$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/78afa306-0825-379d-9dc1-c8d5d304c108.roa File: 78afa306-0825-379d-9dc1-c8d5d304c108.roa (raw, json) Hash identifier: cECYjHDethVQO3X2Kl0EbjZnWhim+OmPgUZOnJXm5d4= Subject key identifier: 86:1C:BC:07:B6:EB:1D:80:7F:B4:68:D4:88:A3:A2:B9:4D:81:59:ED Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584F4112B86E8FD25A9BA6479800 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/78afa306-0825-379d-9dc1-c8d5d304c108.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 26548 IP address blocks: 169.197.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b8:6e:8f:d2:5a:9b:a6:47:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=63d6c139-6f3b-4f22-bb10-c792806d8f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:70:df:d6:f4:91:d3:f7:79:3f:5e:81:49:3e: 1c:97:f9:88:b9:05:3c:04:ba:be:50:98:56:77:56: 7c:0f:b1:ec:33:bd:be:00:af:b1:94:a0:ed:4a:9e: 23:41:52:ac:5b:c3:cc:a7:d8:23:d7:f5:e3:ce:d1: 50:b4:58:7f:df:43:09:22:17:8c:0a:97:5c:cf:d9: 20:00:d6:ff:4c:c1:82:fc:5d:47:7f:8a:3e:bf:5d: a7:2e:76:bd:5a:bf:fc:47:67:b4:ca:9a:c0:68:ee: 39:a8:68:93:36:4f:cb:c3:7e:9d:d2:8b:bf:7e:13: e0:99:1e:87:99:10:4a:06:7d:ee:34:bd:76:64:d6: b9:0a:b6:4f:9e:b8:97:cb:7f:a1:a2:07:a3:3c:23: 87:ae:1c:bd:69:fd:02:2d:82:c0:6b:74:a2:85:fb: 1d:0b:5f:f8:d6:42:63:52:da:d1:43:7d:46:9e:7e: a0:ad:2f:3d:05:c5:89:95:6a:f2:4a:6f:d9:9f:ea: bd:f1:9f:f9:92:15:83:1a:f9:27:8e:83:52:5e:d8: 7c:eb:9a:10:86:d8:6d:30:bd:75:34:70:4d:27:a6: ef:30:aa:bd:ff:61:68:25:3d:28:6d:84:24:6e:5c: 4d:71:a9:65:ee:65:bb:04:18:c9:6a:5d:20:96:e1: a2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1C:BC:07:B6:EB:1D:80:7F:B4:68:D4:88:A3:A2:B9:4D:81:59:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/78afa306-0825-379d-9dc1-c8d5d304c108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 169.197.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:cb:97:41:e5:00:84:52:50:14:5a:f3:f8:50:24:72:7e:57: e7:4c:1f:ad:76:af:0a:c4:5d:8b:bd:b8:a1:19:66:75:bb:0d: d2:44:96:a1:f3:31:49:1b:11:8f:10:4e:02:75:d9:fd:82:72: a0:76:e2:30:9d:80:d5:56:14:16:6c:df:56:7f:99:49:16:47: 03:8f:78:63:ac:65:3b:45:df:a6:ae:89:15:88:a2:4c:29:a9: 93:ed:4f:02:03:dc:1c:6d:48:c3:e7:d1:5d:df:3a:b2:c1:39: 3e:d5:5a:06:38:bd:14:44:af:83:0c:c8:ab:1b:23:97:6e:c3: 9e:b7:63:e9:20:5c:8f:04:6b:4e:2b:7f:bc:f7:4e:0a:5f:d6: db:ca:7b:ce:bc:f6:38:88:6e:20:89:3a:36:05:a9:b1:7b:1c: a5:bb:9c:29:75:f7:15:31:bb:f6:83:9d:d4:ea:fa:5a:d9:a7: 1a:2f:4f:02:8c:79:75:1c:07:2b:98:15:16:99:47:0f:b6:25: 6a:0f:e5:70:c6:01:e2:ba:bd:99:a7:83:c7:28:ba:ba:ff:30: d3:43:8b:e5:d4:b3:0e:23:3f:24:1a:4f:ce:da:39:b4:eb:85: d7:09:93:46:e7:20:dc:a3:d6:7f:d9:63:d9:fd:2f:10:36:53: 11:59:42:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErhuj9Jam6ZHmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NjNkNmMxMzktNmYzYi00ZjIyLWJiMTAtYzc5MjgwNmQ4ZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnDf1vSR0/d5P16BST4cl/mIuQU8BLq+UJhW d1Z8D7HsM72+AK+xlKDtSp4jQVKsW8PMp9gj1/XjztFQtFh/30MJIheMCpdcz9kg ANb/TMGC/F1Hf4o+v12nLna9Wr/8R2e0yprAaO45qGiTNk/Lw36d0ou/fhPgmR6H mRBKBn3uNL12ZNa5CrZPnriXy3+hogejPCOHrhy9af0CLYLAa3SihfsdC1/41kJj UtrRQ31Gnn6grS89BcWJlWrySm/Zn+q98Z/5khWDGvknjoNSXth865oQhthtML11 NHBNJ6bvMKq9/2FoJT0obYQkblxNcall7mW7BBjJal0gluGiJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYcvAe26x2Af7Ro1IijorlNgVntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvNzhhZmEzMDYtMDgyNS0z NzlkLTlkYzEtYzhkNWQzMDRjMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqcVQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvLl0HlAIRSUBRa8/hQJHJ+V+dMH612rwrEXYu9uKEZZnW7DdJElqHz MUkbEY8QTgJ12f2CcqB24jCdgNVWFBZs31Z/mUkWRwOPeGOsZTtF36auiRWIokwp qZPtTwID3BxtSMPn0V3fOrLBOT7VWgY4vRREr4MMyKsbI5duw563Y+kgXI8Ea04r f7z3Tgpf1tvKe8689jiIbiCJOjYFqbF7HKW7nCl19xUxu/aDndTq+lrZpxovTwKM eXUcByuYFRaZRw+2JWoP5XDGAeK6vZmng8courr/MNNDi+XUsw4jPyQaT87aObTr hdcJk0bnINyj1n/ZY9n9LxA2UxFZQjk= -----END CERTIFICATE-----Generated at Fri Sep 25 06:53:48 2026 by rpki-client