$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/9f593d47-3a3d-306a-9551-03bd70997c05.roa File: 9f593d47-3a3d-306a-9551-03bd70997c05.roa (raw, json) Hash identifier: DEnWOkoEUJgwxE+jcsFGX0Qwjyjw/bROej6VgaCpXOU= Subject key identifier: CC:3B:D7:4A:96:5E:2B:8F:55:6A:9A:85:6D:52:A5:5C:3B:93:E3:D7 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584F4973E6FC7A831495C0F24600 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/9f593d47-3a3d-306a-9551-03bd70997c05.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23465 IP address blocks: 70.97.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:e6:fc:7a:83:14:95:c0:f2:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e2cfe585-5149-47e4-bffb-18896db210e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5c:54:d7:fa:99:c5:8f:a0:39:3f:ac:e4:00: 76:2c:ad:36:8e:e3:2e:84:f2:fc:4d:e8:cd:ca:b5: 4d:ce:bc:8c:de:37:34:8e:9f:c7:94:f7:2b:a4:2b: 8d:69:0d:eb:df:a8:19:45:28:b4:24:4f:d6:71:00: 74:84:cd:19:54:cb:0b:21:e8:09:a7:b3:ed:29:1a: 3e:04:1d:78:56:32:94:b1:7c:6c:c8:21:05:7d:87: bc:13:43:a3:cc:19:f0:40:87:89:79:47:68:1c:e6: 1c:11:0b:fa:b2:6b:19:a8:e6:60:90:11:00:f2:c8: 50:50:32:c3:9b:1f:6c:0e:24:49:89:f6:dd:25:7c: ef:0f:e1:77:d4:27:db:44:34:88:61:ed:fe:6f:d4: f3:c9:fc:ca:25:7b:65:08:3b:7a:9f:cb:d6:00:a5: 77:ce:b4:1a:e5:7b:24:6d:2e:b4:aa:db:ed:53:33: ad:ed:7e:ee:97:1d:1f:d0:e3:15:82:23:4e:89:94: bf:55:ae:88:e3:db:49:2f:2e:a5:aa:a1:10:0d:87: 78:e3:d0:ba:66:36:ee:ac:ce:98:69:92:77:a6:4b: 82:1e:18:67:7a:e8:34:1b:9f:db:fd:c3:cf:a6:7f: c2:f2:8c:2f:d7:8b:b4:db:a3:1b:4f:88:7e:a3:aa: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3B:D7:4A:96:5E:2B:8F:55:6A:9A:85:6D:52:A5:5C:3B:93:E3:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/9f593d47-3a3d-306a-9551-03bd70997c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.97.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:7a:ec:28:92:3d:52:c3:81:e6:ee:73:a3:eb:93:45:1f:aa: a2:9a:b6:1d:a2:b7:89:aa:7e:14:0f:a0:93:ec:2b:19:c7:42: 74:f8:97:0e:55:ca:ac:ac:f2:30:ee:21:7a:56:4e:38:d1:9f: 24:6b:a6:e0:9f:98:fe:94:63:56:e6:6c:56:46:d1:6b:4d:14: 60:0a:f4:d9:fa:a2:d6:65:88:52:fb:62:7b:11:97:22:45:05: e5:1a:06:cc:2e:1b:0f:04:01:5c:c1:d1:19:01:5b:c4:b7:a0: ae:79:b0:de:bc:ce:99:2b:aa:8c:80:12:f8:84:23:0f:bb:fc: 04:d8:ed:c3:1d:a9:db:ec:14:3e:69:32:c4:57:2a:d2:c0:de: 9a:f9:d5:6e:5c:20:ea:09:c1:9a:7e:10:66:e1:f5:6c:d3:4a: cf:ac:79:1f:76:44:73:f5:6b:00:09:5c:60:eb:07:1a:eb:64: 90:09:42:aa:71:56:8a:f6:bc:99:70:96:70:1e:75:4d:a4:af: 14:c6:24:8f:02:52:01:66:a1:2f:04:c7:15:fa:a4:b4:61:60: e0:1f:b5:83:bd:33:3a:36:2b:56:dd:d8:f6:61:d7:1e:2f:f2: 64:1d:36:5f:79:e7:34:3c:cb:1a:ca:fb:00:bc:8f:c2:ad:d2: 1c:dd:49:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+b8eoMUlcDyRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTJjZmU1ODUtNTE0OS00N2U0LWJmZmItMTg4OTZkYjIxMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllxU1/qZxY+gOT+s5AB2LK02juMuhPL8TejN yrVNzryM3jc0jp/HlPcrpCuNaQ3r36gZRSi0JE/WcQB0hM0ZVMsLIegJp7PtKRo+ BB14VjKUsXxsyCEFfYe8E0OjzBnwQIeJeUdoHOYcEQv6smsZqOZgkBEA8shQUDLD mx9sDiRJifbdJXzvD+F31CfbRDSIYe3+b9TzyfzKJXtlCDt6n8vWAKV3zrQa5Xsk bS60qtvtUzOt7X7ulx0f0OMVgiNOiZS/Va6I49tJLy6lqqEQDYd449C6ZjburM6Y aZJ3pkuCHhhneug0G5/b/cPPpn/C8owv14u026MbT4h+o6oJuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMw710qWXiuPVWqahW1SpVw7k+PXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvOWY1OTNkNDctM2EzZC0z MDZhLTk1NTEtMDNiZDcwOTk3YzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERmGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN67CiSPVLDgebuc6Prk0UfqqKath2it4mqfhQPoJPsKxnHQnT4lw5V yqys8jDuIXpWTjjRnyRrpuCfmP6UY1bmbFZG0WtNFGAK9Nn6otZliFL7YnsRlyJF BeUaBswuGw8EAVzB0RkBW8S3oK55sN68zpkrqoyAEviEIw+7/ATY7cMdqdvsFD5p MsRXKtLA3pr51W5cIOoJwZp+EGbh9WzTSs+seR92RHP1awAJXGDrBxrrZJAJQqpx Vor2vJlwlnAedU2krxTGJI8CUgFmoS8ExxX6pLRhYOAftYO9Mzo2K1bd2PZh1x4v 8mQdNl955zQ8yxrK+wC8j8Kt0hzdSdQ= -----END CERTIFICATE-----Generated at Sat Oct 10 18:34:09 2026 by rpki-client