$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa File: 1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa (raw, json) Hash identifier: kY8Nc3qGXgQlp9lWGOgQ3vxeKTLTtwGp8zx0q5e9s7w= Subject key identifier: DB:4F:9B:5E:4D:9C:ED:5F:53:BA:77:42:FE:A5:B0:CB:84:48:AC:79 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584F18979CA1409E628E7D2B9AC0 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 1239 IP address blocks: 209.20.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:9c:a1:40:9e:62:8e:7d:2b:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=b7246f03-4322-43b7-8d59-c47bc35a4c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:7a:30:b1:32:71:8e:f7:34:24:6d:fd:1c: ea:37:06:b5:4b:51:9a:1d:47:3b:5a:9b:e5:cd:ba: 7f:ff:5d:36:07:ef:58:bd:f4:f7:2b:ad:bb:e0:ca: 05:02:43:c4:e6:94:73:c4:05:e8:69:5c:95:1f:d7: 2f:ab:5f:53:da:2b:81:70:d5:18:6b:e7:23:45:f3: 61:16:00:9f:ce:0e:72:ea:80:9d:8a:11:39:11:c1: d4:bd:d2:f8:a1:22:64:ea:89:f2:94:55:c7:40:7d: 3c:18:57:a5:62:9f:e7:6a:e6:dd:f1:a9:73:41:6c: ff:02:20:f7:d4:89:e0:e8:6c:0a:fe:3d:5b:b6:5e: 89:0b:40:df:16:b6:77:b5:43:6b:58:09:18:1c:de: df:31:55:02:b3:41:8e:06:e0:9e:bc:bd:3d:dc:ca: 6a:03:de:46:7b:36:b6:6d:72:f3:00:b9:fd:7d:1b: 55:97:a7:88:3e:ef:ab:e9:64:6f:7c:94:aa:9e:57: f5:02:80:a5:71:ac:f6:25:d8:e1:a7:74:10:f4:e1: af:c1:42:f1:38:89:4e:74:b1:d9:c2:fe:d4:25:97: 44:fc:4e:eb:3b:47:0f:fd:b7:75:b1:da:6d:ca:40: 7d:82:86:27:0f:5e:1b:08:fc:29:63:23:99:8a:50: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4F:9B:5E:4D:9C:ED:5F:53:BA:77:42:FE:A5:B0:CB:84:48:AC:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1a7758bd-319b-30e7-aaee-1b8878c6d78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:8f:3c:8d:ab:81:1e:d5:15:2d:eb:d2:33:54:53:84:cf:06: c0:5e:a7:76:98:dd:57:04:3e:8d:17:b9:2f:37:88:55:45:ab: a1:a1:17:23:bd:83:28:cd:61:2c:c5:f1:e1:72:dd:5c:db:c0: 52:63:90:6b:5a:9b:b5:a2:3d:2e:d7:ed:c5:1a:77:de:b2:32: 77:a0:35:48:ad:4b:6d:df:af:0d:98:64:01:b0:0c:d3:7c:61: 71:40:3e:c8:f6:b6:58:bc:80:75:d0:98:49:17:e1:f1:00:db: b7:1f:63:6d:86:40:c1:9f:30:e1:af:ec:c1:98:88:eb:67:53: 1b:6d:48:c6:24:df:29:6e:54:76:31:d2:08:40:32:4a:e7:d2: 62:0c:02:19:cc:93:9b:5b:b2:bd:5d:81:87:2b:c9:e5:25:58: ba:f4:a7:4a:98:4e:a7:b4:19:86:67:87:32:d5:53:4e:a5:c7: 66:29:1b:1f:50:78:36:c5:ef:c5:af:b9:4b:0e:68:8a:5a:2b: 43:3b:2a:b1:98:8f:a0:0d:00:3b:82:83:f4:0b:d0:45:be:7b: 70:0f:eb:5c:78:2d:13:82:b6:1e:0e:94:b7:0e:a2:df:04:fe: a7:3f:02:ff:fe:b7:7c:de:e3:5c:61:01:5a:c0:a1:31:25:56: be:ee:23:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5yhQJ5ijn0rmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YjcyNDZmMDMtNDMyMi00M2I3LThkNTktYzQ3YmMzNWE0YzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcZ6MLEycY73NCRt/RzqNwa1S1GaHUc7Wpvl zbp//102B+9YvfT3K6274MoFAkPE5pRzxAXoaVyVH9cvq19T2iuBcNUYa+cjRfNh FgCfzg5y6oCdihE5EcHUvdL4oSJk6onylFXHQH08GFelYp/naubd8alzQWz/AiD3 1Ing6GwK/j1btl6JC0DfFrZ3tUNrWAkYHN7fMVUCs0GOBuCevL093MpqA95Geza2 bXLzALn9fRtVl6eIPu+r6WRvfJSqnlf1AoClcaz2Jdjhp3QQ9OGvwULxOIlOdLHZ wv7UJZdE/E7rO0cP/bd1sdptykB9goYnD14bCPwpYyOZilBFpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtPm15NnO1fU7p3Qv6lsMuESKx5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMWE3NzU4YmQtMzE5Yi0z MGU3LWFhZWUtMWI4ODc4YzZkNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0RTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2PPI2rgR7VFS3r0jNUU4TPBsBep3aY3VcEPo0XuS83iFVFq6GhFyO9 gyjNYSzF8eFy3VzbwFJjkGtam7WiPS7X7cUad96yMnegNUitS23frw2YZAGwDNN8 YXFAPsj2tli8gHXQmEkX4fEA27cfY22GQMGfMOGv7MGYiOtnUxttSMYk3yluVHYx 0ghAMkrn0mIMAhnMk5tbsr1dgYcryeUlWLr0p0qYTqe0GYZnhzLVU06lx2YpGx9Q eDbF78WvuUsOaIpaK0M7KrGYj6ANADuCg/QL0EW+e3AP61x4LROCth4OlLcOot8E /qc/Av/+t3ze41xhAVrAoTElVr7uI4I= -----END CERTIFICATE-----Generated at Sun Oct 4 07:52:11 2026 by rpki-client