$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa File: effebbf7-ee2d-3137-8b68-780d284e81c1.roa (raw, json) Hash identifier: xHhf6dKpGgM3p5/HzlCA0EyXh8nXJ7+MPWtk7EaELdQ= Subject key identifier: BD:D2:9F:B6:D0:A3:F8:01:2A:FC:52:A5:7B:C5:ED:6E:19:3D:D3:DF Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584CA061A62DA4A42540327AA140 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa Signing time: Sat 24 Jan 2026 02:00:31 +0000 ROA not before: Sat 24 Jan 2026 02:00:31 +0000 ROA not after: Fri 24 Apr 2026 01:00:31 +0000 asID: 10430 IP address blocks: 173.229.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a0:61:a6:2d:a4:a4:25:40:32:7a:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Jan 24 02:00:31 2026 GMT Not After : Apr 24 01:00:31 2026 GMT Subject: CN=990e43c7-979c-4cc6-833e-4db7d30befe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:46:28:22:a2:19:a9:47:94:8f:a4:53:d2:73: ed:96:57:d6:00:54:35:35:42:ba:48:50:60:e6:58: b1:b9:c9:4f:ec:da:4f:64:5a:27:b3:be:4d:3a:37: 15:60:97:89:9b:d5:06:18:07:e3:47:10:03:eb:2e: ee:da:e2:34:8d:0c:04:1b:27:b9:74:9d:8e:0b:da: 92:98:0e:d4:5e:3d:59:c7:e5:ef:98:ca:50:de:50: 48:4a:c7:7b:81:61:c7:a3:98:28:03:4e:0d:f5:a3: bf:68:72:55:87:50:07:d2:6b:56:99:53:57:4b:39: fa:b3:22:aa:3c:d7:96:ec:c9:7e:a4:72:fc:4d:15: ee:cb:c9:fd:20:53:4c:04:77:b4:08:ef:1d:10:91: 61:52:f4:a6:dd:9c:39:c0:ba:87:cd:3b:3d:54:be: 02:65:07:25:cc:1c:5c:63:5e:c6:4f:19:ef:e6:a3: 62:38:29:96:aa:91:86:cf:fb:86:90:70:17:40:e3: 11:5f:27:3d:bd:3d:c3:db:fb:d5:17:88:15:57:8b: 26:2d:91:c3:6f:53:4a:d5:42:e7:c8:6d:68:95:30: be:50:a4:6b:ae:95:f7:be:41:30:ad:f8:27:c7:ab: 48:cf:5f:a4:1c:38:02:3b:2d:1a:96:5a:ec:81:1e: a9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D2:9F:B6:D0:A3:F8:01:2A:FC:52:A5:7B:C5:ED:6E:19:3D:D3:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/effebbf7-ee2d-3137-8b68-780d284e81c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 173.229.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e3:50:53:14:2c:42:3b:1b:41:9b:49:41:67:75:13:33:c3: 6e:94:0f:79:20:e7:f9:08:36:aa:50:5b:8e:d5:09:96:93:8b: 68:bb:c1:0b:c7:ce:32:e3:58:d6:51:a3:20:5e:47:a8:17:37: 08:bc:27:96:e6:61:65:09:75:f6:68:35:b8:69:db:78:bd:40: 4c:8a:eb:fe:2d:04:36:98:35:7f:e4:25:7b:6d:02:b6:a2:f1: 94:13:7f:aa:bb:3e:bc:7f:71:f3:b6:91:2a:c6:94:b0:3c:c1: 67:fe:9c:40:5b:5a:3c:d6:2f:8a:ef:c9:8a:98:bf:0c:d6:a0: ae:16:80:ba:bb:15:7f:2a:33:8a:5b:c3:76:03:7d:1e:89:36: af:07:ac:4e:2d:87:fb:99:41:2a:af:69:38:59:2d:72:0c:f1: f9:19:da:98:01:34:b4:74:bb:7b:bb:06:11:9c:fc:ad:01:a0: 28:71:c5:5d:a4:6a:ae:70:76:76:0f:09:72:9e:19:81:5d:25: d4:ba:59:bc:d6:6a:95:d1:ac:74:59:27:58:40:ab:0f:29:43: 75:af:b7:a9:14:85:2e:3a:3c:1f:c4:04:8e:af:17:62:5e:c5: cb:90:3c:15:38:e1:90:96:04:04:33:05:df:b5:1c:76:13:d3: 60:2e:52:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEygYaYtpKQlQDJ6oUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDEyNDAyMDAzMVoXDTI2MDQyNDAxMDAzMVowLzEtMCsGA1UEAxMk OTkwZTQzYzctOTc5Yy00Y2M2LTgzM2UtNGRiN2QzMGJlZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUYoIqIZqUeUj6RT0nPtllfWAFQ1NUK6SFBg 5lixuclP7NpPZFons75NOjcVYJeJm9UGGAfjRxAD6y7u2uI0jQwEGye5dJ2OC9qS mA7UXj1Zx+XvmMpQ3lBISsd7gWHHo5goA04N9aO/aHJVh1AH0mtWmVNXSzn6syKq PNeW7Ml+pHL8TRXuy8n9IFNMBHe0CO8dEJFhUvSm3Zw5wLqHzTs9VL4CZQclzBxc Y17GTxnv5qNiOCmWqpGGz/uGkHAXQOMRXyc9vT3D2/vVF4gVV4smLZHDb1NK1ULn yG1olTC+UKRrrpX3vkEwrfgnx6tIz1+kHDgCOy0allrsgR6pCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3Sn7bQo/gBKvxSpXvF7W4ZPdPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvZWZmZWJiZjctZWUyZC0z MTM3LThiNjgtNzgwZDI4NGU4MWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFreUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfjUFMULEI7G0GbSUFndRMzw26UD3kg5/kINqpQW47VCZaTi2i7wQvH zjLjWNZRoyBeR6gXNwi8J5bmYWUJdfZoNbhp23i9QEyK6/4tBDaYNX/kJXttArai 8ZQTf6q7Prx/cfO2kSrGlLA8wWf+nEBbWjzWL4rvyYqYvwzWoK4WgLq7FX8qM4pb w3YDfR6JNq8HrE4th/uZQSqvaThZLXIM8fkZ2pgBNLR0u3u7BhGc/K0BoChxxV2k aq5wdnYPCXKeGYFdJdS6WbzWapXRrHRZJ1hAqw8pQ3Wvt6kUhS46PB/EBI6vF2Je xcuQPBU44ZCWBAQzBd+1HHYT02AuUnQ= -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:51 2026 by rpki-client