$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/4615cc51-3948-3d24-b3f7-e2f55b1b95cd.roa File: 4615cc51-3948-3d24-b3f7-e2f55b1b95cd.roa (raw, json) Hash identifier: vCa3OP7wWZq+p/sznBf1nY5cBGKHB/7/NS2iAV2fAMU= Subject key identifier: BF:80:EF:AE:19:01:CD:3B:22:2A:C7:6A:A7:11:5F:52:7C:7F:84:F5 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584F3E47DF9611B93DB5212F2700 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/4615cc51-3948-3d24-b3f7-e2f55b1b95cd.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 23465 IP address blocks: 76.164.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:df:96:11:b9:3d:b5:21:2f:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=3e353b1d-1e6f-4812-9b40-3fa29e1bd0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:74:ef:87:40:e7:51:c9:b8:dd:e3:df:dd:1f: 72:f2:ee:4f:6a:77:59:d8:ca:7d:be:ef:de:9f:d6: 80:ff:e8:fb:e6:82:09:a0:0d:ce:ac:72:06:fc:00: 63:c2:d7:8e:92:60:e0:f9:95:71:73:c0:34:27:04: b7:28:89:bf:ef:7e:a1:30:62:4c:30:81:a0:38:cb: 6e:a5:5c:07:9b:ae:1a:4f:d1:95:5d:ab:d4:46:5c: 98:a9:54:17:14:87:c8:23:68:a2:40:74:9d:f7:90: 8f:04:ca:40:46:78:10:0a:8c:94:1e:58:26:1b:62: e4:c0:2b:9c:e4:c7:9e:da:c0:32:39:d9:67:ad:e0: fc:e8:de:4b:cf:e4:b0:e4:b0:16:3e:bf:0a:04:65: 93:a1:b5:ac:72:68:5e:93:59:34:8f:9b:77:70:35: 4a:b9:ea:c3:ad:8c:d4:1f:09:a7:cb:1a:21:8c:ce: 8a:7b:ba:9a:43:96:18:ef:5d:1d:a1:02:e8:98:95: 52:95:cc:ed:c5:24:f4:8b:7d:c1:c7:e0:bf:ec:cb: b1:40:ee:73:3a:ad:8c:82:17:1b:29:07:79:cf:84: e3:af:55:12:59:a8:f9:c9:13:a8:e2:f5:7c:a8:c6: b7:bb:99:c5:ea:82:27:74:a9:68:aa:60:1e:82:98: ce:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:80:EF:AE:19:01:CD:3B:22:2A:C7:6A:A7:11:5F:52:7C:7F:84:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/4615cc51-3948-3d24-b3f7-e2f55b1b95cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 76.164.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d1:44:75:bf:a1:a9:6d:5c:5b:8c:a6:bb:2e:ab:29:bc:4e: e1:3e:60:ba:fc:09:c8:d3:90:dc:7e:11:6d:7d:2b:76:7d:63: 79:86:70:28:4b:2b:f0:24:a1:1c:72:94:2e:51:4c:69:9a:d2: b3:0e:f1:dd:cb:e2:9b:b4:ff:85:90:62:8f:9d:e6:e6:f6:fc: ab:1b:ec:45:d9:4a:14:7e:ce:fc:8d:b2:5e:df:54:f8:6a:8a: df:74:9a:14:cb:87:47:41:8c:10:9a:79:a6:b8:e8:0b:ce:14: 89:e2:0a:d5:1a:d0:4f:6e:99:63:61:34:b9:37:4c:e1:e6:ee: e0:ef:04:33:07:6c:6e:30:2c:18:96:3a:d7:ee:72:16:df:1e: 3c:14:52:19:2f:a5:06:cf:9a:5f:1c:f9:09:c3:10:21:c0:54: d1:33:9d:53:6f:2d:04:69:33:a3:0b:f4:96:1c:8a:c6:8a:c3: fa:db:92:d5:77:0d:98:da:77:f5:1b:42:d6:fe:47:4f:e9:eb: 57:70:21:22:4d:aa:a5:9a:9c:28:d6:43:31:34:a2:ca:14:01: 84:0c:8d:35:cb:6e:29:25:07:9d:4f:5f:4f:90:96:ed:e9:b5: 80:4c:ae:aa:32:27:0f:4e:a7:c0:69:23:89:6a:f5:a6:d6:8a: 9f:86:26:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9+WEbk9tSEvJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk M2UzNTNiMWQtMWU2Zi00ODEyLTliNDAtM2ZhMjllMWJkMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXTvh0DnUcm43ePf3R9y8u5PandZ2Mp9vu/e n9aA/+j75oIJoA3OrHIG/ABjwteOkmDg+ZVxc8A0JwS3KIm/736hMGJMMIGgOMtu pVwHm64aT9GVXavURlyYqVQXFIfII2iiQHSd95CPBMpARngQCoyUHlgmG2LkwCuc 5Mee2sAyOdlnreD86N5Lz+Sw5LAWPr8KBGWTobWscmhek1k0j5t3cDVKuerDrYzU HwmnyxohjM6Ke7qaQ5YY710doQLomJVSlcztxST0i33Bx+C/7MuxQO5zOq2Mghcb KQd5z4Tjr1USWaj5yROo4vV8qMa3u5nF6oIndKloqmAegpjOYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+A764ZAc07IirHaqcRX1J8f4T1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvNDYxNWNjNTEtMzk0OC0z ZDI0LWIzZjctZTJmNTViMWI5NWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATKQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInRRHW/oaltXFuMprsuqym8TuE+YLr8CcjTkNx+EW19K3Z9Y3mGcChL K/AkoRxylC5RTGma0rMO8d3L4pu0/4WQYo+d5ub2/Ksb7EXZShR+zvyNsl7fVPhq it90mhTLh0dBjBCaeaa46AvOFIniCtUa0E9umWNhNLk3TOHm7uDvBDMHbG4wLBiW OtfuchbfHjwUUhkvpQbPml8c+QnDECHAVNEznVNvLQRpM6ML9JYcisaKw/rbktV3 DZjad/UbQtb+R0/p61dwISJNqqWanCjWQzE0osoUAYQMjTXLbiklB51PX0+Qlu3p tYBMrqoyJw9Op8BpI4lq9abWip+GJqM= -----END CERTIFICATE-----Generated at Tue Sep 29 13:54:30 2026 by rpki-client