$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa File: d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa (raw, json) Hash identifier: X41mLDDvtA0qkZ3I2do7JbIuepNXng8i2QUP2v4W1gs= Subject key identifier: 4F:26:3A:E9:FB:F0:8B:36:0D:07:63:61:4F:AF:EC:CE:D2:0B:35:6F Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42 Certificate serial: 010D0C9F4328584F9A68745D95ADC3FE9A74C880 Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 376 IP address blocks: 132.213.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:74:5d:95:ad:c3:fe:9a:74:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=3e13336e-15a4-4b19-95e9-ab1043fb6721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e6:59:59:ba:7b:9f:af:3a:61:53:89:76:43: 9b:28:ed:c0:a5:4f:1f:bd:e6:33:f1:db:3c:f9:c3: 56:72:7c:aa:a1:7f:e4:47:9a:fc:a8:e6:cc:73:29: 5c:c5:f1:1d:42:2f:78:ad:6a:14:79:de:3c:47:a2: 02:f2:2c:1c:d3:70:6e:30:4b:d3:40:78:d7:c3:a3: 39:11:48:5d:13:8e:df:f7:c5:b9:ba:83:1e:85:68: f3:c7:96:04:d4:46:83:9c:07:d4:ac:3f:28:b7:d0: 73:cb:dd:dd:91:85:05:69:ea:63:e5:2d:5e:6b:7b: 5c:0f:14:5a:c4:bd:b2:c8:d4:62:25:34:1a:43:9b: f4:ea:10:d2:a6:38:64:ca:83:57:59:f4:69:1b:af: ee:86:6a:99:fe:fe:1c:d7:90:79:ec:55:cf:f7:29: 61:e0:0b:d6:39:37:23:94:52:01:13:3a:6b:d0:98: d6:ea:b3:66:07:bb:6e:45:d3:0b:a6:8f:73:a4:4a: aa:64:2f:bf:50:55:0c:e7:54:d6:66:07:dc:04:f0: 68:75:99:e8:16:a2:70:03:6e:76:65:d7:4d:f1:b4: da:79:32:13:32:56:cb:1c:73:c8:03:63:c9:2d:fa: b3:7e:e9:8d:a3:17:93:29:4a:21:7a:0b:6c:7d:b4: 10:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:26:3A:E9:FB:F0:8B:36:0D:07:63:61:4F:AF:EC:CE:D2:0B:35:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl X509v3 Authority Key Identifier: keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer sbgp-ipAddrBlock: critical IPv4: 132.213.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:d8:77:f8:36:ed:2c:36:19:98:6e:7e:5e:a7:5e:ff:a0:b8: 1c:e5:14:12:14:11:40:6a:11:a1:e0:df:f1:9b:1b:38:9e:c8: 4c:f8:9d:c9:1d:e8:63:8f:fb:62:59:cb:6c:f0:f5:7e:ea:98: 01:d9:ae:e8:20:ca:54:21:9d:16:f1:f3:f1:00:a7:2e:a2:2f: 2e:a3:2f:17:9c:9c:33:ef:0a:b4:c5:84:4d:cc:8a:c1:68:3b: 49:6e:73:d6:95:09:91:2b:58:a5:16:4b:8d:3a:49:66:f2:d1: d9:46:b7:be:2e:b4:d2:1c:ac:fa:70:50:c0:17:5f:81:d2:5c: cd:19:01:5c:49:f3:36:b7:bc:cb:a0:cd:2d:b6:0b:41:3e:a5: 6b:f6:9e:63:f4:70:a8:92:72:de:86:d9:9c:ea:86:db:f2:73: c4:7b:ee:b1:53:52:c8:15:b5:78:74:cb:b5:04:9d:9a:46:f4: 00:8d:b9:33:b1:17:be:cd:bc:d7:e5:f3:26:14:ba:fb:a5:55: 5b:69:36:88:4c:dc:f5:d4:fe:9d:b2:ce:9c:ab:63:c4:95:24: 4b:8f:9c:8c:3a:f8:ea:50:51:35:05:cd:c4:e0:95:2e:8e:a0: 1f:12:33:f0:f4:c6:59:4e:48:2c:78:c4:a9:0f:43:7d:73:66: ea:e4:b0:5e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+aaHRdla3D/pp0yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdlYzQ0N2EtOTE3MC00ZTExLWJhODAtMWFhY2E3NmZj ZDQyMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk M2UxMzMzNmUtMTVhNC00YjE5LTk1ZTktYWIxMDQzZmI2NzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOZZWbp7n686YVOJdkObKO3ApU8fveYz8ds8 +cNWcnyqoX/kR5r8qObMcylcxfEdQi94rWoUed48R6IC8iwc03BuMEvTQHjXw6M5 EUhdE47f98W5uoMehWjzx5YE1EaDnAfUrD8ot9Bzy93dkYUFaepj5S1ea3tcDxRa xL2yyNRiJTQaQ5v06hDSpjhkyoNXWfRpG6/uhmqZ/v4c15B57FXP9ylh4AvWOTcj lFIBEzpr0JjW6rNmB7tuRdMLpo9zpEqqZC+/UFUM51TWZgfcBPBodZnoFqJwA252 ZddN8bTaeTITMlbLHHPIA2PJLfqzfumNoxeTKUohegtsfbQQrwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFE8mOun78Is2DQdjYU+v7M7SCzVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82N2Vj NDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFjYTc2ZmNkNDIvZDNiYmZiOGMtNGJiMy0z NTRjLThlMWItZmM4ZWVlNGZjM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjdlYzQ0N2EtOTE3MC00ZTExLWJh ODAtMWFhY2E3NmZjZDQyLzY3ZWM0NDdhLTkxNzAtNGUxMS1iYTgwLTFhYWNhNzZm Y2Q0Mi5jcmwwHwYDVR0jBBgwFoAU1/68eoDiDVphTAxi6PSMkDn+TL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82N2VjNDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFj YTc2ZmNkNDIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhNUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAsth3+DbtLDYZmG5+Xqde/6C4HOUUEhQRQGoRoeDf8ZsbOJ7ITPidyR3o Y4/7YlnLbPD1fuqYAdmu6CDKVCGdFvHz8QCnLqIvLqMvF5ycM+8KtMWETcyKwWg7 SW5z1pUJkStYpRZLjTpJZvLR2Ua3vi600hys+nBQwBdfgdJczRkBXEnzNre8y6DN LbYLQT6la/aeY/RwqJJy3obZnOqG2/JzxHvusVNSyBW1eHTLtQSdmkb0AI25M7EX vs281+XzJhS6+6VVW2k2iEzc9dT+nbLOnKtjxJUkS4+cjDr46lBRNQXNxOCVLo6g HxIz8PTGWU5ILHjEqQ9DfXNm6uSwXg== -----END CERTIFICATE-----Generated at Sun Nov 15 20:56:04 2026 by rpki-client