$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/95820f3b-2efb-39bc-bdf4-69edf3a44951.roa File: 95820f3b-2efb-39bc-bdf4-69edf3a44951.roa (raw, json) Hash identifier: iItdPqfU6B21McaDgve9UBZmAdds3ydrU2QGtYftXKk= Subject key identifier: EE:F0:DB:90:0E:75:D9:01:1C:59:90:1E:A7:8D:A8:99:63:44:5C:8D Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F4328584F4973BECFBAB1ED7EC0C131C0 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/95820f3b-2efb-39bc-bdf4-69edf3a44951.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 210781 IP address blocks: 65.75.196.0/22 maxlen: 24 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:be:cf:ba:b1:ed:7e:c0:c1:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8c7923d0-b8f9-4deb-9323-2703eb098604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c8:76:64:62:e6:33:cb:0d:41:70:72:94:a9: 84:c5:f3:df:6e:03:00:d3:22:ac:0f:c7:8a:b7:16: 70:68:36:75:ea:b8:9d:e9:2f:f7:d9:f5:af:9f:0b: e2:a3:dd:ac:89:31:8a:88:e6:82:60:30:95:35:7f: ec:05:f6:98:12:d8:20:a4:87:9a:2a:ad:82:83:07: 0a:59:0c:85:da:2d:af:9c:7e:4c:c8:c7:93:a3:41: 22:5d:12:07:94:3a:43:08:91:c6:f6:89:ea:0d:f7: 27:71:ad:c1:b0:7c:d3:c9:4c:81:bb:ed:d9:44:17: 2b:62:69:07:1f:dd:5d:5b:8e:db:6e:5c:6d:e9:dd: aa:9d:fb:a3:34:2c:3c:05:fa:83:6e:f9:c4:16:53: 3c:6d:ee:71:ae:5c:ea:f1:96:ef:c2:a7:7f:de:4f: cf:c6:d6:a3:3c:d2:3b:59:8c:99:a9:40:35:03:c5: a8:e6:00:0c:84:d3:05:71:1d:d8:13:3e:56:2f:10: d9:34:58:8e:ad:70:3c:b3:b1:c3:80:c0:c0:89:fa: 56:5a:e3:fb:5e:ce:c8:76:21:0b:df:dc:8d:0a:c6: c3:f1:e5:ff:d4:13:cf:ee:05:70:f8:23:d8:79:c1: be:69:6a:6f:0a:09:82:75:35:e5:4e:f6:56:e5:12: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F0:DB:90:0E:75:D9:01:1C:59:90:1E:A7:8D:A8:99:63:44:5C:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/95820f3b-2efb-39bc-bdf4-69edf3a44951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 65.75.196.0/22 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ac:66:7b:9c:2a:65:7a:60:5c:03:2b:2c:5b:10:49:73:5c: 40:be:47:d2:8d:d6:de:24:9c:45:1d:d9:b1:c1:92:f9:7a:2c: 22:2e:59:c1:d9:e5:fa:86:40:bb:3f:3e:93:69:39:ec:32:cb: 13:54:a4:fd:f6:9c:c5:59:1f:f9:2c:00:c0:fd:67:97:97:6f: d9:82:c4:cd:e4:16:91:67:85:61:58:9a:aa:15:ed:63:81:16: 85:c9:37:f5:fb:9b:42:b3:44:9d:24:33:75:5e:5f:1f:93:d6: b6:72:59:9c:7b:0e:0c:48:79:dc:32:6a:1e:0b:d4:68:a4:02: eb:69:7c:47:3e:bc:4d:2d:6d:98:12:79:da:fc:b8:6b:88:1e: b1:fd:55:4a:d0:4d:22:20:23:3c:bd:18:53:8c:39:39:27:d7: 78:d2:89:89:a4:f3:4f:59:f1:07:b9:bf:f4:dd:41:d8:ee:e5: b1:a6:ca:ec:43:25:3b:dd:92:d2:a4:7e:b9:71:cf:84:71:f1: 16:e8:83:a3:40:11:3a:56:b0:10:b5:56:b6:62:25:bc:06:92: de:90:11:9a:a8:54:74:5a:c0:94:ab:ef:bd:54:9d:d1:8f:33: b1:07:88:58:f3:6d:a9:a7:71:28:36:47:79:34:17:f7:e3:4e: 53:4c:14:a3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Jc77PurHtfsDBMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGM3OTIzZDAtYjhmOS00ZGViLTkzMjMtMjcwM2ViMDk4NjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ch2ZGLmM8sNQXBylKmExfPfbgMA0yKsD8eK txZwaDZ16rid6S/32fWvnwvio92siTGKiOaCYDCVNX/sBfaYEtggpIeaKq2CgwcK WQyF2i2vnH5MyMeTo0EiXRIHlDpDCJHG9onqDfcnca3BsHzTyUyBu+3ZRBcrYmkH H91dW47bblxt6d2qnfujNCw8BfqDbvnEFlM8be5xrlzq8Zbvwqd/3k/PxtajPNI7 WYyZqUA1A8Wo5gAMhNMFcR3YEz5WLxDZNFiOrXA8s7HDgMDAifpWWuP7Xs7IdiEL 39yNCsbD8eX/1BPP7gVw+CPYecG+aWpvCgmCdTXlTvZW5RLjaQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFO7w25AOddkBHFmQHqeNqJljRFyNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvOTU4MjBmM2ItMmVmYi0z OWJjLWJkZjQtNjllZGYzYTQ0OTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQUvEAwQC aPmsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACmsZnucKmV6YFwDKyxbEElzXEC+R9KN1t4knEUd2bHBkvl6 LCIuWcHZ5fqGQLs/PpNpOewyyxNUpP32nMVZH/ksAMD9Z5eXb9mCxM3kFpFnhWFY mqoV7WOBFoXJN/X7m0KzRJ0kM3VeXx+T1rZyWZx7DgxIedwyah4L1GikAutpfEc+ vE0tbZgSedr8uGuIHrH9VUrQTSIgIzy9GFOMOTkn13jSiYmk809Z8Qe5v/TdQdju 5bGmyuxDJTvdktKkfrlxz4Rx8Rbog6NAETpWsBC1VrZiJbwGkt6QEZqoVHRawJSr 771UndGPM7EHiFjzbamncSg2R3k0F/fjTlNMFKM= -----END CERTIFICATE-----Generated at Fri Sep 25 13:45:28 2026 by rpki-client