$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/6d43011a-c6d1-3953-b4a1-e86795dffe10.roa File: 6d43011a-c6d1-3953-b4a1-e86795dffe10.roa (raw, json) Hash identifier: 394xxgJMav0Cq8sY82ATZHUpX17isIH8ja5WbjNk2CY= Subject key identifier: B5:72:C3:09:9D:16:5A:35:FC:F3:0C:9A:49:BC:99:0D:18:3B:9F:1F Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584F498954A377533FC94DDCAA00 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/6d43011a-c6d1-3953-b4a1-e86795dffe10.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 47007 IP address blocks: 172.84.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:54:a3:77:53:3f:c9:4d:dc:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=76d39a21-40a2-4b84-b6cc-4e888e002bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:41:de:a9:fb:27:cc:88:61:bc:66:10:ac: d5:c1:6b:72:2a:d1:27:d2:30:5d:9a:71:9b:30:0c: 08:e4:9d:dd:ad:0a:64:b8:51:ae:1d:56:c7:5e:3c: ee:14:24:1f:1b:62:52:6c:e4:88:a6:2f:c9:5b:2f: 29:dd:f0:2b:0b:b1:03:b0:39:ef:fd:6c:02:7d:77: df:aa:c6:b0:97:2b:7d:30:5c:cc:04:02:82:07:fe: fb:74:27:d6:14:9d:33:48:7c:78:c8:8e:a4:f6:7c: af:24:4c:46:9f:39:63:f0:cf:f9:0d:16:b1:3d:31: f2:e2:11:0f:25:d3:e7:ad:33:4c:cc:54:1b:92:09: f3:83:5b:d5:66:be:07:60:7a:a9:a9:be:e2:45:28: 86:19:e5:09:f2:c3:d4:76:aa:33:e2:bc:18:f8:94: bc:9d:86:e0:f4:7b:f5:98:e7:54:d4:3e:a1:5d:57: 58:38:36:20:ab:98:82:ac:4d:43:85:84:a6:40:e8: da:56:88:62:23:f8:6b:9e:32:24:01:82:fd:08:8f: fe:de:2d:d1:14:c5:4d:b8:fd:8d:d5:c5:c8:19:6e: 99:f5:02:c2:11:7d:d1:46:8e:50:10:a8:2f:ec:57: 62:19:c8:07:eb:5c:4f:23:07:93:8a:43:c9:76:b3: 0d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:72:C3:09:9D:16:5A:35:FC:F3:0C:9A:49:BC:99:0D:18:3B:9F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/6d43011a-c6d1-3953-b4a1-e86795dffe10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b0:41:a4:5c:de:35:7c:ee:92:7a:a6:91:ad:f6:1e:a2:60: 1b:ca:70:c6:44:80:d4:a7:d2:1e:31:ee:ec:b6:c1:28:3b:93: a9:15:b8:b5:2e:e8:8a:29:69:07:62:02:14:1e:be:5f:d8:83: 61:0d:5f:ea:c3:72:2a:5b:c9:f4:ca:5a:bc:55:4b:1a:73:5c: 1d:98:36:b5:62:9b:ff:50:ca:fc:53:af:28:6e:b6:5b:4d:99: e6:5b:12:fa:52:65:2c:4f:2d:06:e7:b1:16:1c:b0:e9:96:74: 3c:cb:23:1f:77:06:ab:87:89:c5:84:70:d1:e8:ab:e7:09:ab: d1:f2:d5:d2:ef:fd:f5:a3:14:31:88:43:c4:f3:36:64:95:ef: ca:0e:fa:7e:96:68:a4:a6:a9:73:3b:f8:47:0e:81:a2:0f:b2: 5a:46:44:29:ea:b5:cd:4e:26:4b:9d:00:1d:a4:3d:20:d9:9b: b1:bf:00:7e:32:c7:32:49:b4:c8:be:87:a2:a3:da:ad:c3:ac: 5f:20:66:9c:ec:83:77:88:9a:f4:19:03:89:87:76:da:a1:16: 59:51:85:ba:b9:bc:7d:4f:dd:97:ce:42:af:17:6a:3c:9d:79: 7e:77:b2:f0:4e:19:75:c5:83:e8:34:19:04:92:dd:54:d6:a1: cb:fe:81:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiVSjd1M/yU3cqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzZkMzlhMjEtNDBhMi00Yjg0LWI2Y2MtNGU4ODhlMDAyYmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCVB3qn7J8yIYbxmEKzVwWtyKtEn0jBdmnGb MAwI5J3drQpkuFGuHVbHXjzuFCQfG2JSbOSIpi/JWy8p3fArC7EDsDnv/WwCfXff qsawlyt9MFzMBAKCB/77dCfWFJ0zSHx4yI6k9nyvJExGnzlj8M/5DRaxPTHy4hEP JdPnrTNMzFQbkgnzg1vVZr4HYHqpqb7iRSiGGeUJ8sPUdqoz4rwY+JS8nYbg9Hv1 mOdU1D6hXVdYODYgq5iCrE1DhYSmQOjaVohiI/hrnjIkAYL9CI/+3i3RFMVNuP2N 1cXIGW6Z9QLCEX3RRo5QEKgv7FdiGcgH61xPIweTikPJdrMNKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVywwmdFlo1/PMMmkm8mQ0YO58fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvNmQ0MzAxMWEtYzZkMS0z OTUzLWI0YTEtZTg2Nzk1ZGZmZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAawQaRc3jV87pJ6ppGt9h6iYBvKcMZEgNSn0h4x7uy2wSg7k6kVuLUu 6IopaQdiAhQevl/Yg2ENX+rDcipbyfTKWrxVSxpzXB2YNrVim/9QyvxTryhutltN meZbEvpSZSxPLQbnsRYcsOmWdDzLIx93BquHicWEcNHoq+cJq9Hy1dLv/fWjFDGI Q8TzNmSV78oO+n6WaKSmqXM7+EcOgaIPslpGRCnqtc1OJkudAB2kPSDZm7G/AH4y xzJJtMi+h6Kj2q3DrF8gZpzsg3eImvQZA4mHdtqhFllRhbq5vH1P3ZfOQq8Xajyd eX53svBOGXXFg+g0GQSS3VTWocv+ge8= -----END CERTIFICATE-----Generated at Sat Sep 26 15:32:52 2026 by rpki-client