$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/955a39a7-f863-3b2f-a974-ed555c45c350.roa File: 955a39a7-f863-3b2f-a974-ed555c45c350.roa (raw, json) Hash identifier: hkw+90J2/2ZVNDPWLXdux50S05yOhsnJty1W8/11/V0= Subject key identifier: 34:4D:7E:5C:3C:35:4E:CB:56:1A:B3:0D:99:AE:1A:34:C4:8F:F0:9D Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584FA85DF06661C3DF43649E9E80 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/955a39a7-f863-3b2f-a974-ed555c45c350.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 577 IP address blocks: 72.28.80.0/20 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5d:f0:66:61:c3:df:43:64:9e:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=3f42af4d-8ba1-4f2a-ad2f-1cd7c37efb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:3e:bc:30:46:bc:43:aa:27:c5:09:d1:8d: 17:56:ad:ae:45:50:27:ee:37:66:88:cd:51:dd:f8: c4:4a:55:00:12:75:79:b4:b1:c5:75:1b:81:13:9f: b4:df:5e:43:23:3b:4f:28:4e:19:46:c8:b1:6b:16: c1:8e:71:58:80:8c:18:ce:2c:00:7a:7d:0e:d1:9a: cb:99:7b:97:97:09:63:65:e2:52:9e:ce:df:02:be: 3f:3d:25:9b:5e:91:e5:ad:d3:1e:e3:0a:86:70:ee: 79:f0:fd:b5:74:07:68:d6:c5:1f:24:8d:e4:22:db: 26:ef:4c:6c:61:87:6a:b8:b9:ec:23:1b:c3:c3:56: dd:f1:94:10:88:ff:1c:78:ad:03:ee:96:ca:61:c7: 0c:74:af:8a:39:45:2f:b4:e8:f1:82:09:47:41:1f: 77:bc:4c:e0:45:6f:63:8a:fd:35:4a:e1:75:58:56: 52:4c:65:4e:aa:16:db:d5:b3:58:81:bf:33:67:d5: 55:ff:31:de:3c:fa:70:cb:8e:0e:b4:0c:b5:bc:94: 0d:1c:12:be:67:3e:19:79:25:35:b3:52:74:68:4b: 45:76:98:b0:98:c6:af:bc:7e:cc:da:63:19:2a:e4: 0b:0c:6d:8b:e3:02:68:67:02:ae:22:a1:c2:e3:92: 71:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4D:7E:5C:3C:35:4E:CB:56:1A:B3:0D:99:AE:1A:34:C4:8F:F0:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/955a39a7-f863-3b2f-a974-ed555c45c350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 72.28.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:9b:61:a1:4f:7e:dc:6c:e1:18:40:98:19:7e:b4:ea:64:56: ed:18:fb:f9:1b:32:5e:8f:56:81:32:01:6d:6e:1f:76:a9:c6: bc:38:62:6d:a7:3e:44:6f:d4:52:cc:8d:81:9c:5f:c7:5f:ca: bb:43:83:88:e4:f1:e7:6e:27:a6:18:1c:e9:bf:6b:ae:93:8c: 27:4e:46:62:1e:11:25:83:46:5d:1a:61:92:4c:52:2f:eb:8e: a0:1a:da:d5:ee:92:48:2a:d9:ac:89:ef:47:90:1c:76:13:af: fa:c8:2d:13:2f:c6:a0:7d:7f:6a:cb:52:a1:91:d6:e5:af:be: b0:7f:f3:cf:65:ec:4a:52:05:38:6c:50:1e:55:6a:9d:11:75: 4a:da:d1:8f:e1:5f:a0:4f:44:dc:52:6f:9e:52:6e:8a:1d:a2: 23:19:ab:14:5e:88:78:cc:7f:5d:b1:37:15:c9:2f:80:60:86: a9:5a:dd:c3:1d:30:d7:6d:4f:17:6b:f2:b7:ca:0f:2f:f7:c0: d1:d1:a6:d6:21:a8:d2:7d:c9:b5:83:03:da:be:15:86:8b:97: 90:52:8e:c1:a5:07:ff:d7:5b:28:8e:fb:b7:9c:7e:b6:6c:e6: 4d:8b:99:ea:fd:3b:2b:5d:21:f5:62:b6:97:a0:fc:bd:17:a5: 6f:e9:ac:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oXfBmYcPfQ2SenoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk M2Y0MmFmNGQtOGJhMS00ZjJhLWFkMmYtMWNkN2MzN2VmYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDg+vDBGvEOqJ8UJ0Y0XVq2uRVAn7jdmiM1R 3fjESlUAEnV5tLHFdRuBE5+0315DIztPKE4ZRsixaxbBjnFYgIwYziwAen0O0ZrL mXuXlwljZeJSns7fAr4/PSWbXpHlrdMe4wqGcO558P21dAdo1sUfJI3kItsm70xs YYdquLnsIxvDw1bd8ZQQiP8ceK0D7pbKYccMdK+KOUUvtOjxgglHQR93vEzgRW9j iv01SuF1WFZSTGVOqhbb1bNYgb8zZ9VV/zHePPpwy44OtAy1vJQNHBK+Zz4ZeSU1 s1J0aEtFdpiwmMavvH7M2mMZKuQLDG2L4wJoZwKuIqHC45JxcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRNflw8NU7LVhqzDZmuGjTEj/CdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOTU1YTM5YTctZjg2My0z YjJmLWE5NzQtZWQ1NTVjNDVjMzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJabYaFPftxs4RhAmBl+tOpkVu0Y+/kbMl6PVoEyAW1uH3apxrw4Ym2n PkRv1FLMjYGcX8dfyrtDg4jk8eduJ6YYHOm/a66TjCdORmIeESWDRl0aYZJMUi/r jqAa2tXukkgq2ayJ70eQHHYTr/rILRMvxqB9f2rLUqGR1uWvvrB/889l7EpSBThs UB5Vap0RdUra0Y/hX6BPRNxSb55SboodoiMZqxReiHjMf12xNxXJL4Bghqla3cMd MNdtTxdr8rfKDy/3wNHRptYhqNJ9ybWDA9q+FYaLl5BSjsGlB//XWyiO+7ecfrZs 5k2Lmer9OytdIfVitpeg/L0XpW/prHQ= -----END CERTIFICATE-----Generated at Fri Oct 30 22:11:18 2026 by rpki-client