$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa File: d3bab822-4cb5-3a34-898f-cd524c33f81c.roa (raw, json) Hash identifier: dEsiceX1pfX07mzgAdFj41e9b3oKDhBleesNc0tG4Pg= Subject key identifier: A9:96:A6:58:62:29:41:8F:5F:25:73:58:BD:81:2C:6B:9E:C6:21:39 Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584B08ABEC4FE0E2D87397F57C00 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa Signing time: Sun 31 Aug 2025 01:00:33 +0000 ROA not before: Sun 31 Aug 2025 01:00:33 +0000 ROA not after: Sat 29 Nov 2025 02:00:33 +0000 asID: 2648 IP address blocks: 132.163.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:08:ab:ec:4f:e0:e2:d8:73:97:f5:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Aug 31 01:00:33 2025 GMT Not After : Nov 29 02:00:33 2025 GMT Subject: CN=07a7a677-b10c-4775-b031-f4609aacd10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:7d:17:09:33:c4:c3:06:e6:71:93:bf:28: d1:4d:2c:a0:ee:14:46:af:86:8d:0f:87:b6:c6:f2: d4:56:14:a5:a1:85:e4:05:2d:aa:07:69:71:0a:df: 0f:4f:58:62:b6:c9:b5:59:0f:0f:68:97:a7:79:aa: cb:a5:97:68:a7:04:b2:26:33:2e:7f:25:63:78:3e: f2:e8:53:fa:a1:86:5b:d7:52:34:ad:ae:f7:e0:04: e1:3a:08:32:4c:de:1e:36:d4:28:ab:ba:38:0d:76: 80:2b:96:27:79:7f:64:1a:5d:54:4c:fd:61:8f:4d: 70:36:69:81:2e:f1:c1:eb:38:2b:ed:f8:b2:12:4b: ec:a7:44:6c:5f:3d:61:4a:39:78:39:2f:f8:cf:58: a9:fb:38:20:ee:fa:bc:5f:f9:43:1d:94:10:ef:0f: 8e:a2:39:44:4f:6d:30:7a:aa:2f:c9:e2:16:a6:d2: ea:80:e8:3a:e1:37:23:fc:50:3f:45:59:87:ac:59: 94:08:c6:55:20:6b:7d:d4:d7:5e:88:56:5e:37:10: 8a:0a:97:4d:ec:9c:11:e3:46:3a:79:40:02:5f:58: 52:ec:de:d9:c7:76:fd:3c:e5:c2:be:13:2f:e0:ad: d0:3c:40:1d:c6:b7:c5:27:ae:1d:39:85:45:2f:41: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:96:A6:58:62:29:41:8F:5F:25:73:58:BD:81:2C:6B:9E:C6:21:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 132.163.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0a:41:4d:76:4b:9e:a5:4a:46:2a:0f:6e:5b:96:e7:f2:2e: 30:ee:f2:a9:4b:14:81:f4:6a:5c:87:95:39:e4:bf:46:7b:f6: 5e:de:18:ad:99:fb:d7:26:31:57:55:62:f5:e3:57:f6:24:4e: fd:4c:87:6b:56:3c:30:1c:94:0d:22:32:c1:1a:d4:e2:ef:fb: 06:62:7d:12:d5:71:ad:00:80:2d:42:db:68:85:fe:c9:b1:c1: 6f:71:e0:22:1b:4d:4a:aa:c0:78:62:24:6a:ba:97:bb:be:3e: 31:f2:e6:b6:ff:50:7c:22:2d:55:c3:6b:28:79:6a:4d:95:4e: 60:44:fd:75:36:79:1e:f6:7f:a3:6d:90:ce:2f:c3:8f:68:e4: 43:9d:ab:ae:7a:de:a1:a8:11:8f:a8:d8:e8:dd:aa:52:83:35: 3f:f5:59:10:49:3f:73:1e:f2:14:69:ea:8f:89:c7:9d:77:13: 4d:87:46:c4:ff:8e:6a:ca:a3:18:09:98:1a:a7:0b:fb:8f:75: f5:66:fb:06:b1:09:21:f0:31:b8:8d:b6:11:cc:eb:19:3e:62: c3:69:3a:05:33:d1:89:92:57:5a:ed:a7:6b:8a:23:90:5a:04: e2:7b:fb:2e:01:cd:76:6a:1a:af:b0:71:08:4c:2a:a2:7e:18: f1:ef:1b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsIq+xP4OLYc5f1fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI1MDgzMTAxMDAzM1oXDTI1MTEyOTAyMDAzM1owLzEtMCsGA1UEAxMk MDdhN2E2NzctYjEwYy00Nzc1LWIwMzEtZjQ2MDlhYWNkMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv19FwkzxMMG5nGTvyjRTSyg7hRGr4aND4e2 xvLUVhSloYXkBS2qB2lxCt8PT1hitsm1WQ8PaJenearLpZdopwSyJjMufyVjeD7y 6FP6oYZb11I0ra734AThOggyTN4eNtQoq7o4DXaAK5YneX9kGl1UTP1hj01wNmmB LvHB6zgr7fiyEkvsp0RsXz1hSjl4OS/4z1ip+zgg7vq8X/lDHZQQ7w+OojlET20w eqovyeIWptLqgOg64Tcj/FA/RVmHrFmUCMZVIGt91NdeiFZeNxCKCpdN7JwR40Y6 eUACX1hS7N7Zx3b9POXCvhMv4K3QPEAdxrfFJ64dOYVFL0HGIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmWplhiKUGPXyVzWL2BLGuexiE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvZDNiYWI4MjItNGNiNS0z YTM0LTg5OGYtY2Q1MjRjMzNmODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHhKOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgKQU12S56lSkYqD25blufyLjDu8qlLFIH0alyHlTnkv0Z79l7eGK2Z +9cmMVdVYvXjV/YkTv1Mh2tWPDAclA0iMsEa1OLv+wZifRLVca0AgC1C22iF/smx wW9x4CIbTUqqwHhiJGq6l7u+PjHy5rb/UHwiLVXDayh5ak2VTmBE/XU2eR72f6Nt kM4vw49o5EOdq6563qGoEY+o2OjdqlKDNT/1WRBJP3Me8hRp6o+Jx513E02HRsT/ jmrKoxgJmBqnC/uPdfVm+waxCSHwMbiNthHM6xk+YsNpOgUz0YmSV1rtp2uKI5Ba BOJ7+y4BzXZqGq+wcQhMKqJ+GPHvG9I= -----END CERTIFICATE-----Generated at Wed Nov 5 17:45:34 2025 by rpki-client