$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa File: 8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa (raw, json) Hash identifier: T5icQ0UhA/ySkBKC5OtIX8Qu4Qi5gRkRtd1axYDmpag= Subject key identifier: BE:B0:2A:C6:51:21:BD:06:53:1B:A3:93:D1:F9:2C:DA:D2:DE:44:0E Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584FB6711D39266D1D0D5A4BC140 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 17378 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:1d:39:26:6d:1d:0d:5a:4b:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=618f2a3a-04c2-4618-ac78-0bf9ca43af93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cd:a1:83:18:a0:5f:8b:d4:f6:42:a3:b0:0d: 72:14:4e:d2:ad:3b:b3:de:17:d6:8d:e3:44:b7:e9: 1a:0b:ad:f8:36:04:75:5a:f7:c7:92:0b:2a:d3:b2: cf:03:6b:2a:75:4f:e4:17:f2:5f:00:2c:65:9c:da: 17:c9:95:1c:11:a9:db:7e:ca:61:6b:dd:32:a7:26: 5e:ad:6b:86:32:a5:96:bb:f0:da:17:dd:7a:9c:47: 64:ec:45:73:ff:79:ec:a6:dd:a2:63:89:fa:56:13: 23:16:89:91:49:9c:ea:d3:42:ed:7b:80:db:55:53: 89:31:58:6b:2b:19:1f:ad:2f:d1:37:42:1a:d3:0a: ba:6c:9b:1c:15:fb:9c:7e:20:ee:a7:be:d6:0e:90: 5d:77:2e:b9:50:28:da:11:87:95:ae:65:ac:08:75: 72:83:3a:57:5e:17:62:5a:93:6d:02:db:b0:5b:e5: a0:bd:94:4d:35:5a:de:26:ec:24:a4:f5:8e:9f:2b: cf:09:cb:2d:44:32:86:45:2a:71:89:18:d8:cd:04: 92:8d:ee:07:d5:39:d5:0a:6a:78:86:b0:e6:d2:6b: 8d:9b:cd:af:fc:3f:58:e2:24:a4:b4:35:30:9a:21: 05:41:86:5d:c6:e3:63:29:5f:f9:fe:0a:b1:bd:3c: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B0:2A:C6:51:21:BD:06:53:1B:A3:93:D1:F9:2C:DA:D2:DE:44:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:0a:3f:fa:51:e5:bd:39:1c:f6:cb:2b:38:0c:d3:5d:61:6f: a9:b9:4b:16:f4:82:64:87:ec:39:33:9b:27:49:72:4f:de:62: c9:d3:d3:97:ea:e8:c7:a2:1f:93:3f:f5:1b:80:0c:a6:64:29: 2a:5d:6d:fe:b2:61:d5:5c:52:9b:5a:eb:fe:cd:8b:d0:f0:df: 73:a5:fd:e6:b9:c7:6b:7d:6b:46:d9:64:18:5e:a4:5a:c8:34: be:df:eb:86:e5:6d:22:ee:fa:b1:20:d0:a8:12:a0:70:87:96: d7:da:bf:eb:60:e7:c2:af:f6:ab:d4:8f:99:de:0c:4d:32:4f: 3c:df:34:40:49:a9:59:1b:44:85:a0:e0:6b:89:3d:5c:25:0a: 10:40:88:5c:11:8f:3d:b1:fe:fe:05:a1:f3:f5:b3:eb:3f:28: b4:b4:7e:4e:17:d4:b8:99:11:b4:81:99:57:cc:db:14:dd:18: 20:b4:f8:20:59:0a:0c:c6:b4:cd:86:c1:de:ed:f1:0c:84:ce: 66:92:5e:4e:e9:77:0a:6d:68:3d:e9:96:89:32:f7:54:3e:d6: 9d:b6:2d:93:58:44:ed:ca:e8:80:02:d7:19:0e:fe:9d:b0:21: 1b:b6:11:0f:96:f0:72:56:68:56:22:2e:a9:da:1b:28:31:3a: ff:14:02:9f -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE+2cR05Jm0dDVpLwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk NjE4ZjJhM2EtMDRjMi00NjE4LWFjNzgtMGJmOWNhNDNhZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c2hgxigX4vU9kKjsA1yFE7SrTuz3hfWjeNE t+kaC634NgR1WvfHkgsq07LPA2sqdU/kF/JfACxlnNoXyZUcEanbfspha90ypyZe rWuGMqWWu/DaF916nEdk7EVz/3nspt2iY4n6VhMjFomRSZzq00Lte4DbVVOJMVhr KxkfrS/RN0Ia0wq6bJscFfucfiDup77WDpBddy65UCjaEYeVrmWsCHVygzpXXhdi WpNtAtuwW+WgvZRNNVreJuwkpPWOnyvPCcstRDKGRSpxiRjYzQSSje4H1TnVCmp4 hrDm0muNm82v/D9Y4iSktDUwmiEFQYZdxuNjKV/5/gqxvTzJyQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFL6wKsZRIb0GUxujk9H5LNrS3kQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvOGE0Nzc5YjItNzQ0YS0z NDUwLWE0M2QtYmYyYmY1ZGQ3YmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAawo/+lHlvTkc9ssrOAzTXWFvqblL FvSCZIfsOTObJ0lyT95iydPTl+rox6Ifkz/1G4AMpmQpKl1t/rJh1VxSm1rr/s2L 0PDfc6X95rnHa31rRtlkGF6kWsg0vt/rhuVtIu76sSDQqBKgcIeW19q/62Dnwq/2 q9SPmd4MTTJPPN80QEmpWRtEhaDga4k9XCUKEECIXBGPPbH+/gWh8/Wz6z8otLR+ ThfUuJkRtIGZV8zbFN0YILT4IFkKDMa0zYbB3u3xDITOZpJeTul3Cm1oPemWiTL3 VD7WnbYtk1hE7crogALXGQ7+nbAhG7YRD5bwclZoViIuqdobKDE6/xQCnw== -----END CERTIFICATE-----Generated at Sun Nov 15 20:44:16 2026 by rpki-client