$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a7468b8f-bf6d-3561-a73f-12c58a6ce800.roa File: a7468b8f-bf6d-3561-a73f-12c58a6ce800.roa (raw, json) Hash identifier: x/CSOMf62m5+WJA78f5zQdnqOGLZ+sz+pFtnNZ9n7VM= Subject key identifier: 05:B6:88:1B:0B:75:DB:9C:22:E2:ED:7E:DA:03:CA:44:6F:4C:64:89 Certificate issuer: /CN=a33a8548-3254-4c75-b176-b888068a1694 Certificate serial: 010D0C9F4328584EFEB12B25B976AFE88CAEA080 Authority key identifier: 12:A7:CD:E9:E8:60:3D:5C:D8:93:A1:D2:11:87:85:CD:A1:30:AC:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a7468b8f-bf6d-3561-a73f-12c58a6ce800.roa Signing time: Sat 29 Aug 2026 06:20:48 +0000 ROA not before: Sat 29 Aug 2026 06:20:48 +0000 ROA not after: Sun 01 Nov 2026 08:24:59 +0000 asID: 402847 IP address blocks: 169.128.120.0/23 maxlen: 23 198.22.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a33a8548-3254-4c75-b176-b888068a1694.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a33a8548-3254-4c75-b176-b888068a1694.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:b1:2b:25:b9:76:af:e8:8c:ae:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a33a8548-3254-4c75-b176-b888068a1694 Validity Not Before: Aug 29 06:20:48 2026 GMT Not After : Nov 1 08:24:59 2026 GMT Subject: CN=5d71e93d-7dbf-4e0d-acb5-bc4ec865f51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:eb:4a:9e:7a:5a:65:fe:cf:26:93:f4:16: 63:a9:10:16:6f:f3:78:f7:40:45:dc:ae:ee:29:a0: 6a:56:cb:d9:d5:08:9d:ef:eb:8f:40:24:29:dc:70: 3b:9e:d9:20:de:cd:e3:08:5e:ed:4d:51:20:a2:7f: c3:e4:03:79:7a:bd:e8:1f:00:50:d4:d0:95:f8:4f: d0:56:5b:03:d7:47:e1:6b:c3:7c:ab:76:4b:e6:15: 0e:c0:4c:d8:82:fd:bd:cc:0e:d5:23:7c:59:0f:db: 12:b9:4d:7e:8a:e2:66:8c:be:ef:57:23:36:58:78: 72:3b:89:b0:1d:a9:b4:ef:18:9c:f5:8e:4a:70:64: 12:e5:81:dd:d9:69:67:b2:d2:49:78:71:7d:46:ac: 01:a2:b7:ea:6b:a9:f1:17:26:06:5c:8b:4b:c8:25: 2f:34:d5:ac:51:5a:b7:b0:44:3d:49:b3:a4:6d:33: a0:b1:48:35:ad:01:19:6a:7e:45:d2:31:af:5a:6f: 93:8c:12:c0:48:1e:5b:88:5e:2e:c7:00:c7:05:e1: 9c:5a:ca:52:97:06:0f:a6:70:e4:5f:f8:cd:84:61: f4:5b:87:16:e7:85:10:18:68:38:4f:59:19:68:b1: ae:45:e1:53:ad:22:3d:51:ed:38:c4:06:72:8c:f8: 84:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B6:88:1B:0B:75:DB:9C:22:E2:ED:7E:DA:03:CA:44:6F:4C:64:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a7468b8f-bf6d-3561-a73f-12c58a6ce800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694/a33a8548-3254-4c75-b176-b888068a1694.crl X509v3 Authority Key Identifier: keyid:12:A7:CD:E9:E8:60:3D:5C:D8:93:A1:D2:11:87:85:CD:A1:30:AC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a33a8548-3254-4c75-b176-b888068a1694.cer sbgp-ipAddrBlock: critical IPv4: 169.128.120.0/23 198.22.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:37:72:0e:be:c3:74:60:49:59:59:79:c3:15:d7:4a:89:2c: 79:cc:17:16:0c:de:72:9f:3b:70:4b:71:a3:8d:76:ee:e0:78: 24:50:ca:10:1e:d8:8e:7b:7b:b1:10:76:cf:4e:91:d9:2b:69: 8d:0f:2e:41:6e:33:6e:69:0e:12:ec:89:c9:79:44:c9:2f:8c: 75:ed:2e:ba:2f:c4:3e:86:e1:af:de:ce:87:79:dc:93:0f:6d: e9:2d:e8:87:f0:3b:83:1e:38:a5:05:7f:2a:b7:76:8d:aa:0e: 4b:14:3d:74:04:d6:5e:15:49:31:31:24:8d:2f:56:77:41:03: b4:52:9d:9f:5c:df:3c:bf:97:49:4d:e4:3e:4a:dc:88:0a:6c: e7:33:f5:38:3e:52:c3:cc:df:5f:dd:f4:8f:00:08:f6:f4:81: 15:58:b7:e7:7b:88:24:5a:c4:cb:b7:ed:ce:ba:e1:08:21:70: 88:f2:f8:19:ec:35:5c:28:3a:2a:8d:31:30:04:e3:8b:ea:48: 29:36:8e:ba:c8:ef:8d:44:83:11:a2:d5:fc:c1:63:1b:54:85: 8d:63:92:c3:d1:a7:08:65:f7:dd:b3:72:f7:20:a1:34:64:b4: 49:90:40:e4:78:bd:bb:b8:6c:74:9d:68:57:f5:91:e3:e2:5a: 0c:c0:f0:72 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7+sSsluXav6IyuoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMzYTg1NDgtMzI1NC00Yzc1LWIxNzYtYjg4ODA2OGEx Njk0MB4XDTI2MDgyOTA2MjA0OFoXDTI2MTEwMTA4MjQ1OVowLzEtMCsGA1UEAxMk NWQ3MWU5M2QtN2RiZi00ZTBkLWFjYjUtYmM0ZWM4NjVmNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB3rSp56WmX+zyaT9BZjqRAWb/N490BF3K7u KaBqVsvZ1Qid7+uPQCQp3HA7ntkg3s3jCF7tTVEgon/D5AN5er3oHwBQ1NCV+E/Q VlsD10fha8N8q3ZL5hUOwEzYgv29zA7VI3xZD9sSuU1+iuJmjL7vVyM2WHhyO4mw Ham07xic9Y5KcGQS5YHd2WlnstJJeHF9RqwBorfqa6nxFyYGXItLyCUvNNWsUVq3 sEQ9SbOkbTOgsUg1rQEZan5F0jGvWm+TjBLASB5biF4uxwDHBeGcWspSlwYPpnDk X/jNhGH0W4cW54UQGGg4T1kZaLGuReFTrSI9Ue04xAZyjPiEuQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAW2iBsLdducIuLtftoDykRvTGSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMzNh ODU0OC0zMjU0LTRjNzUtYjE3Ni1iODg4MDY4YTE2OTQvYTc0NjhiOGYtYmY2ZC0z NTYxLWE3M2YtMTJjNThhNmNlODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYTMzYTg1NDgtMzI1NC00Yzc1LWIx NzYtYjg4ODA2OGExNjk0L2EzM2E4NTQ4LTMyNTQtNGM3NS1iMTc2LWI4ODgwNjhh MTY5NC5jcmwwHwYDVR0jBBgwFoAUEqfN6ehgPVzYk6HSEYeFzaEwrBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMzNhODU0OC0zMjU0LTRjNzUtYjE3Ni1iODg4 MDY4YTE2OTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBqYB4AwQA xhaMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFU3cg6+w3RgSVlZecMV10qJLHnMFxYM3nKfO3BLcaONdu7g eCRQyhAe2I57e7EQds9OkdkraY0PLkFuM25pDhLsicl5RMkvjHXtLrovxD6G4a/e zod53JMPbekt6IfwO4MeOKUFfyq3do2qDksUPXQE1l4VSTExJI0vVndBA7RSnZ9c 3zy/l0lN5D5K3IgKbOcz9Tg+UsPM31/d9I8ACPb0gRVYt+d7iCRaxMu37c664Qgh cIjy+BnsNVwoOiqNMTAE44vqSCk2jrrI741EgxGi1fzBYxtUhY1jksPRpwhl992z cvcgoTRktEmQQOR4vbu4bHSdaFf1kePiWgzA8HI= -----END CERTIFICATE-----Generated at Sun Sep 27 03:58:24 2026 by rpki-client