$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/832e9cf3-7676-3b39-af93-a7eb74275a8e.roa File: 832e9cf3-7676-3b39-af93-a7eb74275a8e.roa (raw, json) Hash identifier: ljTYxcch5sWRxwwqT8tZIo52EJaxJjDQeT8VWKK7p68= Subject key identifier: 01:A3:96:D5:51:27:45:91:D0:65:BB:3B:77:D9:1F:CA:02:DE:15:D8 Certificate issuer: /CN=44e39417-e931-4514-89dc-a42b5b458fb5 Certificate serial: 010D0C9F4328584F1E2CFA8F6C2630F10C928CE0 Authority key identifier: 44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/832e9cf3-7676-3b39-af93-a7eb74275a8e.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 8075 IP address blocks: 168.137.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:fa:8f:6c:26:30:f1:0c:92:8c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e39417-e931-4514-89dc-a42b5b458fb5 Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=19abd478-5656-48d5-9918-6ba1ce13ebfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d1:94:95:5c:0e:61:34:9f:23:ad:16:a1:b2: 40:29:c9:8a:90:31:57:31:81:42:30:2b:6a:ab:0b: 15:ea:3d:26:3d:92:19:9f:67:81:39:d0:41:3d:71: 09:da:1c:35:c5:fa:7d:f0:02:84:48:af:35:66:84: a2:d4:06:52:fa:90:5a:e9:f5:12:dc:23:af:23:57: d0:c1:7a:ec:8b:a0:65:73:6c:c0:e9:f1:77:15:cc: a7:39:4d:e0:24:67:0b:c8:ba:33:6f:c4:60:38:db: 75:d8:16:72:a6:53:6f:77:d8:a2:b7:87:3c:6a:96: 8a:0b:69:24:6e:fd:55:ae:db:64:95:8f:18:88:a3: c1:7b:76:f0:4c:40:19:02:82:c2:93:ea:04:bd:68: 58:f5:e5:63:b3:73:df:a4:60:8f:fd:fa:6d:e7:94: 99:0b:2f:08:cf:67:8b:14:4f:7e:a2:e7:a0:ae:71: a9:8b:a9:63:8d:af:23:93:c8:3b:8a:5b:1f:4c:17: 32:b5:ce:e5:c7:d2:d9:4f:b1:20:48:ed:9a:56:46: df:4b:52:3c:58:89:47:58:f8:e5:1c:40:26:f6:5f: 67:80:81:c0:eb:32:f8:23:34:5e:e0:ad:b4:7a:6a: 05:e1:15:6e:8d:71:67:a4:16:fe:12:cd:38:05:c9: 1b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A3:96:D5:51:27:45:91:D0:65:BB:3B:77:D9:1F:CA:02:DE:15:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/832e9cf3-7676-3b39-af93-a7eb74275a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl X509v3 Authority Key Identifier: keyid:44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer sbgp-ipAddrBlock: critical IPv4: 168.137.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c5:c6:08:49:03:9e:ad:21:97:c3:18:69:d4:07:bf:13:01: b0:43:5a:16:50:18:a9:db:a1:68:fb:1c:9d:1c:99:2f:b8:f5: 5d:33:8e:03:18:23:aa:af:93:8b:45:8f:81:55:44:db:11:b9: 7b:2f:6f:ce:0f:76:02:de:63:60:52:10:d6:7c:8b:1e:dd:12: 40:0b:a3:fc:93:e9:ec:a2:80:02:bb:4d:a7:97:41:4c:5b:c9: b9:36:88:54:67:46:db:23:bd:e8:6f:00:c6:ad:b3:f6:dc:3f: 8a:e6:46:29:b0:af:ae:54:c8:37:9e:3e:87:4c:74:7e:15:ae: b5:34:53:20:4b:b2:be:22:a0:88:c5:d7:d1:83:f4:0d:84:76: ef:8b:e1:ce:98:4d:2f:71:5c:8d:3b:ee:8c:37:51:86:ba:db: 89:a6:cf:d6:cd:73:26:2e:81:08:a4:5e:c6:83:72:23:c9:97: c9:57:4e:37:54:aa:0f:ec:40:e0:0d:cd:ab:e1:54:da:bd:7b: af:74:7c:71:dd:79:8b:0d:65:ea:fd:37:42:fd:28:5c:6c:ad: 4c:f2:f1:54:5c:e5:63:fc:94:03:72:ef:cc:15:4a:07:62:dc: ef:05:4d:f7:4a:2c:3f:3d:71:74:86:51:5a:81:d5:49:42:8e: 86:7d:01:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPqPbCYw8QySjOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRlMzk0MTctZTkzMS00NTE0LTg5ZGMtYTQyYjViNDU4 ZmI1MB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk MTlhYmQ0NzgtNTY1Ni00OGQ1LTk5MTgtNmJhMWNlMTNlYmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdGUlVwOYTSfI60WobJAKcmKkDFXMYFCMCtq qwsV6j0mPZIZn2eBOdBBPXEJ2hw1xfp98AKESK81ZoSi1AZS+pBa6fUS3COvI1fQ wXrsi6Blc2zA6fF3FcynOU3gJGcLyLozb8RgONt12BZyplNvd9iit4c8apaKC2kk bv1VrttklY8YiKPBe3bwTEAZAoLCk+oEvWhY9eVjs3PfpGCP/fpt55SZCy8Iz2eL FE9+ouegrnGpi6ljja8jk8g7ilsfTBcytc7lx9LZT7EgSO2aVkbfS1I8WIlHWPjl HEAm9l9ngIHA6zL4IzRe4K20emoF4RVujXFnpBb+Es04BckbPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGjltVRJ0WR0GW7O3fZH8oC3hXYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80NGUz OTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJiNWI0NThmYjUvODMyZTljZjMtNzY3Ni0z YjM5LWFmOTMtYTdlYjc0Mjc1YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDRlMzk0MTctZTkzMS00NTE0LTg5 ZGMtYTQyYjViNDU4ZmI1LzQ0ZTM5NDE3LWU5MzEtNDUxNC04OWRjLWE0MmI1YjQ1 OGZiNS5jcmwwHwYDVR0jBBgwFoAURJ2ytRzKTIx3RJxmd0dmhKLGX/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80NGUzOTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJi NWI0NThmYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHFxghJA56tIZfDGGnUB78TAbBDWhZQGKnboWj7HJ0cmS+49V0zjgMY I6qvk4tFj4FVRNsRuXsvb84PdgLeY2BSENZ8ix7dEkALo/yT6eyigAK7TaeXQUxb ybk2iFRnRtsjvehvAMats/bcP4rmRimwr65UyDeePodMdH4VrrU0UyBLsr4ioIjF 19GD9A2Edu+L4c6YTS9xXI077ow3UYa624mmz9bNcyYugQikXsaDciPJl8lXTjdU qg/sQOANzavhVNq9e690fHHdeYsNZer9N0L9KFxsrUzy8VRc5WP8lANy78wVSgdi 3O8FTfdKLD89cXSGUVqB1UlCjoZ9Ad0= -----END CERTIFICATE-----Generated at Sat Oct 10 23:30:47 2026 by rpki-client