$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa File: a14bef6f-3d0e-311d-9920-4d558906aa24.roa (raw, json) Hash identifier: NfhmoclsHs9ybHDPmMsjndrp7gLkWZqFWLYlrYNAKNQ= Subject key identifier: 1F:AC:99:26:14:D1:C9:22:6C:BC:18:2E:BE:7B:35:C9:1A:E6:F1:59 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584F4973E6E64BC6473D168A8800 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23465 IP address blocks: 70.96.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:e6:e6:4b:c6:47:3d:16:8a:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7e776ea0-4c03-4afa-a1ef-ad33d44a332e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9d:4f:7a:a3:f8:d2:5f:43:2d:1d:db:7d:60: 14:52:1d:5b:51:4e:25:18:a4:b0:70:09:0e:f0:b9: bb:fa:d3:c4:b0:4f:a9:13:e7:bf:bf:f6:e2:a1:9b: 61:47:fa:a7:4f:a4:aa:85:25:f9:91:5d:3b:9b:ee: 03:f6:da:d9:3b:b3:96:4a:55:b6:90:ee:fd:97:9a: aa:27:6b:de:b1:55:55:14:1c:41:b9:21:9d:29:fb: 0a:4c:3b:21:09:eb:89:d6:0d:67:15:16:9b:99:31: 81:1c:95:39:2a:f9:01:0f:38:a9:9c:06:79:9b:92: 78:7d:e0:ae:d2:13:98:bc:ff:eb:19:eb:f9:c1:2e: 84:c8:ca:6e:80:b1:53:d5:a9:4b:c7:65:74:c1:16: 4a:3d:39:a4:ba:67:aa:7b:dc:f1:ad:14:fd:5b:ee: 07:c4:c3:fa:d8:62:e0:a2:df:7f:67:ca:42:f4:85: f6:11:94:a5:0e:0b:35:0c:6e:24:eb:b6:f9:dd:9a: 12:9c:19:1f:1f:bf:b7:ea:6f:c9:56:9c:80:56:c2: ab:98:af:92:b4:61:2c:03:a2:40:22:40:0b:ab:14: fb:08:82:68:a9:19:68:6b:04:00:36:88:13:7d:4a: 83:2f:39:15:2f:4e:14:23:c5:2f:e4:a4:79:7b:f7: 38:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AC:99:26:14:D1:C9:22:6C:BC:18:2E:BE:7B:35:C9:1A:E6:F1:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.96.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e9:a1:fb:67:cd:8a:3f:60:df:08:19:45:8a:82:7c:cc:10: d4:38:f0:00:d7:1f:b4:59:03:4c:8b:c6:85:69:fe:c3:27:82: bd:81:19:78:0c:f0:74:00:94:c1:0a:71:42:a0:74:54:c2:b7: 54:bd:5d:a1:b4:e1:c8:11:68:3b:02:e8:f3:bf:08:41:62:90: 2b:7b:a0:f0:38:19:1f:18:03:63:5a:79:34:90:2a:0b:de:72: 68:e1:bc:23:d8:88:4b:1d:1a:56:d5:66:d4:d6:d6:3b:f8:16: 22:c5:8c:ae:cf:e0:a9:6a:67:9c:29:f6:5b:bc:d8:ea:9c:35: fc:67:eb:d9:b4:95:ba:36:8c:c1:bb:73:8d:6e:14:8e:37:0f: 50:be:f5:92:b1:34:6e:9e:f7:32:b5:ea:f1:b4:14:b5:79:16: c6:5b:65:5b:0e:2a:fb:bb:dc:bc:8d:a2:aa:d9:a1:71:b9:0d: fd:ab:ef:6d:6a:a5:e2:a7:cb:05:9d:c7:a8:1e:08:a4:07:fd: 6a:18:9c:92:a1:d0:58:4f:2e:db:2a:f8:11:50:61:c4:1d:74: f9:f8:de:fe:e6:ed:76:7f:ce:8a:38:dd:a4:4d:90:d7:14:6b: dc:c3:52:1f:80:91:45:70:8d:b0:76:a6:bd:ba:f8:76:2b:6d: e5:24:57:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+bmS8ZHPRaKiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2U3NzZlYTAtNGMwMy00YWZhLWExZWYtYWQzM2Q0NGEzMzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ1PeqP40l9DLR3bfWAUUh1bUU4lGKSwcAkO 8Lm7+tPEsE+pE+e/v/bioZthR/qnT6SqhSX5kV07m+4D9trZO7OWSlW2kO79l5qq J2vesVVVFBxBuSGdKfsKTDshCeuJ1g1nFRabmTGBHJU5KvkBDzipnAZ5m5J4feCu 0hOYvP/rGev5wS6EyMpugLFT1alLx2V0wRZKPTmkumeqe9zxrRT9W+4HxMP62GLg ot9/Z8pC9IX2EZSlDgs1DG4k67b53ZoSnBkfH7+36m/JVpyAVsKrmK+StGEsA6JA IkALqxT7CIJoqRloawQANogTfUqDLzkVL04UI8Uv5KR5e/c41QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+smSYU0ckibLwYLr57Ncka5vFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYTE0YmVmNmYtM2QwZS0z MTFkLTk5MjAtNGQ1NTg5MDZhYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRmDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfpoftnzYo/YN8IGUWKgnzMENQ48ADXH7RZA0yLxoVp/sMngr2BGXgM 8HQAlMEKcUKgdFTCt1S9XaG04cgRaDsC6PO/CEFikCt7oPA4GR8YA2NaeTSQKgve cmjhvCPYiEsdGlbVZtTW1jv4FiLFjK7P4KlqZ5wp9lu82OqcNfxn69m0lbo2jMG7 c41uFI43D1C+9ZKxNG6e9zK16vG0FLV5FsZbZVsOKvu73LyNoqrZoXG5Df2r721q peKnywWdx6geCKQH/WoYnJKh0FhPLtsq+BFQYcQddPn43v7m7XZ/zoo43aRNkNcU a9zDUh+AkUVwjbB2pr26+HYrbeUkVxs= -----END CERTIFICATE-----Generated at Sun Oct 11 15:07:45 2026 by rpki-client