$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/2c4a958e-0a9e-3039-9d9f-f419a159b329.roa File: 2c4a958e-0a9e-3039-9d9f-f419a159b329.roa (raw, json) Hash identifier: k3ZEGuzQxMeyl7VIxnDFT0Wp2ICWND/4m3jA2TckNeY= Subject key identifier: 77:95:6D:54:4A:74:2A:AB:CB:F6:0C:11:50:B4:D0:DB:DE:3E:8C:A7 Certificate issuer: /CN=76b8b138-986a-4190-a7a3-3625b5f70769 Certificate serial: 010D0C9F4328584EF2E78300A12A26F5626CEC80 Authority key identifier: 39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/2c4a958e-0a9e-3039-9d9f-f419a159b329.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 21981 IP address blocks: 147.124.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:83:00:a1:2a:26:f5:62:6c:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76b8b138-986a-4190-a7a3-3625b5f70769 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=eeb630e4-fd26-469b-8852-cb913373516c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2a:f9:67:ed:13:bb:82:c7:46:5c:8d:6f:74: d6:f0:67:e9:df:4f:a3:64:99:5e:f1:7f:f7:dd:32: 77:93:f7:e8:bf:b0:53:8e:93:9b:2c:0f:06:11:e9: dc:f3:10:ec:fb:94:4c:36:06:ed:b8:60:d9:7b:0f: 73:32:07:ca:0a:cf:bc:00:0c:9f:37:34:f2:39:25: 0b:12:41:8f:38:6a:7c:9c:94:1e:64:cd:01:7e:a1: a8:6a:0a:ee:11:bc:01:fd:3b:32:f5:0f:53:36:50: 0f:2c:af:9f:26:5b:fb:bb:15:b8:4f:f4:d5:e3:dc: 03:53:32:8d:f9:9f:a4:61:4d:ab:bc:12:79:6d:8a: ea:b0:71:2e:bd:5c:78:3f:25:d8:4a:de:4c:a7:cc: 50:97:c5:55:a2:9c:5c:b5:5b:95:3a:95:24:b0:66: c5:80:1e:fa:9f:04:f7:7c:d4:df:40:a7:06:03:c3: dd:54:7f:db:7b:f3:33:6f:b1:0b:8e:9f:7c:9d:3b: 16:e2:72:f8:c4:28:ce:0e:bd:bc:31:a5:a3:b5:f3: 2c:30:1e:92:9f:80:a4:cb:a4:0b:33:6f:cf:9c:26: 2b:6a:7d:85:57:cd:cd:58:0b:5b:88:d9:81:aa:c8: 1e:db:ae:ba:b6:61:ff:0e:f7:fc:a8:22:58:01:30: 33:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:95:6D:54:4A:74:2A:AB:CB:F6:0C:11:50:B4:D0:DB:DE:3E:8C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/2c4a958e-0a9e-3039-9d9f-f419a159b329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl X509v3 Authority Key Identifier: keyid:39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer sbgp-ipAddrBlock: critical IPv4: 147.124.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ad:3d:0f:37:cc:5e:8a:74:10:15:cb:9d:fd:fc:d3:7d:52: fa:24:d7:a1:53:a1:e4:7d:08:3e:d5:cc:4b:d7:c0:73:97:ce: f3:f8:df:1b:ec:02:5d:67:4b:a6:b9:8d:67:52:74:09:f2:bb: 0e:b4:26:c6:11:ca:57:50:f1:c3:08:cf:59:5b:3d:6e:91:84: 66:ae:e5:b1:31:47:3f:17:ac:0a:db:4b:fc:f5:32:de:0c:5f: 9e:6b:75:67:b8:62:cb:84:06:4a:80:7f:c0:36:70:96:2d:62: e4:74:a9:4a:73:c8:81:ea:7f:07:45:53:cd:0a:9f:11:b2:80: ae:8e:06:85:4a:b7:36:28:7f:bb:4f:e2:bb:88:13:4d:f9:c7: 71:14:39:98:7a:f1:46:a4:05:7b:b4:6f:d5:a3:38:7d:24:4d: dc:fa:3d:32:b4:a8:94:b4:e6:86:cb:04:fb:64:9f:ce:bd:09: 8e:41:ec:4f:58:0a:cf:72:84:41:a5:a2:35:59:b9:89:5e:f6: 32:2b:ab:a7:b7:f7:d7:24:be:9d:aa:39:f7:b0:04:b7:f9:ff: 7e:9c:6d:5e:40:e3:5f:5c:be:10:f6:2a:c2:66:6c:65:79:19: a5:af:00:d6:94:37:db:6c:19:15:50:a2:06:98:2e:bb:38:97: d4:6f:50:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y54MAoSom9WJs7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZiOGIxMzgtOTg2YS00MTkwLWE3YTMtMzYyNWI1Zjcw NzY5MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZWViNjMwZTQtZmQyNi00NjliLTg4NTItY2I5MTMzNzM1MTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSr5Z+0Tu4LHRlyNb3TW8Gfp30+jZJle8X/3 3TJ3k/fov7BTjpObLA8GEenc8xDs+5RMNgbtuGDZew9zMgfKCs+8AAyfNzTyOSUL EkGPOGp8nJQeZM0BfqGoagruEbwB/Tsy9Q9TNlAPLK+fJlv7uxW4T/TV49wDUzKN +Z+kYU2rvBJ5bYrqsHEuvVx4PyXYSt5Mp8xQl8VVopxctVuVOpUksGbFgB76nwT3 fNTfQKcGA8PdVH/be/Mzb7ELjp98nTsW4nL4xCjODr28MaWjtfMsMB6Sn4Cky6QL M2/PnCYran2FV83NWAtbiNmBqsge2666tmH/Dvf8qCJYATAzOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeVbVRKdCqry/YMEVC00NvePoynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NmI4 YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1YjVmNzA3NjkvMmM0YTk1OGUtMGE5ZS0z MDM5LTlkOWYtZjQxOWExNTliMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzZiOGIxMzgtOTg2YS00MTkwLWE3 YTMtMzYyNWI1ZjcwNzY5Lzc2YjhiMTM4LTk4NmEtNDE5MC1hN2EzLTM2MjViNWY3 MDc2OS5jcmwwHwYDVR0jBBgwFoAUORd22GV+bJPh+rQky43rdnYzhHIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83NmI4YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1 YjVmNzA3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk3wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+tPQ83zF6KdBAVy539/NN9Uvok16FToeR9CD7VzEvXwHOXzvP43xvs Al1nS6a5jWdSdAnyuw60JsYRyldQ8cMIz1lbPW6RhGau5bExRz8XrArbS/z1Mt4M X55rdWe4YsuEBkqAf8A2cJYtYuR0qUpzyIHqfwdFU80KnxGygK6OBoVKtzYof7tP 4ruIE035x3EUOZh68UakBXu0b9WjOH0kTdz6PTK0qJS05obLBPtkn869CY5B7E9Y Cs9yhEGlojVZuYle9jIrq6e399ckvp2qOfewBLf5/36cbV5A419cvhD2KsJmbGV5 GaWvANaUN9tsGRVQogaYLrs4l9RvUFo= -----END CERTIFICATE-----Generated at Tue Oct 6 23:25:01 2026 by rpki-client