$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2b961950-db61-32a4-a94c-3c586427a692.roa File: 2b961950-db61-32a4-a94c-3c586427a692.roa (raw, json) Hash identifier: KpDKfByml2jtXDeve7OuA+JxNy6iXLjQGQ39NjhU734= Subject key identifier: 37:C0:37:C5:6A:BB:D8:21:50:BD:19:0F:7C:57:07:A8:2C:A1:A4:6B Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584F63F80B02833E7AAE685E0AC0 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2b961950-db61-32a4-a94c-3c586427a692.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 62943 IP address blocks: 209.152.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:0b:02:83:3e:7a:ae:68:5e:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=0fdaa7fa-0ab3-4633-a926-11542a84a905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:0e:4b:b5:64:85:62:f6:36:a1:b0:8b:c1: dd:20:46:99:03:fb:fb:21:21:14:4d:25:a5:79:80: 9c:95:8f:f4:dd:d7:23:5c:35:68:30:41:95:ba:84: 65:6c:83:3f:45:f1:f1:a4:ea:f2:69:da:a2:be:f8: 96:d4:1a:69:4a:c0:21:a3:24:b2:0a:bf:8d:a5:25: e5:48:75:18:13:f7:64:0e:08:20:48:1a:b5:a4:02: 79:fd:7c:4c:06:d5:a5:07:d6:f4:f0:ce:62:a1:90: ee:7f:c9:90:d1:2a:ad:1a:eb:ca:cc:e1:3e:ec:b8: f5:a7:11:83:c5:4d:fc:60:9d:9d:91:05:7e:c1:83: 19:86:70:ed:eb:19:ab:7e:2f:bc:4d:e9:42:73:48: 1d:28:87:5a:b0:b1:a0:fa:a7:6a:08:da:77:2c:d3: eb:d4:ef:11:86:d6:f1:97:48:2f:f6:0f:33:68:6f: e8:96:91:4d:95:37:14:e7:47:d8:f1:ad:bb:6f:39: 4b:92:5f:6c:13:1a:37:c9:67:34:2d:15:5a:06:2b: a3:fa:da:a7:42:92:3b:f4:4c:b2:be:38:3f:7f:6b: 65:55:2f:30:ff:3b:f5:da:6a:9e:d5:06:f4:8b:70: 22:d8:79:b1:8c:e7:84:ba:90:a3:1e:17:1c:be:26: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C0:37:C5:6A:BB:D8:21:50:BD:19:0F:7C:57:07:A8:2C:A1:A4:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2b961950-db61-32a4-a94c-3c586427a692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 209.152.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ae:35:de:ea:44:ab:0d:de:4c:2f:1d:f2:87:18:f1:f8:05: e1:48:21:d2:c1:22:4a:4d:e2:3d:b0:a2:15:19:03:19:f3:2e: e5:cd:2c:05:d8:fa:61:d7:04:8e:4d:d5:4e:12:da:ba:03:6e: bb:9c:e8:f2:f8:20:2c:68:ee:3c:7b:6d:db:c8:4a:35:23:85: eb:57:5e:da:44:95:bd:33:e5:8b:f6:19:23:60:e9:88:91:3a: dc:71:e1:90:9b:e7:af:35:e1:f3:76:9d:cd:24:f2:08:a7:f8: 69:95:cb:f2:30:9a:f8:b7:16:95:c8:90:ba:89:73:8e:a7:7c: 8c:75:27:3e:67:2d:5d:da:57:56:42:5e:95:b1:dd:3b:0c:c2: 05:6f:84:ba:00:89:1a:4e:78:de:1f:18:3a:7f:20:44:5a:4d: 7b:46:91:90:a2:3c:c0:2f:ae:42:73:4a:e3:62:54:e7:c8:5b: 77:4a:c5:79:08:a0:58:79:25:8c:29:be:64:18:81:b4:a4:59: ba:90:65:40:92:74:fd:7a:d2:eb:9c:77:e5:f8:40:24:45:61: ef:8c:bf:c9:11:a3:05:90:fa:2f:6c:0c:3a:e6:9d:61:d5:20: 2f:be:5b:6c:54:42:a6:4d:13:82:6f:83:f4:f4:53:c4:c6:7e: 5f:57:be:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+AsCgz56rmheCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MGZkYWE3ZmEtMGFiMy00NjMzLWE5MjYtMTE1NDJhODRhOTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi4OS7VkhWL2NqGwi8HdIEaZA/v7ISEUTSWl eYCclY/03dcjXDVoMEGVuoRlbIM/RfHxpOryadqivviW1BppSsAhoySyCr+NpSXl SHUYE/dkDgggSBq1pAJ5/XxMBtWlB9b08M5ioZDuf8mQ0SqtGuvKzOE+7Lj1pxGD xU38YJ2dkQV+wYMZhnDt6xmrfi+8TelCc0gdKIdasLGg+qdqCNp3LNPr1O8Rhtbx l0gv9g8zaG/olpFNlTcU50fY8a27bzlLkl9sExo3yWc0LRVaBiuj+tqnQpI79Eyy vjg/f2tlVS8w/zv12mqe1Qb0i3Ai2HmxjOeEupCjHhccviborQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfAN8Vqu9ghUL0ZD3xXB6gsoaRrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMmI5NjE5NTAtZGI2MS0z MmE0LWE5NGMtM2M1ODY0MjdhNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGuNd7qRKsN3kwvHfKHGPH4BeFIIdLBIkpN4j2wohUZAxnzLuXNLAXY +mHXBI5N1U4S2roDbruc6PL4ICxo7jx7bdvISjUjhetXXtpElb0z5Yv2GSNg6YiR Otxx4ZCb56814fN2nc0k8gin+GmVy/Iwmvi3FpXIkLqJc46nfIx1Jz5nLV3aV1ZC XpWx3TsMwgVvhLoAiRpOeN4fGDp/IERaTXtGkZCiPMAvrkJzSuNiVOfIW3dKxXkI oFh5JYwpvmQYgbSkWbqQZUCSdP160uucd+X4QCRFYe+Mv8kRowWQ+i9sDDrmnWHV IC++W2xUQqZNE4Jvg/T0U8TGfl9Xvh8= -----END CERTIFICATE-----Generated at Sun Oct 11 08:13:19 2026 by rpki-client