$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c814f056-b6f8-3d38-bca1-53524829f2b8.roa File: c814f056-b6f8-3d38-bca1-53524829f2b8.roa (raw, json) Hash identifier: iLNXAV4SO37ZBisk39aZgpBINexkIOhk8dYWFxDc5WE= Subject key identifier: 5D:DE:E0:77:11:41:E1:F4:2F:2A:9F:DC:D1:08:38:E3:7E:F7:39:50 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584F49731405ACBD4C7E8F587600 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c814f056-b6f8-3d38-bca1-53524829f2b8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 72.17.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:14:05:ac:bd:4c:7e:8f:58:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3a26db88-642d-447a-8560-ae387c06703f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:95:5e:ec:a3:97:ad:00:90:f4:f9:d9:aa:86: d0:9d:b2:95:92:ae:60:23:68:0c:8b:4f:ca:e9:72: 85:84:ff:f1:9e:c4:43:cf:0f:fb:fb:c5:f3:6c:be: 15:d0:73:ab:68:fa:34:00:24:18:4e:bf:eb:41:b0: 72:34:0c:1f:99:f4:ba:e0:52:4a:8e:6f:5b:c2:66: 60:4c:c9:5b:15:f9:96:c4:09:a9:ba:49:f5:8a:a2: 5b:0f:33:00:0b:fb:40:89:e4:df:10:f4:c7:5f:aa: fc:8f:4e:a7:7c:2f:46:fc:8e:27:f1:b5:dc:fa:e4: cc:c2:66:b0:56:4a:37:0c:c4:0b:f6:6d:40:26:03: bc:cd:f0:d8:94:f7:a3:3b:49:26:05:7d:cd:fe:24: 52:f4:e5:a9:84:67:72:b7:17:f4:ae:47:2c:b8:5d: 31:80:00:aa:c5:f5:ca:27:e9:bd:1c:28:a8:8d:14: db:b1:90:11:36:9b:fd:84:25:e2:4f:7a:1c:31:8d: 2a:e3:95:4a:84:02:12:75:a0:6c:d6:90:40:9e:17: 03:c1:d9:e1:99:df:08:3f:35:89:0c:3e:95:e2:7a: 41:9b:97:c2:70:ed:38:1f:dd:5f:f7:2e:35:77:0b: 72:cd:b1:22:eb:92:97:56:44:ca:19:e7:c2:e7:1c: d1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DE:E0:77:11:41:E1:F4:2F:2A:9F:DC:D1:08:38:E3:7E:F7:39:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c814f056-b6f8-3d38-bca1-53524829f2b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.17.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:bf:3a:d2:98:53:77:1b:63:d1:5c:10:95:c7:e3:3e:a6:a1: 00:6e:0b:49:3d:4d:1b:de:b3:2b:75:a3:f8:e3:b6:72:44:58: a4:a9:44:0f:f0:bd:08:64:fb:20:7b:69:05:53:eb:19:34:e2: 0a:75:68:76:39:89:2b:40:c8:9d:16:d1:b2:fa:04:65:25:4e: b6:bc:7b:a6:9e:e1:a7:eb:34:43:64:e6:1e:e9:4c:57:f3:82: 15:72:81:0a:08:c9:ec:c3:c3:12:57:1a:01:7f:15:a9:41:b3: 0f:fd:c0:62:fa:f5:22:8c:c2:b6:6c:9f:e8:4a:b4:6b:e4:f9: 75:e1:c2:f9:6f:a4:18:f9:30:7a:cf:dd:87:6a:5d:37:48:2b: 8d:ea:8e:6f:b5:df:b8:eb:46:03:1a:17:54:c8:14:99:a9:98: 46:5a:03:d0:a0:17:e1:3d:6b:c6:06:83:04:f6:d4:64:bd:20: 5e:2d:7b:51:e4:28:3d:1d:ef:11:66:3a:0b:45:1b:97:39:5a: f1:1d:dc:af:86:d6:af:7e:a2:5e:dd:13:8c:c6:47:b7:81:7e: ed:3e:e6:af:02:9c:68:09:77:e3:89:d1:ca:13:c0:0c:6d:1a: de:3a:c8:2f:02:80:37:03:9a:ee:77:7d:2b:d0:e4:50:17:3b: 3f:8c:6a:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcxQFrL1Mfo9YdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2EyNmRiODgtNjQyZC00NDdhLTg1NjAtYWUzODdjMDY3MDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZVe7KOXrQCQ9PnZqobQnbKVkq5gI2gMi0/K 6XKFhP/xnsRDzw/7+8XzbL4V0HOraPo0ACQYTr/rQbByNAwfmfS64FJKjm9bwmZg TMlbFfmWxAmpukn1iqJbDzMAC/tAieTfEPTHX6r8j06nfC9G/I4n8bXc+uTMwmaw Vko3DMQL9m1AJgO8zfDYlPejO0kmBX3N/iRS9OWphGdytxf0rkcsuF0xgACqxfXK J+m9HCiojRTbsZARNpv9hCXiT3ocMY0q45VKhAISdaBs1pBAnhcDwdnhmd8IPzWJ DD6V4npBm5fCcO04H91f9y41dwtyzbEi65KXVkTKGefC5xzRbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3e4HcRQeH0Lyqf3NEIOON+9zlQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzgxNGYwNTYtYjZmOC0z ZDM4LWJjYTEtNTM1MjQ4MjlmMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSBEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK/OtKYU3cbY9FcEJXH4z6moQBuC0k9TRvesyt1o/jjtnJEWKSpRA/w vQhk+yB7aQVT6xk04gp1aHY5iStAyJ0W0bL6BGUlTra8e6ae4afrNENk5h7pTFfz ghVygQoIyezDwxJXGgF/FalBsw/9wGL69SKMwrZsn+hKtGvk+XXhwvlvpBj5MHrP 3YdqXTdIK43qjm+137jrRgMaF1TIFJmpmEZaA9CgF+E9a8YGgwT21GS9IF4te1Hk KD0d7xFmOgtFG5c5WvEd3K+G1q9+ol7dE4zGR7eBfu0+5q8CnGgJd+OJ0coTwAxt Gt46yC8CgDcDmu53fSvQ5FAXOz+Maso= -----END CERTIFICATE-----Generated at Fri Sep 25 23:51:33 2026 by rpki-client