$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/638407b9-8e7f-3aed-9eb5-77819b0084cc.roa File: 638407b9-8e7f-3aed-9eb5-77819b0084cc.roa (raw, json) Hash identifier: RE40amNGUhITNbBmkLUbJcNr1WP93zE/KqcssP6BNto= Subject key identifier: E9:5D:4E:51:B2:2E:D2:D2:A2:98:1C:A6:E6:4F:84:58:13:D4:B8:1D Certificate issuer: /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31 Certificate serial: 010D0C9F4328584F1B6704E69B2F07387D2014A0 Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/638407b9-8e7f-3aed-9eb5-77819b0084cc.roa Signing time: Tue 08 Sep 2026 13:09:51 +0000 ROA not before: Tue 08 Sep 2026 13:09:51 +0000 ROA not after: Mon 07 Dec 2026 14:09:51 +0000 asID: 397423 IP address blocks: 172.82.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:67:04:e6:9b:2f:07:38:7d:20:14:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31 Validity Not Before: Sep 8 13:09:51 2026 GMT Not After : Dec 7 14:09:51 2026 GMT Subject: CN=738c0b8c-744b-4bb2-9a4a-f0f181f3f207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:1a:94:80:7c:01:a2:b6:5e:6f:4b:3d:42: 08:0c:e2:f4:d1:fe:2d:bf:93:c7:33:54:12:79:26: fa:0c:1b:c9:4a:03:8d:5c:5d:21:4c:9f:17:87:0b: cb:6a:a6:e3:ce:b8:2a:e0:2e:b7:e2:dc:73:44:b0: 04:65:6d:7b:e4:1c:d6:e2:60:46:71:18:d3:ba:1f: 0c:eb:4c:40:55:96:03:37:a0:0c:ba:bd:ca:12:13: db:9e:85:7a:7f:00:83:04:9a:2a:ac:81:07:41:2f: 07:2b:2d:6a:dd:40:d6:9d:ee:74:14:03:76:f7:19: f5:5d:71:73:2b:65:29:f7:1b:29:2b:78:37:78:86: c4:77:ef:b4:71:78:be:cb:4a:1b:f1:c4:4a:b9:d0: 41:47:e0:a7:a0:18:9a:63:71:c3:76:f9:cc:00:bc: d1:35:8a:25:f0:99:7a:66:13:b7:1c:b9:b6:23:86: 87:d8:80:e8:ba:85:6a:9f:d4:0a:8b:bf:f6:4a:af: db:f8:cd:e7:d2:c4:c8:1d:26:1d:72:a7:ce:02:8e: 60:63:22:bb:a9:2c:aa:ad:96:7d:8c:fd:9a:b9:77: 3f:1c:f1:3b:ee:71:66:d5:65:c3:13:9f:d5:44:b3: 33:9b:57:1a:83:d7:49:56:a5:0e:d7:36:cc:77:81: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5D:4E:51:B2:2E:D2:D2:A2:98:1C:A6:E6:4F:84:58:13:D4:B8:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/638407b9-8e7f-3aed-9eb5-77819b0084cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl X509v3 Authority Key Identifier: keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer sbgp-ipAddrBlock: critical IPv4: 172.82.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ed:f4:b8:07:d0:a3:4c:f8:58:d0:7d:42:ec:9d:10:bb:fd: 0c:99:88:cd:18:7c:46:43:27:3d:11:6f:9f:1c:21:c4:89:2d: 31:bc:e4:c9:e7:d4:a7:7c:56:a5:b5:7a:d3:ed:8a:85:17:78: b1:b8:9d:03:f4:5d:ce:01:79:8e:4c:4a:24:b9:a6:93:b1:0b: 38:67:17:fa:e2:7c:c6:a0:ed:0b:14:6b:84:fc:63:de:87:7d: 69:42:98:25:3f:04:63:03:67:d3:18:24:6f:40:3a:05:a2:3a: 98:23:13:4d:6c:ae:71:83:7f:bf:22:c5:a2:92:da:39:b1:7f: a2:0a:14:c2:b1:de:2b:23:c0:7c:9c:a3:8e:01:42:ba:a2:c7: 47:c4:85:55:42:5b:b8:5f:3e:1f:b1:d9:2c:90:50:2f:55:d3: 57:7a:22:ee:5c:4f:05:38:83:a5:6d:c0:9c:2f:cd:c5:70:31: 50:9c:5c:90:ef:a2:59:b6:5f:9b:c8:b0:c3:6b:da:44:4c:4d: 9f:d0:03:e8:4f:79:ea:15:05:a7:dd:ac:22:bf:8d:3d:11:99: 16:f2:31:1a:0d:89:92:ed:e1:ae:b2:43:72:50:16:57:12:b7: c3:57:66:3a:38:06:3d:76:9a:13:ac:a2:ac:4a:5b:0b:c2:72: eb:e0:dc:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bZwTmmy8HOH0gFKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTVjOWFmNGEtZTJlNC00ZmI5LTlmNTMtODY5Yzg3NzEw ZTMxMB4XDTI2MDkwODEzMDk1MVoXDTI2MTIwNzE0MDk1MVowLzEtMCsGA1UEAxMk NzM4YzBiOGMtNzQ0Yi00YmIyLTlhNGEtZjBmMTgxZjNmMjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbMalIB8AaK2Xm9LPUIIDOL00f4tv5PHM1QS eSb6DBvJSgONXF0hTJ8XhwvLaqbjzrgq4C634txzRLAEZW175BzW4mBGcRjTuh8M 60xAVZYDN6AMur3KEhPbnoV6fwCDBJoqrIEHQS8HKy1q3UDWne50FAN29xn1XXFz K2Up9xspK3g3eIbEd++0cXi+y0ob8cRKudBBR+CnoBiaY3HDdvnMALzRNYol8Jl6 ZhO3HLm2I4aH2IDouoVqn9QKi7/2Sq/b+M3n0sTIHSYdcqfOAo5gYyK7qSyqrZZ9 jP2auXc/HPE77nFm1WXDE5/VRLMzm1cag9dJVqUO1zbMd4EseQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOldTlGyLtLSopgcpuZPhFgT1LgdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5 YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3MTBlMzEvNjM4NDA3YjktOGU3Zi0z YWVkLTllYjUtNzc4MTliMDA4NGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTVjOWFmNGEtZTJlNC00ZmI5LTlm NTMtODY5Yzg3NzEwZTMxLzU1YzlhZjRhLWUyZTQtNGZiOS05ZjUzLTg2OWM4Nzcx MGUzMS5jcmwwHwYDVR0jBBgwFoAUzg6k1wXsiaJO1eLQ7FrRxeIdW8YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5YWY0YS1lMmU0LTRmYjktOWY1My04Njlj ODc3MTBlMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTt9LgH0KNM+FjQfULsnRC7/QyZiM0YfEZDJz0Rb58cIcSJLTG85Mnn 1Kd8VqW1etPtioUXeLG4nQP0Xc4BeY5MSiS5ppOxCzhnF/rifMag7QsUa4T8Y96H fWlCmCU/BGMDZ9MYJG9AOgWiOpgjE01srnGDf78ixaKS2jmxf6IKFMKx3isjwHyc o44BQrqix0fEhVVCW7hfPh+x2SyQUC9V01d6Iu5cTwU4g6VtwJwvzcVwMVCcXJDv olm2X5vIsMNr2kRMTZ/QA+hPeeoVBafdrCK/jT0RmRbyMRoNiZLt4a6yQ3JQFlcS t8NXZjo4Bj12mhOsoqxKWwvCcuvg3CU= -----END CERTIFICATE-----Generated at Sun Sep 20 23:29:17 2026 by rpki-client