$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa File: a76e2a99-afef-387e-82e9-daf0c2b55c50.roa (raw, json) Hash identifier: QhFjxDpy9u0qxcSx/dHQkdaEcmOoalHcLfma2hebvXg= Subject key identifier: 63:37:34:0F:52:4E:7D:0E:BE:8B:C7:1F:7A:CA:1D:87:F6:FD:84:A6 Certificate issuer: /CN=83978879-0e89-498f-901b-884a1988c27f Certificate serial: 010D0C9F4328584F0672307286419FE990AB9C80 Authority key identifier: F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 21615 IP address blocks: 209.33.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:30:72:86:41:9f:e9:90:ab:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83978879-0e89-498f-901b-884a1988c27f Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=9736efb4-c67a-4b12-b355-e3a8b1a0ee68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fb:66:63:7a:9d:df:1f:37:ee:87:e3:9f:86: a0:09:b9:16:0d:90:95:f0:0a:d4:ff:52:7c:3d:12: 39:df:7d:40:48:76:06:fc:e5:1a:66:53:e2:f6:ce: 57:cf:02:3b:40:d0:85:9f:8c:1b:b7:ed:d2:66:e5: c2:c6:b1:25:56:3d:05:7b:a8:64:12:c4:be:25:af: e2:48:9f:98:2c:92:cf:0f:25:59:b2:56:52:c0:6b: 71:a0:8e:e4:bd:1c:bc:3c:46:91:a5:7f:7d:c5:f7: 36:d7:36:d3:bf:7b:6d:b2:3e:d5:2b:f2:ee:fe:e6: e2:3a:2d:cc:55:34:f2:d6:cb:4d:b5:84:16:4c:66: 28:ce:44:76:7b:df:cf:29:1c:3f:b2:71:0c:ca:0c: af:3a:48:de:30:96:86:a8:e7:c1:76:b8:ae:97:2d: bb:8c:ee:94:ca:ce:01:30:4b:cc:76:65:a0:35:f6: ca:03:c7:3a:37:63:72:77:28:74:0d:d4:30:92:b7: 54:8f:a4:1b:94:65:57:bb:fd:e6:d7:76:ab:18:2b: 60:f3:1c:8f:e1:01:6a:72:7c:f6:29:85:a9:95:c4: c9:04:4a:99:e0:15:62:a5:90:7e:eb:29:b8:33:b6: 66:23:c3:ab:ee:0c:c2:50:97:64:10:ff:1c:d5:ce: d6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:37:34:0F:52:4E:7D:0E:BE:8B:C7:1F:7A:CA:1D:87:F6:FD:84:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl X509v3 Authority Key Identifier: keyid:F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer sbgp-ipAddrBlock: critical IPv4: 209.33.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b6:d5:e3:c7:f7:97:82:cf:c9:a7:dc:ef:a5:b2:14:ad:d7: 95:ac:b2:03:c9:22:83:b5:b8:11:f5:17:fc:7c:ea:f3:aa:17: 2d:00:b9:02:49:62:2d:90:2e:b6:33:a2:51:54:e0:59:bc:c6: fd:ed:e4:5f:e8:c0:3e:f9:43:5d:29:a2:d4:b7:92:df:43:e4: b0:35:83:98:60:8e:1d:71:ef:0c:08:01:04:1d:29:6c:ef:34: 7c:52:4b:be:40:a4:71:7a:e9:f1:00:bc:cd:15:e2:0f:25:f8: 66:f0:7c:6b:36:17:37:32:29:14:2f:16:2a:5a:39:56:56:04: 9f:65:33:79:9b:5a:fb:1a:92:d1:2f:f9:b9:fa:5a:21:f1:72: fa:b3:73:9d:3b:2e:fc:55:4a:44:80:5d:bf:70:c4:d2:d3:36: ff:e2:b7:63:fb:06:1c:81:1e:52:37:44:3a:5e:cf:b0:93:98: 83:7e:60:7d:90:5b:3b:b5:a0:27:c9:fa:32:ca:58:ae:fb:b8: 49:6e:52:4e:94:ad:d5:eb:c7:fd:22:e1:26:60:e9:9c:15:91: d8:a7:6e:0a:63:b2:f8:72:22:68:fe:33:d3:98:7d:dc:88:db: 3f:5f:f0:cc:fc:93:4e:88:95:b1:69:2a:e2:a4:af:3e:d8:03: 65:c3:d7:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcjByhkGf6ZCrnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM5Nzg4NzktMGU4OS00OThmLTkwMWItODg0YTE5ODhj MjdmMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk OTczNmVmYjQtYzY3YS00YjEyLWIzNTUtZTNhOGIxYTBlZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApftmY3qd3x837ofjn4agCbkWDZCV8ArU/1J8 PRI5331ASHYG/OUaZlPi9s5XzwI7QNCFn4wbt+3SZuXCxrElVj0Fe6hkEsS+Ja/i SJ+YLJLPDyVZslZSwGtxoI7kvRy8PEaRpX99xfc21zbTv3ttsj7VK/Lu/ubiOi3M VTTy1stNtYQWTGYozkR2e9/PKRw/snEMygyvOkjeMJaGqOfBdriuly27jO6Uys4B MEvMdmWgNfbKA8c6N2Nydyh0DdQwkrdUj6QblGVXu/3m13arGCtg8xyP4QFqcnz2 KYWplcTJBEqZ4BVipZB+6ym4M7ZmI8Or7gzCUJdkEP8c1c7WxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGM3NA9STn0OvovHH3rKHYf2/YSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Mzk3 ODg3OS0wZTg5LTQ5OGYtOTAxYi04ODRhMTk4OGMyN2YvYTc2ZTJhOTktYWZlZi0z ODdlLTgyZTktZGFmMGMyYjU1YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODM5Nzg4NzktMGU4OS00OThmLTkw MWItODg0YTE5ODhjMjdmLzgzOTc4ODc5LTBlODktNDk4Zi05MDFiLTg4NGExOTg4 YzI3Zi5jcmwwHwYDVR0jBBgwFoAU8hNJvB6lb5TpnmMzzFMcxfcAueIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84Mzk3ODg3OS0wZTg5LTQ5OGYtOTAxYi04ODRh MTk4OGMyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm21ePH95eCz8mn3O+lshSt15WssgPJIoO1uBH1F/x86vOqFy0AuQJJ Yi2QLrYzolFU4Fm8xv3t5F/owD75Q10potS3kt9D5LA1g5hgjh1x7wwIAQQdKWzv NHxSS75ApHF66fEAvM0V4g8l+GbwfGs2FzcyKRQvFipaOVZWBJ9lM3mbWvsaktEv +bn6WiHxcvqzc507LvxVSkSAXb9wxNLTNv/it2P7BhyBHlI3RDpez7CTmIN+YH2Q Wzu1oCfJ+jLKWK77uEluUk6UrdXrx/0i4SZg6ZwVkdinbgpjsvhyImj+M9OYfdyI 2z9f8Mz8k06IlbFpKuKkrz7YA2XD18k= -----END CERTIFICATE-----Generated at Tue Sep 29 16:44:52 2026 by rpki-client