$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa File: 774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa (raw, json) Hash identifier: /JEEnJ4uLtS7C35q4Za2VBvr1cYGHAPfiB1ZYlVdjfw= Subject key identifier: 13:DB:A8:2C:C8:9B:E2:D9:C7:53:8E:8B:E8:32:E9:0F:27:A7:16:12 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584F506D471EEC03549B02605E80 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 16433 IP address blocks: 173.240.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:47:1e:ec:03:54:9b:02:60:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=e963bf91-0316-46e3-bb06-4ed7102454c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9f:cb:dc:95:5b:86:9d:0b:75:cc:1d:9c:98: 75:a6:e3:7d:45:5b:08:97:3f:59:cb:9e:83:fd:5a: df:40:fb:1d:f2:dd:15:c9:8e:4b:87:10:2b:ea:f5: b2:39:f9:c0:81:3c:b7:14:1c:6a:9a:f7:f1:7b:79: c3:4f:45:84:f0:4c:fb:0b:15:bd:b0:22:50:77:39: 08:20:df:4f:5b:4c:01:7e:05:df:b9:8c:bd:c6:9a: 7c:9c:9b:ad:af:e6:e4:a5:90:01:fa:9f:c0:72:e1: b5:14:1a:c2:40:5b:64:87:dc:dc:f5:c9:70:75:06: 52:7b:aa:bb:fe:a5:2b:9f:ba:c8:f1:cd:e7:d4:aa: aa:f5:ae:db:0a:e8:3f:58:40:94:47:3a:5c:ac:79: 54:c0:08:00:71:ce:f4:ea:32:5a:00:93:8e:92:5d: 79:34:75:05:a0:b3:df:4e:a3:52:7e:e6:da:41:37: a7:3e:0f:56:99:64:a3:f6:a2:c7:80:c8:3b:6a:e8: 11:01:2b:80:5f:73:ed:ea:ca:c9:19:2d:51:78:c1: c0:39:f1:f4:2a:30:2e:b0:f4:bb:f5:1a:47:c0:26: f1:25:7c:db:a3:5b:85:0e:30:cb:5d:3d:93:42:c6: 94:7b:fd:fb:2f:05:18:ab:8b:64:45:d4:8e:3d:a5: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DB:A8:2C:C8:9B:E2:D9:C7:53:8E:8B:E8:32:E9:0F:27:A7:16:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 173.240.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:62:bc:24:c3:06:3f:cc:3b:24:cc:34:fc:c8:d9:0b:90:62: 7e:06:cb:5c:c6:bf:97:f8:ea:06:f0:1e:43:4e:ed:31:cc:07: ff:7b:60:2c:65:08:c1:4f:36:1a:08:22:44:81:1d:77:1c:e1: 0e:66:31:de:e0:fe:9c:dd:52:88:0e:db:55:d0:61:c6:44:35: 18:71:a8:0e:ad:de:6c:dc:e2:93:41:19:22:d3:a6:75:a4:b3: 9b:bf:4c:08:73:86:15:97:04:00:0d:ad:cb:68:a6:ae:bd:13: 59:00:4c:bc:7d:31:86:d6:5c:61:53:87:9d:86:b9:e8:78:f5: 2e:34:ec:0a:55:7f:45:3c:03:38:11:b6:8e:f6:0b:7c:7a:ce: d2:fe:b2:65:b3:7b:88:a8:f8:6d:25:0f:1c:4b:ba:c9:59:c1: f1:45:65:ff:54:54:65:e9:95:03:4d:a2:4b:32:cf:e1:44:16: 6a:70:31:3e:04:ed:db:c1:bb:d3:2b:68:29:3a:11:bb:fb:30: 3e:a5:84:a4:3d:22:24:c3:f4:f8:e4:b1:95:b3:3b:93:ce:48: f0:01:d4:0e:65:39:f2:52:1f:fd:33:32:dd:8c:73:1e:65:3c: ae:e5:92:75:0e:8a:8a:76:13:1d:a2:be:24:5e:16:33:af:cb: 48:95:2e:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUce7ANUmwJgXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZTk2M2JmOTEtMDMxNi00NmUzLWJiMDYtNGVkNzEwMjQ1NGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ/L3JVbhp0LdcwdnJh1puN9RVsIlz9Zy56D /VrfQPsd8t0VyY5LhxAr6vWyOfnAgTy3FBxqmvfxe3nDT0WE8Ez7CxW9sCJQdzkI IN9PW0wBfgXfuYy9xpp8nJutr+bkpZAB+p/AcuG1FBrCQFtkh9zc9clwdQZSe6q7 /qUrn7rI8c3n1Kqq9a7bCug/WECURzpcrHlUwAgAcc706jJaAJOOkl15NHUFoLPf TqNSfubaQTenPg9WmWSj9qLHgMg7augRASuAX3Pt6srJGS1ReMHAOfH0KjAusPS7 9RpHwCbxJXzbo1uFDjDLXT2TQsaUe/37LwUYq4tkRdSOPaX6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPbqCzIm+LZx1OOi+gy6Q8npxYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNzc0ZGI2ZjAtY2YyZC0z OTVlLWI1YTctNDBhNWQyMTEzNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1ivCTDBj/MOyTMNPzI2QuQYn4Gy1zGv5f46gbwHkNO7THMB/97YCxl CMFPNhoIIkSBHXcc4Q5mMd7g/pzdUogO21XQYcZENRhxqA6t3mzc4pNBGSLTpnWk s5u/TAhzhhWXBAANrctopq69E1kATLx9MYbWXGFTh52Gueh49S407ApVf0U8AzgR to72C3x6ztL+smWze4io+G0lDxxLuslZwfFFZf9UVGXplQNNoksyz+FEFmpwMT4E 7dvBu9MraCk6Ebv7MD6lhKQ9IiTD9PjksZWzO5POSPAB1A5lOfJSH/0zMt2Mcx5l PK7lknUOiop2Ex2iviReFjOvy0iVLvg= -----END CERTIFICATE-----Generated at Sun Sep 27 21:40:03 2026 by rpki-client