$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/4305d133-1886-3cea-8f72-7f6bc4e75a43.roa File: 4305d133-1886-3cea-8f72-7f6bc4e75a43.roa (raw, json) Hash identifier: 7JyaFEmQjN/J2wC2KWQwpEYkhnDKGbAiodcUb73m/RU= Subject key identifier: F2:C8:8C:72:A9:2F:A0:94:B3:9C:12:49:B7:32:32:49:0A:12:32:11 Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F4328584F497510ED900F315E2C364740 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/4305d133-1886-3cea-8f72-7f6bc4e75a43.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 69.7.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:10:ed:90:0f:31:5e:2c:36:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ef9a2973-5a84-4bdd-8871-b88b26db9014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fc:60:36:74:24:5d:f8:04:f1:64:59:d0:08: bd:d2:75:0e:ce:e3:a7:f8:de:4a:86:fa:7c:0a:62: fc:3e:96:ab:2c:0e:c4:47:3a:23:86:3a:e1:51:3f: 6f:ce:79:c9:88:72:9d:b7:15:cd:37:af:04:cb:5f: bd:8c:4e:1a:d5:4a:1d:06:be:1e:b8:79:08:6c:df: 45:67:a1:9a:37:58:42:81:10:b6:2c:91:a3:3d:b6: a5:21:64:33:54:94:8a:ca:d3:07:16:70:9e:ec:e0: 83:16:9e:94:71:9e:87:a4:d6:bd:41:fa:86:2f:2e: 96:e7:35:79:6e:4e:e0:af:0e:97:25:6f:7e:4c:24: b0:10:95:f0:e7:98:36:50:9d:2a:a3:d5:aa:5e:b4: b8:2d:c8:5f:d9:d4:63:4f:aa:bc:73:7b:61:5e:01: 5a:cf:8e:90:3c:3d:4b:ba:d1:53:92:44:c5:7a:97: 95:51:bd:95:4a:84:19:9a:9e:95:ea:63:17:cb:27: 0c:1e:08:fc:3d:2b:59:c3:a9:19:ed:2e:3b:8f:93: d8:93:f3:d9:cf:33:54:f7:a0:06:bf:c2:3f:c8:fc: fc:df:4d:50:55:66:a2:39:2f:4c:8b:c8:03:d0:14: 13:c8:a9:6d:77:d6:93:83:3d:59:36:45:98:cb:94: 88:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C8:8C:72:A9:2F:A0:94:B3:9C:12:49:B7:32:32:49:0A:12:32:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/4305d133-1886-3cea-8f72-7f6bc4e75a43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 69.7.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:06:9f:6f:35:0b:a5:1a:86:00:ee:d4:f3:80:a1:04:3b:c6: 4b:86:d5:b7:c6:8e:7c:0d:39:18:40:7e:12:ca:c5:04:7e:2f: 79:8b:9c:6f:78:98:91:28:4a:81:8b:98:bc:f3:33:ee:38:e4: 07:fd:44:0f:4b:ef:df:95:57:73:19:df:0b:ff:8c:b5:5a:8a: f9:7c:d6:82:b1:fa:0b:49:55:1f:54:75:fa:4b:55:4c:25:7d: 14:d6:af:c6:41:d2:68:40:c3:65:d5:34:d8:81:e1:3a:18:77: 76:bf:89:e2:15:c7:cd:18:15:c2:96:d8:80:ee:1e:6c:ed:66: f3:a2:f3:51:f7:28:d3:99:2c:7d:65:75:9a:c0:c4:95:41:a0: a8:48:f3:ae:07:38:fc:d8:a0:7c:ef:84:36:b0:7d:ed:01:fc: a1:08:ca:c1:c8:cd:0c:56:65:53:19:02:8e:f8:19:47:17:30: 6e:4a:3a:8f:16:51:41:44:c0:bb:20:ed:05:c9:cb:bd:57:8d: fa:26:10:9f:20:1f:df:58:b0:63:54:5f:2b:cf:60:6f:ef:83: 91:68:dc:9c:7c:d8:8a:2f:a4:3b:bb:b4:1c:98:ae:41:4f:9c: 3b:85:04:80:52:9d:9b:51:9f:0e:c2:d2:18:c5:47:45:90:0c: 0b:d3:bc:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdRDtkA8xXiw2R0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWY5YTI5NzMtNWE4NC00YmRkLTg4NzEtYjg4YjI2ZGI5MDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vxgNnQkXfgE8WRZ0Ai90nUOzuOn+N5Khvp8 CmL8PparLA7ERzojhjrhUT9vznnJiHKdtxXNN68Ey1+9jE4a1UodBr4euHkIbN9F Z6GaN1hCgRC2LJGjPbalIWQzVJSKytMHFnCe7OCDFp6UcZ6HpNa9QfqGLy6W5zV5 bk7grw6XJW9+TCSwEJXw55g2UJ0qo9WqXrS4Lchf2dRjT6q8c3thXgFaz46QPD1L utFTkkTFepeVUb2VSoQZmp6V6mMXyycMHgj8PStZw6kZ7S47j5PYk/PZzzNU96AG v8I/yPz8301QVWaiOS9Mi8gD0BQTyKltd9aTgz1ZNkWYy5SI2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLIjHKpL6CUs5wSSbcyMkkKEjIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvNDMwNWQxMzMtMTg4Ni0z Y2VhLThmNzItN2Y2YmM0ZTc1YTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQdMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8Gn281C6UahgDu1POAoQQ7xkuG1bfGjnwNORhAfhLKxQR+L3mLnG94 mJEoSoGLmLzzM+445Af9RA9L79+VV3MZ3wv/jLVaivl81oKx+gtJVR9UdfpLVUwl fRTWr8ZB0mhAw2XVNNiB4ToYd3a/ieIVx80YFcKW2IDuHmztZvOi81H3KNOZLH1l dZrAxJVBoKhI864HOPzYoHzvhDawfe0B/KEIysHIzQxWZVMZAo74GUcXMG5KOo8W UUFEwLsg7QXJy71XjfomEJ8gH99YsGNUXyvPYG/vg5Fo3Jx82IovpDu7tByYrkFP nDuFBIBSnZtRnw7C0hjFR0WQDAvTvKQ= -----END CERTIFICATE-----Generated at Sun Oct 11 02:21:10 2026 by rpki-client