$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4009f812-e05c-3242-9c70-0785a6e78815.roa File: 4009f812-e05c-3242-9c70-0785a6e78815.roa (raw, json) Hash identifier: uHjUOFfUkKlzIj6u8ZQSu2Ny5UbNNgCQt4scFY3XO3c= Subject key identifier: C7:1C:A4:FE:5A:D0:8A:BD:5E:EB:F3:69:2E:80:13:96:5E:34:EB:75 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F3052614708CA3CCEEFA18A80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4009f812-e05c-3242-9c70-0785a6e78815.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 11404 IP address blocks: 172.81.152.0/22 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:61:47:08:ca:3c:ce:ef:a1:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=d30a8254-2fc4-4361-ab8c-b9df6ae238d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:21:13:e2:ef:df:d5:a3:b3:e9:99:99:15:98: 21:68:03:2b:1c:49:7b:7f:ed:4a:d4:57:07:46:e4: 6b:d3:93:ee:59:f5:3d:36:4d:3e:1d:8c:04:9c:21: d3:e4:0a:53:93:05:b6:64:eb:b8:31:57:11:76:51: 71:13:aa:ec:14:c4:a6:89:83:83:38:56:22:d5:96: 20:b8:35:17:e1:b8:5f:76:52:a6:62:be:26:e7:d8: 04:42:b2:5b:65:2c:7c:4e:35:84:8a:17:ad:74:47: fa:f0:b9:fe:ee:ee:d6:c2:2c:b9:e0:98:8d:61:7c: d2:45:d9:80:72:1c:a7:52:b6:2d:73:10:64:ab:c4: 53:8b:0e:c8:5e:24:fa:5e:66:72:18:25:05:45:62: 37:21:3a:f5:f0:2b:d3:f8:78:e9:c9:90:02:3e:46: 80:4a:0a:61:bb:dc:2f:04:c8:6e:fd:94:4f:3f:01: 36:97:2b:a8:85:89:0b:3b:12:6e:39:24:1f:77:5b: 6d:66:21:5e:d4:30:1a:23:1c:db:55:2d:63:05:f8: f1:3e:d3:4e:57:dd:50:a5:0f:f7:dd:1e:8b:eb:c8: 98:00:d2:ad:31:b6:6c:2b:e6:25:8e:80:a2:ef:3c: 6b:e8:a3:35:79:46:59:62:9c:af:30:40:1c:71:67: e1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1C:A4:FE:5A:D0:8A:BD:5E:EB:F3:69:2E:80:13:96:5E:34:EB:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4009f812-e05c-3242-9c70-0785a6e78815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 172.81.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d1:b1:23:0b:32:52:b7:a0:96:2c:3c:ad:f9:46:3c:e6:f2: 0a:24:99:57:14:37:eb:5f:21:0c:57:76:25:59:d3:a3:c5:b0: ba:3a:18:93:9f:72:7a:19:12:40:c7:44:b6:31:0a:28:6a:bb: 51:b9:05:9b:b6:10:8d:f7:df:f8:2f:82:72:b2:03:47:ce:ce: 5b:94:63:aa:46:68:a8:28:75:06:cc:f5:20:9d:8c:fd:cd:64: 14:c2:2e:ef:39:5d:09:18:ad:3e:ed:64:74:b0:20:86:a1:c6: fc:a8:d6:69:9d:bc:0f:dc:bb:8c:a4:f6:e3:38:a7:16:0f:54: f3:d4:4d:3d:4f:c8:ea:8c:eb:cb:93:98:d2:0d:a1:b2:42:36: 25:2e:ae:af:1e:60:23:83:26:fd:38:d7:c2:e1:ad:1d:ae:2d: a2:26:fe:cc:f3:57:b2:f2:64:83:09:e6:d3:da:f4:da:82:24: 01:32:ef:cf:d1:c8:34:57:bc:21:42:4f:01:b2:12:db:84:61: e5:30:a6:89:4e:7a:11:2d:54:38:5a:ab:a5:c1:5a:b0:73:a8: 7e:c8:6c:08:af:c1:0b:a6:87:7a:ea:46:1d:ff:ef:5f:d2:b9: ed:3a:71:f7:23:96:5f:0a:fd:c2:fe:fc:50:24:05:48:4b:82: 7f:06:14:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUmFHCMo8zu+hioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZDMwYTgyNTQtMmZjNC00MzYxLWFiOGMtYjlkZjZhZTIzOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiET4u/f1aOz6ZmZFZghaAMrHEl7f+1K1FcH RuRr05PuWfU9Nk0+HYwEnCHT5ApTkwW2ZOu4MVcRdlFxE6rsFMSmiYODOFYi1ZYg uDUX4bhfdlKmYr4m59gEQrJbZSx8TjWEihetdEf68Ln+7u7Wwiy54JiNYXzSRdmA chynUrYtcxBkq8RTiw7IXiT6XmZyGCUFRWI3ITr18CvT+HjpyZACPkaASgphu9wv BMhu/ZRPPwE2lyuohYkLOxJuOSQfd1ttZiFe1DAaIxzbVS1jBfjxPtNOV91QpQ/3 3R6L68iYANKtMbZsK+YljoCi7zxr6KM1eUZZYpyvMEAccWfhMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMccpP5a0Iq9XuvzaS6AE5ZeNOt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNDAwOWY4MTItZTA1Yy0z MjQyLTljNzAtMDc4NWE2ZTc4ODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3RsSMLMlK3oJYsPK35Rjzm8gokmVcUN+tfIQxXdiVZ06PFsLo6GJOf cnoZEkDHRLYxCihqu1G5BZu2EI333/gvgnKyA0fOzluUY6pGaKgodQbM9SCdjP3N ZBTCLu85XQkYrT7tZHSwIIahxvyo1mmdvA/cu4yk9uM4pxYPVPPUTT1PyOqM68uT mNINobJCNiUurq8eYCODJv0418LhrR2uLaIm/szzV7LyZIMJ5tPa9NqCJAEy78/R yDRXvCFCTwGyEtuEYeUwpolOehEtVDhaq6XBWrBzqH7IbAivwQumh3rqRh3/71/S ue06cfcjll8K/cL+/FAkBUhLgn8GFGM= -----END CERTIFICATE-----Generated at Thu Sep 24 20:14:46 2026 by rpki-client