$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa File: cc126209-aeb3-363b-92cb-8a40229b5b5c.roa (raw, json) Hash identifier: V9CPA4ZQg4L7nvDPpQb3DOCqbsbsdwOB5zPRFX49xrE= Subject key identifier: 0F:2F:9E:AC:25:6F:8C:B7:0F:86:85:C4:02:51:59:09:ED:1E:2F:73 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584F0242253F40736A01167D2240 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 395927 IP address blocks: 172.83.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:25:3f:40:73:6a:01:16:7d:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=32bf66e1-ab48-4e55-b59e-9c87a90fdb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:58:1c:77:eb:e0:d4:6f:80:0c:2d:5f:c4:24: 89:85:18:72:d1:97:53:d3:b5:00:84:a3:54:79:fe: 37:b2:a3:55:2d:fb:d3:4d:02:30:9c:e5:fb:a4:75: 23:9a:9e:6b:08:50:84:5d:22:92:dc:e8:fc:6b:39: a7:f1:ee:ee:6f:e8:ab:8e:e0:fa:45:dd:de:65:30: 91:83:11:71:32:16:83:5a:1f:13:c8:e2:24:82:0c: b2:0d:62:d2:36:4e:03:9d:f0:ae:49:49:bf:14:77: 14:64:92:74:d0:5b:01:89:70:04:b5:99:46:92:71: 03:ed:ed:44:d9:1e:fd:8f:ba:a2:62:b4:f0:e5:9f: 24:06:68:b2:a9:78:69:55:de:7c:ca:82:42:b9:00: 6e:e9:59:19:61:01:f8:df:ae:db:7b:83:ee:22:22: fa:85:11:48:77:7d:68:60:70:dc:17:43:17:39:45: 1c:cf:a2:4c:7d:01:29:ef:28:9b:6d:4f:33:7b:4a: 61:ab:45:91:aa:6e:2d:b2:48:61:a0:73:6d:5b:2d: 68:21:71:91:91:37:b6:db:1d:09:24:71:d3:b1:fe: e3:28:78:6b:9e:3b:3c:af:2e:bf:a4:a9:92:1d:27: 5b:e1:10:89:12:af:bd:65:1e:05:03:78:f9:f4:cd: af:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2F:9E:AC:25:6F:8C:B7:0F:86:85:C4:02:51:59:09:ED:1E:2F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 172.83.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1d:51:15:dc:e7:99:c5:a1:5e:06:b1:3a:e8:b2:31:70:67: 58:2f:2f:3f:18:1b:4b:11:4e:d9:11:ad:6a:f4:bc:92:4a:57: 36:6a:3b:45:3b:8c:8d:3d:15:2c:79:ad:ed:31:6e:a9:54:0f: b6:f0:b9:1e:ac:2f:af:e7:a8:30:96:ef:8f:b5:06:4d:30:d7: 04:a2:70:17:2e:96:a6:2d:63:93:59:a5:57:93:f4:91:11:a0: eb:88:9d:44:0b:bf:53:08:e8:ae:8c:28:e6:5e:7f:4c:29:e2: 70:3b:98:73:58:78:7f:81:81:7f:2e:35:fa:a4:bc:d1:4a:28: 1d:f4:aa:fb:e4:3f:ce:3a:0d:93:38:ef:38:e4:f9:99:2e:27: cd:5d:5f:68:9c:7f:02:39:2f:72:07:ac:7b:fc:f4:67:d1:b2: a4:fe:b6:66:23:72:ac:be:80:f8:b5:01:77:de:97:33:51:f3: 59:74:ce:43:e1:53:64:47:ab:69:ce:28:a0:cd:25:63:d6:ff: 49:4c:b9:f7:da:b2:b9:24:61:a5:a5:35:5a:00:00:7f:a0:8a: e4:2b:ab:90:c6:e5:78:02:3e:9b:9c:82:a2:97:7c:1f:88:d7: 6a:57:b2:af:18:52:f4:4f:2f:3c:37:86:70:90:c1:47:23:fc: 9d:03:60:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQiU/QHNqARZ9IkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MzJiZjY2ZTEtYWI0OC00ZTU1LWI1OWUtOWM4N2E5MGZkYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFgcd+vg1G+ADC1fxCSJhRhy0ZdT07UAhKNU ef43sqNVLfvTTQIwnOX7pHUjmp5rCFCEXSKS3Oj8azmn8e7ub+irjuD6Rd3eZTCR gxFxMhaDWh8TyOIkggyyDWLSNk4DnfCuSUm/FHcUZJJ00FsBiXAEtZlGknED7e1E 2R79j7qiYrTw5Z8kBmiyqXhpVd58yoJCuQBu6VkZYQH4367be4PuIiL6hRFId31o YHDcF0MXOUUcz6JMfQEp7yibbU8ze0phq0WRqm4tskhhoHNtWy1oIXGRkTe22x0J JHHTsf7jKHhrnjs8ry6/pKmSHSdb4RCJEq+9ZR4FA3j59M2vRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8vnqwlb4y3D4aFxAJRWQntHi9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvY2MxMjYyMDktYWViMy0z NjNiLTkyY2ItOGE0MDIyOWI1YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEdURXc55nFoV4GsTrosjFwZ1gvLz8YG0sRTtkRrWr0vJJKVzZqO0U7 jI09FSx5re0xbqlUD7bwuR6sL6/nqDCW74+1Bk0w1wSicBculqYtY5NZpVeT9JER oOuInUQLv1MI6K6MKOZef0wp4nA7mHNYeH+BgX8uNfqkvNFKKB30qvvkP846DZM4 7zjk+ZkuJ81dX2icfwI5L3IHrHv89GfRsqT+tmYjcqy+gPi1AXfelzNR81l0zkPh U2RHq2nOKKDNJWPW/0lMuffasrkkYaWlNVoAAH+giuQrq5DG5XgCPpucgqKXfB+I 12pXsq8YUvRPLzw3hnCQwUcj/J0DYH0= -----END CERTIFICATE-----Generated at Sun Sep 27 23:57:30 2026 by rpki-client