$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/043a9f3b-fd6b-3436-949d-e9178448946d.roa File: 043a9f3b-fd6b-3436-949d-e9178448946d.roa (raw, json) Hash identifier: chuekViw9qlmlDfeWE8hvvhQE6jUJz9hlLrH8Dy0KEk= Subject key identifier: 8D:DC:32:94:41:FE:4C:4E:3F:6B:08:53:69:5B:AB:17:B4:40:50:5C Certificate issuer: /CN=f5b47d91-eb0d-4085-9bc2-452042c0b313 Certificate serial: 010D0C9F4328584F2395D0FDF717DC7E11A36580 Authority key identifier: DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/043a9f3b-fd6b-3436-949d-e9178448946d.roa Signing time: Fri 11 Sep 2026 11:30:36 +0000 ROA not before: Fri 11 Sep 2026 11:30:36 +0000 ROA not after: Thu 10 Dec 2026 12:30:36 +0000 asID: 31775 IP address blocks: 69.194.148.0/22 maxlen: 24 2607:2640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:95:d0:fd:f7:17:dc:7e:11:a3:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5b47d91-eb0d-4085-9bc2-452042c0b313 Validity Not Before: Sep 11 11:30:36 2026 GMT Not After : Dec 10 12:30:36 2026 GMT Subject: CN=b99e4bdf-6020-4af0-a540-138f3c5e7dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:38:41:df:d7:aa:32:ae:6d:f7:19:96:48:ab: 9a:e9:13:bb:e5:1e:04:93:80:d9:38:c9:50:8a:90: 81:30:32:53:30:27:f6:67:eb:32:93:8f:b0:0f:3d: 88:c3:76:13:ec:ce:f9:6d:f6:cd:40:c8:0e:c0:e6: 0f:e8:77:6b:b7:0b:ed:dc:b5:a0:80:38:c8:b6:84: 6d:ec:0b:96:0e:f7:30:0c:2e:48:9b:41:b5:6e:0c: a1:60:ae:0f:a7:b9:79:f2:dd:5b:b0:04:e3:2e:bf: 9f:d8:49:26:06:f3:cd:c7:7b:75:2e:3a:11:a6:a0: 14:9f:3b:53:50:70:01:58:1f:e6:1c:72:84:85:4d: d3:8f:3e:05:d2:f6:31:7e:1f:3a:4d:d1:95:9b:eb: 25:e9:5d:90:66:90:26:a5:c3:c1:cd:eb:41:05:0d: ca:91:93:31:85:04:b1:b2:79:af:5a:41:0d:8c:25: 42:3b:78:b9:ba:76:c9:1d:f8:a9:07:ee:af:8a:50: 15:18:a8:07:1d:b3:19:bd:72:dd:05:c7:af:d9:a1: f6:77:f5:3d:d1:ef:45:6b:30:bd:cd:d5:8d:64:97: 81:d4:35:43:73:1c:d9:9f:81:4c:0e:50:f8:7c:d9: 29:90:a8:af:2f:56:a2:a4:a3:81:54:23:dd:f2:70: 7e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DC:32:94:41:FE:4C:4E:3F:6B:08:53:69:5B:AB:17:B4:40:50:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/043a9f3b-fd6b-3436-949d-e9178448946d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.crl X509v3 Authority Key Identifier: keyid:DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313.cer sbgp-ipAddrBlock: critical IPv4: 69.194.148.0/22 IPv6: 2607:2640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:73:f8:77:46:49:86:fd:2c:c5:eb:34:00:14:be:58:52:46: 70:04:01:c2:e5:3d:e9:b0:79:f6:01:c9:a3:ba:5a:71:40:df: 2b:10:d3:6c:4f:2f:a4:46:ee:75:36:98:3b:90:af:ec:f7:52: 6f:35:e0:3a:10:f9:cb:5d:3f:34:b7:49:c2:39:0e:f5:5a:ac: 2e:3a:dc:34:a1:a3:7d:b1:7a:e2:b7:7a:77:6f:a6:94:ec:71: 5b:73:3a:57:27:af:d3:f9:cd:d8:17:b1:a1:ad:b9:c2:e3:94: 19:78:0b:54:97:48:48:0b:df:18:78:31:7e:34:92:0f:30:27: 4d:2c:b6:94:ef:e8:63:e3:cd:4a:c9:c6:fd:2d:75:69:59:3f: ff:5e:e9:11:a0:af:02:cb:a6:26:80:16:40:ef:a1:70:10:07: dd:c2:3c:5b:a3:3d:e6:3b:29:21:76:0d:4c:d0:21:76:8e:1c: b5:da:a3:86:ea:52:42:59:c9:c7:de:64:bf:52:5c:dc:e3:1c: d2:54:3f:1d:08:c3:fe:c0:30:67:97:69:aa:5d:64:f2:ed:c2: 52:b0:8d:e1:a7:ab:15:e8:1b:a4:11:ab:f7:a5:e8:56:f4:f7: 93:a8:04:e5:1a:bc:66:c0:60:af:d3:50:f4:49:00:e6:4a:49: 60:e0:d1:da -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE8jldD99xfcfhGjZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjViNDdkOTEtZWIwZC00MDg1LTliYzItNDUyMDQyYzBi MzEzMB4XDTI2MDkxMTExMzAzNloXDTI2MTIxMDEyMzAzNlowLzEtMCsGA1UEAxMk Yjk5ZTRiZGYtNjAyMC00YWYwLWE1NDAtMTM4ZjNjNWU3ZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jhB39eqMq5t9xmWSKua6RO75R4Ek4DZOMlQ ipCBMDJTMCf2Z+syk4+wDz2Iw3YT7M75bfbNQMgOwOYP6Hdrtwvt3LWggDjItoRt 7AuWDvcwDC5Im0G1bgyhYK4Pp7l58t1bsATjLr+f2EkmBvPNx3t1LjoRpqAUnztT UHABWB/mHHKEhU3Tjz4F0vYxfh86TdGVm+sl6V2QZpAmpcPBzetBBQ3KkZMxhQSx snmvWkENjCVCO3i5unbJHfipB+6vilAVGKgHHbMZvXLdBcev2aH2d/U90e9FazC9 zdWNZJeB1DVDcxzZn4FMDlD4fNkpkKivL1aipKOBVCPd8nB+lQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFI3cMpRB/kxOP2sIU2lbqxe0QFBcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNWI0 N2Q5MS1lYjBkLTQwODUtOWJjMi00NTIwNDJjMGIzMTMvMDQzYTlmM2ItZmQ2Yi0z NDM2LTk0OWQtZTkxNzg0NDg5NDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjViNDdkOTEtZWIwZC00MDg1LTli YzItNDUyMDQyYzBiMzEzL2Y1YjQ3ZDkxLWViMGQtNDA4NS05YmMyLTQ1MjA0MmMw YjMxMy5jcmwwHwYDVR0jBBgwFoAU3r8DPNKjO/mGRr3tr9wuIfUAwnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNWI0N2Q5MS1lYjBkLTQwODUtOWJjMi00NTIw NDJjMGIzMTMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCRcKUMA0E AgACMAcDBQAmByZAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHNz+HdGSYb9LMXrNAAUvlhSRnAEAcLlPemw efYByaO6WnFA3ysQ02xPL6RG7nU2mDuQr+z3Um814DoQ+ctdPzS3ScI5DvVarC46 3DSho32xeuK3endvppTscVtzOlcnr9P5zdgXsaGtucLjlBl4C1SXSEgL3xh4MX40 kg8wJ00stpTv6GPjzUrJxv0tdWlZP/9e6RGgrwLLpiaAFkDvoXAQB93CPFujPeY7 KSF2DUzQIXaOHLXao4bqUkJZycfeZL9SXNzjHNJUPx0Iw/7AMGeXaapdZPLtwlKw jeGnqxXoG6QRq/el6Fb095OoBOUavGbAYK/TUPRJAOZKSWDg0do= -----END CERTIFICATE-----Generated at Tue Sep 22 19:21:51 2026 by rpki-client