$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/309c3472-4fdd-36c6-9a07-443722d1eabd.roa File: 309c3472-4fdd-36c6-9a07-443722d1eabd.roa (raw, json) Hash identifier: 3k1XRLcVN4OC6jh79RC8wzJn7Ig/tfs1XroClDdpVk8= Subject key identifier: 27:31:9C:87:66:F8:9E:0F:72:34:A5:7F:78:FC:17:39:09:F3:89:89 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584F49757ECEA4E84BD5A772E6C0 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/309c3472-4fdd-36c6-9a07-443722d1eabd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4213 IP address blocks: 76.8.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:7e:ce:a4:e8:4b:d5:a7:72:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=822ccaba-3c2e-488c-9250-3091c596ee7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ea:76:c4:b9:82:73:37:bd:de:a3:bf:ad:1d: 37:7a:6d:5c:7f:b7:11:37:19:61:94:76:8f:53:06: 6e:ce:ab:ad:ae:c5:0e:12:ab:6f:f5:54:44:79:0f: f7:bb:33:fe:35:1a:b4:4b:3f:ff:e7:6b:1a:24:48: 66:0f:c5:c9:ac:93:d3:ec:04:b7:21:e0:56:10:51: 91:91:8e:32:a2:c9:11:5b:76:57:77:7b:e5:09:5c: 7e:f0:65:2d:2e:5c:76:b0:9b:d1:26:0d:e5:5d:05: 6a:05:3c:f2:0d:09:61:b1:4e:3e:a4:05:b6:4a:68: 6d:c2:c4:35:e7:41:11:4f:e4:ce:86:25:25:d9:87: bb:4f:02:fb:d7:81:c9:b6:d3:28:ef:e1:1f:a9:a0: 87:82:19:f4:b5:0a:5c:1f:f7:77:8e:98:c9:4e:3c: 75:70:6d:ae:ec:48:fa:cb:22:4f:8c:4f:2d:84:8c: b9:1e:1c:b9:a0:64:6a:48:96:38:c0:4b:eb:10:4c: 53:0f:a9:b2:d0:ec:58:21:b9:7d:c6:aa:7b:15:17: bc:75:52:a2:0e:30:9f:f3:e9:9a:2f:b5:6e:c6:d2: a3:60:0f:99:b7:45:e7:1e:bf:dd:41:6a:cb:a4:d3: 4b:40:af:80:b5:b5:b2:8f:f5:81:b9:f0:bc:3f:7a: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:31:9C:87:66:F8:9E:0F:72:34:A5:7F:78:FC:17:39:09:F3:89:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/309c3472-4fdd-36c6-9a07-443722d1eabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 76.8.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:36:e6:ac:51:3c:67:0b:e1:d1:05:de:b7:1b:b6:8e:21:23: b4:b8:48:3f:1c:7c:6c:6c:bb:c9:69:a6:78:40:72:de:e0:9b: fd:e9:fa:77:8c:16:a1:89:35:fc:2d:31:e5:ca:8b:38:d1:16: 2a:91:1a:d8:3e:4f:21:1d:48:2c:5e:a0:c8:ce:a5:22:fd:72: 00:9a:fa:6e:8f:79:e0:27:a8:bb:64:40:47:2f:8c:10:5b:86: ae:a0:78:95:fd:64:8c:28:cc:ce:62:66:69:86:68:78:6f:2a: 21:36:9c:4b:98:f7:a7:88:3b:da:14:92:5b:68:43:21:31:d9: 07:13:22:56:47:2e:01:cc:39:6c:5a:bf:e8:1d:1b:aa:e1:16: 90:66:b1:de:16:27:ff:d0:58:73:c0:0e:e4:0e:49:f9:0e:53: 5b:f8:b4:fa:a9:32:67:62:bf:49:c9:c9:28:41:24:ec:ea:db: 3a:d7:52:8e:43:41:5c:48:fc:c8:f6:b9:e7:be:2e:26:95:7f: fc:65:a4:a3:c0:ef:0a:19:89:f7:13:e4:ad:69:2e:4f:2d:98: 7e:d8:c4:25:4b:31:d9:0a:de:6e:9b:30:02:4d:a7:d9:c6:de: cc:aa:bd:95:9c:f1:9c:39:1d:2b:2c:29:42:97:ee:7b:7d:1b: 26:58:a2:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdX7OpOhL1ady5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODIyY2NhYmEtM2MyZS00ODhjLTkyNTAtMzA5MWM1OTZlZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiup2xLmCcze93qO/rR03em1cf7cRNxlhlHaP UwZuzqutrsUOEqtv9VREeQ/3uzP+NRq0Sz//52saJEhmD8XJrJPT7AS3IeBWEFGR kY4yoskRW3ZXd3vlCVx+8GUtLlx2sJvRJg3lXQVqBTzyDQlhsU4+pAW2SmhtwsQ1 50ERT+TOhiUl2Ye7TwL714HJttMo7+EfqaCHghn0tQpcH/d3jpjJTjx1cG2u7Ej6 yyJPjE8thIy5Hhy5oGRqSJY4wEvrEExTD6my0OxYIbl9xqp7FRe8dVKiDjCf8+ma L7VuxtKjYA+Zt0XnHr/dQWrLpNNLQK+AtbWyj/WBufC8P3oD2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcxnIdm+J4PcjSlf3j8FzkJ84mJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMzA5YzM0NzItNGZkZC0z NmM2LTlhMDctNDQzNzIyZDFlYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETAgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD425qxRPGcL4dEF3rcbto4hI7S4SD8cfGxsu8lppnhAct7gm/3p+neM FqGJNfwtMeXKizjRFiqRGtg+TyEdSCxeoMjOpSL9cgCa+m6PeeAnqLtkQEcvjBBb hq6geJX9ZIwozM5iZmmGaHhvKiE2nEuY96eIO9oUkltoQyEx2QcTIlZHLgHMOWxa v+gdG6rhFpBmsd4WJ//QWHPADuQOSfkOU1v4tPqpMmdiv0nJyShBJOzq2zrXUo5D QVxI/Mj2uee+LiaVf/xlpKPA7woZifcT5K1pLk8tmH7YxCVLMdkK3m6bMAJNp9nG 3syqvZWc8Zw5HSssKUKX7nt9GyZYos4= -----END CERTIFICATE-----Generated at Sat Sep 26 12:32:34 2026 by rpki-client