$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa File: 147822a5-c475-34ed-abbe-3e272f9028c9.roa (raw, json) Hash identifier: t9aeOg+IbPd5RrFWx6h4+3DNFZPOvR6SF9Gf5ZPUL3s= Subject key identifier: D9:2E:5E:C6:1B:4D:1D:33:84:E0:07:37:CC:F8:99:CB:BF:43:C5:D4 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584EF2E7681FBA9EE6AF9F2F7C80 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 76.76.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:68:1f:ba:9e:e6:af:9f:2f:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=b0915b10-7dfd-459d-bc1f-b7edec1a1708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:96:f5:7c:e2:f3:99:cc:7f:d5:24:b3:a8: 51:ea:cc:ae:a1:0b:66:5d:c6:fa:b7:79:2c:90:6b: 82:f1:1d:68:db:d6:51:23:d2:30:0c:03:b7:c4:ae: b7:bf:10:91:30:9f:08:0a:3b:b6:dc:b2:91:17:89: f9:df:19:be:60:8e:a2:d0:4b:60:a4:fb:1e:b4:5d: 63:b1:fe:13:30:2c:d7:e8:a7:b9:b3:d2:03:e4:5a: f0:7d:7e:d9:67:c5:d7:29:00:ac:dd:b2:16:3b:c6: 85:10:bb:1d:88:50:93:ca:3e:59:97:2e:65:82:42: 04:1f:c0:22:83:36:8f:30:dc:71:29:32:7f:59:b8: 32:71:bd:22:92:00:12:9c:f4:68:a3:b0:47:40:a3: 9a:70:76:4b:5e:10:05:50:d4:b0:22:53:b4:3f:32: 60:1f:c5:f8:00:46:7b:d6:fe:bc:fa:5e:7c:6c:a5: a2:6f:3e:7f:27:02:50:bf:8f:f3:ca:2e:79:89:8c: d2:a0:e6:3b:00:21:29:26:8d:55:50:0b:1e:6c:d4: b7:d8:fb:87:93:21:44:64:7a:03:24:c5:57:7b:47: cd:28:32:61:72:35:29:98:59:6c:ef:ad:84:09:3a: 10:eb:d7:58:7e:e4:5f:98:89:86:6e:c5:0e:b0:73: 4a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2E:5E:C6:1B:4D:1D:33:84:E0:07:37:CC:F8:99:CB:BF:43:C5:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 76.76.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0a:2f:62:e2:8a:f9:79:9f:a4:85:43:71:79:8b:ef:d7:e4: f6:56:f4:7b:c9:8a:76:11:e6:11:44:f6:e2:83:ed:04:a8:9e: a7:04:6d:1a:80:74:cf:2b:e0:24:2d:38:7c:be:51:6a:b9:3a: f5:42:e3:7e:66:c4:87:94:a6:a4:d1:49:1d:e4:00:94:98:14: 08:39:d7:ce:a0:d8:42:3d:a0:f7:bd:22:e6:53:0e:9f:46:22: 38:46:49:6e:6e:fd:29:1b:75:38:ff:05:ef:1a:42:4c:c7:a3: 96:66:88:8c:b1:a6:48:e8:be:e2:5a:1c:13:10:ce:8a:be:51: ba:e2:60:14:0a:17:69:93:02:a2:ed:3a:c7:f4:4e:7d:f2:77: 03:f3:12:59:aa:2f:d2:b4:24:fa:ed:dc:41:f9:37:5a:31:57: f5:c3:30:f2:bd:bf:03:ba:e1:c9:ed:55:7e:a7:03:c6:94:4e: 8d:32:6c:f1:a4:21:85:92:95:dc:c3:c1:e8:e0:43:04:98:da: 08:0c:b9:f6:6c:6f:57:2d:d2:b3:39:7b:16:cf:29:5e:9a:96: a8:9a:6a:ad:85:cd:7e:aa:37:a5:7b:c9:ff:05:f8:50:04:8a: 5c:40:1c:d3:9a:3c:cc:4e:5a:20:56:99:21:4e:75:7d:6b:1e: e4:d8:f0:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y52gfup7mr58vfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk YjA5MTViMTAtN2RmZC00NTlkLWJjMWYtYjdlZGVjMWExNzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq6W9Xzi85nMf9Uks6hR6syuoQtmXcb6t3ks kGuC8R1o29ZRI9IwDAO3xK63vxCRMJ8ICju23LKRF4n53xm+YI6i0EtgpPsetF1j sf4TMCzX6Ke5s9ID5FrwfX7ZZ8XXKQCs3bIWO8aFELsdiFCTyj5Zly5lgkIEH8Ai gzaPMNxxKTJ/Wbgycb0ikgASnPRoo7BHQKOacHZLXhAFUNSwIlO0PzJgH8X4AEZ7 1v68+l58bKWibz5/JwJQv4/zyi55iYzSoOY7ACEpJo1VUAsebNS32PuHkyFEZHoD JMVXe0fNKDJhcjUpmFls762ECToQ69dYfuRfmImGbsUOsHNK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkuXsYbTR0zhOAHN8z4mcu/Q8XUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvMTQ3ODIyYTUtYzQ3NS0z NGVkLWFiYmUtM2UyNzJmOTAyOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATEwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwKL2Liivl5n6SFQ3F5i+/X5PZW9HvJinYR5hFE9uKD7QSonqcEbRqA dM8r4CQtOHy+UWq5OvVC435mxIeUpqTRSR3kAJSYFAg5186g2EI9oPe9IuZTDp9G IjhGSW5u/SkbdTj/Be8aQkzHo5ZmiIyxpkjovuJaHBMQzoq+UbriYBQKF2mTAqLt Osf0Tn3ydwPzElmqL9K0JPrt3EH5N1oxV/XDMPK9vwO64cntVX6nA8aUTo0ybPGk IYWSldzDwejgQwSY2ggMufZsb1ct0rM5exbPKV6alqiaaq2FzX6qN6V7yf8F+FAE ilxAHNOaPMxOWiBWmSFOdX1rHuTY8Jc= -----END CERTIFICATE-----Generated at Thu Oct 1 10:56:20 2026 by rpki-client