$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa File: 8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa (raw, json) Hash identifier: Aqhaz9I2/1gJk2P35Y/0MamsipQZ9rUN3y/WhT5kbGA= Subject key identifier: C9:8D:F1:16:7E:9B:EA:92:07:89:85:C2:6B:DB:4E:93:86:F5:9C:D9 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584CB121D55E1C8FB5FB61427A60 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 17378 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:d5:5e:1c:8f:b5:fb:61:42:7a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=1df79312-02da-49d2-a897-d44e99d9e263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:86:c3:4b:dc:ea:4c:c4:aa:60:47:72:cb: c4:fb:70:33:8a:1d:80:1a:05:e6:c6:e1:de:7b:fe: 6c:df:11:93:6c:9f:4a:ab:44:dc:b4:f8:a8:15:2f: 65:a5:14:05:14:20:73:8a:44:69:e0:cf:a1:c8:8c: 17:ea:ce:af:b0:1a:e5:cd:76:a0:50:74:05:ef:77: 28:b0:b2:30:58:6e:ba:22:62:21:c9:53:10:9b:c9: 9a:b8:44:3b:63:98:e5:71:97:56:2e:e7:63:7f:1c: b2:9d:f9:dc:6e:c1:bf:90:51:1a:a1:ed:e0:71:f0: 53:09:a9:67:fb:5e:36:3b:5a:a1:38:e6:7b:b3:a7: f0:8d:93:d8:c3:c0:61:8a:ef:9a:02:a8:e7:d4:11: 6c:4b:0a:29:89:cb:93:bd:02:eb:e1:cd:52:f1:51: 5c:78:30:cf:25:b1:96:37:fa:24:30:83:c0:ec:65: b5:a5:77:44:2b:07:eb:e2:23:c9:cb:a8:f9:7a:98: 0d:0a:e7:e8:34:14:53:7a:7d:2e:4f:0a:9a:62:d6: 21:3f:cf:3d:e7:e9:6e:d4:72:4d:f9:bb:ec:e7:1e: 83:15:2e:51:9e:88:8f:ca:5c:85:ba:d0:1e:ab:3c: e1:89:02:18:f2:d9:e2:4c:2b:2a:46:d7:b1:2c:ba: 4d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8D:F1:16:7E:9B:EA:92:07:89:85:C2:6B:DB:4E:93:86:F5:9C:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:af:9b:fd:72:a3:bb:15:54:74:bc:2e:6b:8b:58:ae:52:65: 6b:6b:af:37:c7:cb:22:fc:e9:d3:82:b2:9b:0e:2f:62:01:b4: a1:8a:b3:d0:b4:81:94:37:24:8f:31:76:f3:11:8e:a7:5d:70: 59:72:7f:16:25:d5:29:37:ec:3e:45:a8:de:20:5d:51:ef:d6: 2b:89:82:6f:5f:6d:96:a8:4d:be:31:20:b6:f1:82:dd:55:b9: e3:d1:2e:fd:d0:e9:bd:72:9e:e4:5e:be:3e:ce:6a:52:72:aa: ee:85:8e:77:37:42:2b:47:bc:b0:81:17:4c:ac:88:65:5f:86: 53:51:c8:a2:8f:9e:f1:ee:2a:89:73:17:59:4c:21:e9:f5:63: 2f:e3:37:55:2e:89:99:fa:65:c7:83:3e:1b:d2:ea:01:fe:6c: 4d:18:e5:71:12:3f:df:bd:a4:be:9a:35:4b:52:a5:ed:88:ba: 28:da:4c:9e:b2:9e:99:ba:01:12:fd:6e:87:2a:43:46:72:69: 8c:f1:c1:e9:98:f1:fb:2b:25:78:e3:61:ec:96:4b:d7:bd:45: ef:d2:68:a7:9c:58:49:ad:45:f6:4e:56:90:ab:32:73:15:e7: 71:7d:84:18:b1:f5:48:a6:10:0d:2c:14:5b:43:ab:06:2f:1f: 6b:ae:ad:d4 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEyxIdVeHI+1+2FCemAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk MWRmNzkzMTItMDJkYS00OWQyLWE4OTctZDQ0ZTk5ZDllMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpyGw0vc6kzEqmBHcsvE+3Azih2AGgXmxuHe e/5s3xGTbJ9Kq0TctPioFS9lpRQFFCBzikRp4M+hyIwX6s6vsBrlzXagUHQF73co sLIwWG66ImIhyVMQm8mauEQ7Y5jlcZdWLudjfxyynfncbsG/kFEaoe3gcfBTCaln +142O1qhOOZ7s6fwjZPYw8Bhiu+aAqjn1BFsSwopicuTvQLr4c1S8VFceDDPJbGW N/okMIPA7GW1pXdEKwfr4iPJy6j5epgNCufoNBRTen0uTwqaYtYhP8895+lu1HJN +bvs5x6DFS5RnoiPylyFutAeqzzhiQIY8tniTCsqRtexLLpN7QIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFMmN8RZ+m+qSB4mFwmvbTpOG9ZzZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvOGE0Nzc5YjItNzQ0YS0z NDUwLWE0M2QtYmYyYmY1ZGQ3YmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGK+b/XKjuxVUdLwua4tYrlJla2uv N8fLIvzp04Kymw4vYgG0oYqz0LSBlDckjzF28xGOp11wWXJ/FiXVKTfsPkWo3iBd Ue/WK4mCb19tlqhNvjEgtvGC3VW549Eu/dDpvXKe5F6+Ps5qUnKq7oWOdzdCK0e8 sIEXTKyIZV+GU1HIoo+e8e4qiXMXWUwh6fVjL+M3VS6Jmfplx4M+G9LqAf5sTRjl cRI/372kvpo1S1Kl7Yi6KNpMnrKemboBEv1uhypDRnJpjPHB6Zjx+ysleONh7JZL 171F79Jop5xYSa1F9k5WkKsycxXncX2EGLH1SKYQDSwUW0OrBi8fa66t1A== -----END CERTIFICATE-----Generated at Mon Mar 2 09:01:24 2026 by rpki-client