$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/dd51c628-a0be-34a1-866d-ad0210fafe09.roa File: dd51c628-a0be-34a1-866d-ad0210fafe09.roa (raw, json) Hash identifier: X+nxCTFI2IAMGkYt4isxX1R+wsPA68qQTtFqWTFuG4c= Subject key identifier: D6:59:03:75:16:63:BA:B1:2F:0B:16:46:78:69:7E:70:6D:7A:11:38 Certificate issuer: /CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8 Certificate serial: 010D0C9F4328584F3A17CD6E0061C34D15A0D538 Authority key identifier: 83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/dd51c628-a0be-34a1-866d-ad0210fafe09.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 30967 IP address blocks: 146.88.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cd:6e:00:61:c3:4d:15:a0:d5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=1f4d1929-1071-4705-bd9a-169748f7c0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b9:de:da:af:be:d6:e5:70:28:ba:e1:6b:f3: b7:59:6f:72:14:33:ff:a9:60:ba:fd:8f:c6:89:06: 1a:94:3e:26:7b:b8:f9:d0:41:25:ae:d6:1e:15:a3: 84:b8:4f:e9:cd:53:81:2e:0e:a3:85:7e:8c:13:9d: 2f:f0:85:7e:fa:ae:b3:80:53:58:24:63:72:65:5a: 82:3a:28:9f:e2:47:99:db:66:66:b3:d9:b7:27:eb: ef:e2:4f:d4:70:20:59:8a:b3:6a:a3:08:6c:84:c2: 84:6c:83:8d:7c:59:99:65:7c:21:1b:ad:36:2b:0a: bf:e8:53:38:cc:f0:f5:68:4a:03:c9:9b:9b:25:ce: 1b:d4:05:0a:4d:19:a4:b2:e6:2f:e9:7f:26:9d:2d: bf:77:01:5a:df:4f:3f:52:df:14:a6:fb:c2:de:70: 47:5b:1a:7a:20:98:90:c2:7c:aa:cd:60:ca:c2:99: 71:a0:c2:09:3f:89:1a:eb:57:aa:72:8b:bf:06:d8: 4c:aa:bd:cd:00:9b:b6:d2:f4:37:67:c6:a4:1a:c2: 68:e1:24:f0:fc:26:a3:c4:c6:af:d5:c2:5d:a1:0e: 84:0b:9b:b4:6f:0f:f0:5e:6d:2d:28:9a:c2:6b:58: f4:58:ad:5b:d6:be:98:b4:c2:56:d9:0b:2b:75:04: ed:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:59:03:75:16:63:BA:B1:2F:0B:16:46:78:69:7E:70:6D:7A:11:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/dd51c628-a0be-34a1-866d-ad0210fafe09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.crl X509v3 Authority Key Identifier: keyid:83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer sbgp-ipAddrBlock: critical IPv4: 146.88.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:97:17:03:f2:56:28:e9:d8:cd:61:09:53:b8:8c:fa:eb:4c: 6f:58:3f:57:83:6b:cc:4e:c6:56:e1:4e:4d:28:21:ae:c6:ef: 68:18:8f:d1:2f:69:96:91:99:fc:7e:eb:8a:6c:62:d5:cd:3a: 3d:8e:d5:09:97:c2:27:8b:da:86:41:09:a8:28:a5:a8:6b:d4: 84:85:bc:ee:67:0c:09:c3:5d:e8:d9:7a:ea:ff:11:a8:1c:14: 4b:f5:b0:0c:e7:78:1e:f0:b5:83:e6:6f:89:3b:87:48:ec:93: 02:a4:91:ff:bd:19:e8:83:22:07:af:52:f2:84:d2:e1:c7:cb: 97:70:14:df:ea:ec:dc:da:1b:8e:9c:16:2d:da:61:39:0f:6f: 37:6d:36:e6:39:ce:a7:e5:26:70:0a:76:a8:09:71:53:44:73: 8d:98:99:54:28:02:97:1d:3f:91:af:86:2f:83:b4:b9:3e:70: d4:1e:3f:95:cf:2f:41:c2:53:79:33:df:79:fd:01:22:a6:8c: 52:87:2c:7e:cd:fc:53:06:30:c5:7a:a6:7b:af:30:43:21:6a: 05:a2:18:07:ae:30:74:b5:00:07:5d:db:9e:ff:22:10:7f:c9: b2:91:9c:7b:62:6c:99:95:77:4b:42:60:be:c9:d5:f0:0c:f9: ee:e3:0b:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F81uAGHDTRWg1TgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA0YzAzN2QtZjA2ZC00YzAxLTlhZjUtZWYwYjJhZDNl ZGU4MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MWY0ZDE5MjktMTA3MS00NzA1LWJkOWEtMTY5NzQ4ZjdjMGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7ne2q++1uVwKLrha/O3WW9yFDP/qWC6/Y/G iQYalD4me7j50EElrtYeFaOEuE/pzVOBLg6jhX6ME50v8IV++q6zgFNYJGNyZVqC Oiif4keZ22Zms9m3J+vv4k/UcCBZirNqowhshMKEbIONfFmZZXwhG602Kwq/6FM4 zPD1aEoDyZubJc4b1AUKTRmksuYv6X8mnS2/dwFa308/Ut8UpvvC3nBHWxp6IJiQ wnyqzWDKwplxoMIJP4ka61eqcou/BthMqr3NAJu20vQ3Z8akGsJo4STw/CajxMav 1cJdoQ6EC5u0bw/wXm0tKJrCa1j0WK1b1r6YtMJW2QsrdQTt+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZZA3UWY7qxLwsWRnhpfnBtehE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lMDRj MDM3ZC1mMDZkLTRjMDEtOWFmNS1lZjBiMmFkM2VkZTgvZGQ1MWM2MjgtYTBiZS0z NGExLTg2NmQtYWQwMjEwZmFmZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTA0YzAzN2QtZjA2ZC00YzAxLTlh ZjUtZWYwYjJhZDNlZGU4L2UwNGMwMzdkLWYwNmQtNGMwMS05YWY1LWVmMGIyYWQz ZWRlOC5jcmwwHwYDVR0jBBgwFoAUg1v50PJ9ZS2Whi/oVqq6HZ/FYIMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lMDRjMDM3ZC1mMDZkLTRjMDEtOWFmNS1lZjBi MmFkM2VkZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkljQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOXFwPyVijp2M1hCVO4jPrrTG9YP1eDa8xOxlbhTk0oIa7G72gYj9Ev aZaRmfx+64psYtXNOj2O1QmXwieL2oZBCagopahr1ISFvO5nDAnDXejZeur/Eagc FEv1sAzneB7wtYPmb4k7h0jskwKkkf+9GeiDIgevUvKE0uHHy5dwFN/q7NzaG46c Fi3aYTkPbzdtNuY5zqflJnAKdqgJcVNEc42YmVQoApcdP5Gvhi+DtLk+cNQeP5XP L0HCU3kz33n9ASKmjFKHLH7N/FMGMMV6pnuvMEMhagWiGAeuMHS1AAdd257/IhB/ ybKRnHtibJmVd0tCYL7J1fAM+e7jCwc= -----END CERTIFICATE-----Generated at Mon Sep 28 06:02:42 2026 by rpki-client