$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b5fb261-070a-3af2-aaa8-b8a27287959b.roa File: 3b5fb261-070a-3af2-aaa8-b8a27287959b.roa (raw, json) Hash identifier: gyvjwCKaW1/L9Y+KfoUJgjQwez+D2wtB7yZ6E4Zyr6s= Subject key identifier: 6C:34:34:21:AD:D4:C0:8A:C9:FC:DE:73:58:E3:24:62:8A:24:FD:21 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7B750EEA2FBC2EF01EED9 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b5fb261-070a-3af2-aaa8-b8a27287959b.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 144.33.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:b7:50:ee:a2:fb:c2:ef:01:ee:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=8aea1218-5cf5-496d-9b25-81fad3752dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:ac:fc:cd:62:cd:9d:73:13:dc:75:95:81: ef:00:87:f3:f9:d4:56:01:40:83:86:a6:8a:46:3b: e7:4e:4b:da:51:db:8f:22:ba:f3:52:50:e5:30:9f: a1:6c:ab:06:4b:07:b9:c8:ff:97:e2:71:36:74:58: 5a:36:c3:e3:71:b2:1b:9a:2d:cd:0d:ff:07:06:2c: 36:7a:21:80:1d:bb:67:53:55:8b:25:f7:b1:55:06: f5:b4:cb:cd:4d:89:47:28:7c:6d:42:c0:af:98:ed: b5:f3:24:a2:cd:30:ff:97:88:11:10:ba:4b:63:6c: 21:aa:ae:cb:5d:6b:41:a3:07:08:61:6f:50:72:cd: 01:8f:96:2d:80:21:7d:18:5a:70:f8:6c:f9:b2:4c: e9:74:7e:6b:25:ba:7c:48:45:53:0d:79:b7:b7:0f: 0b:c5:65:a7:10:f3:10:97:b2:83:d7:f5:cc:7d:26: 07:65:9e:33:f4:83:40:ae:82:3a:b2:a3:53:c1:d6: 77:6f:46:5c:a5:a4:ee:65:a7:10:2b:ae:41:cb:d2: c6:f9:11:ac:0a:58:c3:de:91:09:11:58:32:0d:7f: 20:3e:27:2b:67:f2:af:af:39:5a:4f:a0:8c:f7:1c: 0e:68:d2:31:6c:76:67:af:8b:66:0a:b0:e8:81:66: 07:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:34:34:21:AD:D4:C0:8A:C9:FC:DE:73:58:E3:24:62:8A:24:FD:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3b5fb261-070a-3af2-aaa8-b8a27287959b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 144.33.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:30:c2:ac:6d:74:21:04:ec:6b:e2:51:fb:83:ea:5a:60:e1: 1d:a3:33:c2:76:52:51:12:72:ef:ee:63:68:80:13:62:b0:bd: e2:71:c3:0c:2f:61:8b:9f:15:19:23:92:8d:f4:37:54:b0:a0: f5:2a:5c:78:77:4b:78:09:df:e6:a1:e4:e9:58:40:c5:20:6e: dd:7a:c4:3e:ed:62:27:c5:db:6f:b5:db:79:eb:5c:60:3b:ef: 0e:1b:38:16:58:f5:37:1c:79:3a:d7:f6:aa:93:18:e3:4b:d5: f6:72:67:9c:71:14:f1:e7:83:a6:66:e5:29:18:1c:a9:68:31: 64:fd:23:c2:96:f4:4b:99:e7:71:eb:ca:0e:4d:c1:48:ac:cc: be:9c:d4:79:86:8a:74:62:15:f2:8a:6b:c7:a2:49:5c:ec:fa: c5:07:c2:6e:b9:b0:8a:75:7d:23:e9:34:89:f3:aa:d9:1e:68: 94:56:c6:e8:f3:4c:33:2f:0e:e2:e7:66:71:d9:48:7d:bf:a9: d9:82:62:4f:a5:8c:56:b3:e7:b1:e6:06:2b:72:81:35:eb:2d: 04:49:08:6b:62:65:74:3a:75:7c:fb:2b:be:ff:8a:f8:c5:dc: 80:06:29:3d:72:c7:a6:a8:37:c0:a4:10:a1:60:f9:a6:8e:48: b3:69:72:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g97dQ7qL7wu8B7tkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OGFlYTEyMTgtNWNmNS00OTZkLTliMjUtODFmYWQzNzUyZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMys/M1izZ1zE9x1lYHvAIfz+dRWAUCDhqaK RjvnTkvaUduPIrrzUlDlMJ+hbKsGSwe5yP+X4nE2dFhaNsPjcbIbmi3NDf8HBiw2 eiGAHbtnU1WLJfexVQb1tMvNTYlHKHxtQsCvmO218ySizTD/l4gRELpLY2whqq7L XWtBowcIYW9Qcs0Bj5YtgCF9GFpw+Gz5skzpdH5rJbp8SEVTDXm3tw8LxWWnEPMQ l7KD1/XMfSYHZZ4z9INAroI6sqNTwdZ3b0ZcpaTuZacQK65By9LG+RGsCljD3pEJ EVgyDX8gPicrZ/KvrzlaT6CM9xwOaNIxbHZnr4tmCrDogWYHUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGw0NCGt1MCKyfzec1jjJGKKJP0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2I1ZmIyNjEtMDcwYS0z YWYyLWFhYTgtYjhhMjcyODc5NTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCEtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAwwqxtdCEE7GviUfuD6lpg4R2jM8J2UlEScu/uY2iAE2KwveJxwwwv YYufFRkjko30N1SwoPUqXHh3S3gJ3+ah5OlYQMUgbt16xD7tYifF22+123nrXGA7 7w4bOBZY9TcceTrX9qqTGONL1fZyZ5xxFPHng6Zm5SkYHKloMWT9I8KW9EuZ53Hr yg5NwUiszL6c1HmGinRiFfKKa8eiSVzs+sUHwm65sIp1fSPpNInzqtkeaJRWxujz TDMvDuLnZnHZSH2/qdmCYk+ljFaz57HmBitygTXrLQRJCGtiZXQ6dXz7K77/ivjF 3IAGKT1yx6aoN8CkEKFg+aaOSLNpcl0= -----END CERTIFICATE-----Generated at Tue Sep 22 11:55:32 2026 by rpki-client