/WYsbKkZdJcrA2NarDraK4If g/7AbLhsuZ4z1EMra+A1g84EreyON1rAdrkN/zWwyj3t0FFR879tsqIGPJS+10GU pySaZ0r2SAMzPmSLlMPQQxJoS2B90b/xzzBIxrgwRllYbeADJnTsfp2iVlnh2xPa 72OtuB8IO0kFMJm9wZ9WAZOST6xSrdHuXyn1MjPaPAavM4Uuo4xn4GsXQ8MvlxiX kLzIKQkuuhgn5fqCsnbplSFp/Ez4V8JBCes85VTmiXEsTsi6cwbw1N8vz3Y+JD6l fnNpeBNxj41qWIrzy3CVpe8XN1baA/lJSbH5otgI//IotxzTW4ZW3LMg0A== -----END CERTIFICATE-----Generated at Mon Sep 21 22:17:52 2026 by rpki-client