$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3997b373-6c4e-48cf-84ff-a41bdd81ee34/59c12f2e-1874-3fe4-80e2-770a5dea20a7.roa File: 59c12f2e-1874-3fe4-80e2-770a5dea20a7.roa (raw, json) Hash identifier: 6O70bTR6xP6aOqJPfP0yh/NflMDngiSDHNaS/LCJ+Wg= Subject key identifier: 6A:45:95:77:66:05:0F:B2:49:61:B9:F1:45:97:65:6D:B3:F8:F8:92 Certificate issuer: /CN=3997b373-6c4e-48cf-84ff-a41bdd81ee34 Certificate serial: 010D0C9F4328584F56594D939CE48224D29CD2C0 Authority key identifier: E6:F6:85:8E:7E:F1:CE:93:D9:FD:ED:61:E4:9C:55:82:E7:50:2E:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3997b373-6c4e-48cf-84ff-a41bdd81ee34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3997b373-6c4e-48cf-84ff-a41bdd81ee34/59c12f2e-1874-3fe4-80e2-770a5dea20a7.roa Signing time: Tue 29 Sep 2026 15:54:54 +0000 ROA not before: Tue 29 Sep 2026 15:54:54 +0000 ROA not after: Mon 28 Dec 2026 16:54:54 +0000 asID: 7832 IP address blocks: 72.13.192.0/20 maxlen: 24 209.177.128.0/20 maxlen: 24 216.229.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3997b373-6c4e-48cf-84ff-a41bdd81ee34/3997b373-6c4e-48cf-84ff-a41bdd81ee34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3997b373-6c4e-48cf-84ff-a41bdd81ee34/3997b373-6c4e-48cf-84ff-a41bdd81ee34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3997b373-6c4e-48cf-84ff-a41bdd81ee34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:59:4d:93:9c:e4:82:24:d2:9c:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3997b373-6c4e-48cf-84ff-a41bdd81ee34 Validity Not Before: Sep 29 15:54:54 2026 GMT Not After : Dec 28 16:54:54 2026 GMT Subject: CN=08cbd7d8-f148-4469-a47e-b4e4ef2d77c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:db:fe:49:77:44:2f:09:48:5e:8b:48:1e:eb: 64:ea:fd:9e:45:b8:2a:50:0b:23:39:11:aa:dd:0a: 13:1e:78:78:b7:c6:82:8f:28:19:76:f2:ef:ea:fb: 92:aa:cf:87:73:da:9e:bf:7e:d7:4f:69:af:ca:a4: b7:5c:3e:9a:97:d2:e4:78:e4:56:c9:21:29:8a:c1: 4e:3c:ff:5f:fe:16:7a:07:1e:0a:b7:b4:ac:b8:97: c9:76:9b:61:e2:d4:7f:58:55:d0:17:82:78:0d:d0: aa:97:c6:17:91:a6:27:b3:85:99:59:e2:3b:35:e5: b0:f4:8a:69:7a:32:1b:e9:e5:01:66:5e:94:26:0a: 48:09:a0:66:35:26:db:94:fa:ec:b0:53:56:56:cf: 42:cb:69:3f:cb:30:d7:b4:cc:6b:a6:7f:13:06:02: 90:54:25:d5:71:d6:5a:c0:4e:43:a1:6e:b0:3a:21: 18:69:55:d8:27:e5:3a:32:2d:b1:e6:ee:b7:6d:7a: f2:f5:ca:4f:3c:0e:3e:8a:39:f5:31:46:e9:b0:19: 44:0d:69:56:50:80:45:b7:2b:e4:1a:1b:43:51:00: ed:64:70:a6:09:5a:4c:87:10:14:d2:d3:ab:26:f2: 2f:77:45:d6:fe:00:6f:c8:10:2b:23:20:cd:88:8e: 00:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:45:95:77:66:05:0F:B2:49:61:B9:F1:45:97:65:6D:B3:F8:F8:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3997b373-6c4e-48cf-84ff-a41bdd81ee34/59c12f2e-1874-3fe4-80e2-770a5dea20a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3997b373-6c4e-48cf-84ff-a41bdd81ee34/3997b373-6c4e-48cf-84ff-a41bdd81ee34.crl X509v3 Authority Key Identifier: keyid:E6:F6:85:8E:7E:F1:CE:93:D9:FD:ED:61:E4:9C:55:82:E7:50:2E:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3997b373-6c4e-48cf-84ff-a41bdd81ee34.cer sbgp-ipAddrBlock: critical IPv4: 72.13.192.0/20 209.177.128.0/20 216.229.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:a1:fd:19:3c:d5:f1:91:97:9a:92:04:4e:cf:ba:48:2e:9c: f3:12:09:f1:aa:4c:f2:39:59:d1:99:54:e4:71:c7:2a:e6:f9: 97:da:6d:7b:6f:62:bc:3c:f6:2c:28:f2:1b:3f:22:1c:63:b3: a1:31:dd:bb:c4:44:33:8d:d6:7d:a1:6c:69:f5:d9:4f:1b:b0: f7:fa:20:9c:41:29:fe:2f:38:7c:8f:b1:5f:d0:00:58:53:f0: 04:8d:92:c8:cc:5c:f0:2c:59:95:78:2d:49:34:57:3e:75:de: c7:c8:ec:c7:84:83:fb:dc:c6:af:81:86:69:73:33:85:5d:d1: 6c:b5:69:aa:28:29:fd:7e:86:ac:99:14:e0:75:cf:07:c7:08: fc:d8:e9:68:74:d9:23:a7:1c:bb:24:d9:99:a1:d7:46:4b:34: 2f:88:2b:d2:7f:07:a2:cf:00:82:b6:df:40:34:8d:04:49:2e: 65:be:5f:f3:db:e5:c9:d0:dc:e6:21:10:9d:85:07:39:bd:91: 29:64:42:19:76:27:f3:8c:9b:1b:b0:24:55:bd:8f:79:36:bd: 3c:ef:7d:ac:e2:e0:b8:61:60:41:18:7a:aa:dc:5b:86:64:67: 56:50:04:8f:fd:6b:8c:2a:c7:7b:da:48:a2:66:be:ab:f8:1d: 16:4a:ac:c1 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9WWU2TnOSCJNKc0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5N2IzNzMtNmM0ZS00OGNmLTg0ZmYtYTQxYmRkODFl ZTM0MB4XDTI2MDkyOTE1NTQ1NFoXDTI2MTIyODE2NTQ1NFowLzEtMCsGA1UEAxMk MDhjYmQ3ZDgtZjE0OC00NDY5LWE0N2UtYjRlNGVmMmQ3N2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtv+SXdELwlIXotIHutk6v2eRbgqUAsjORGq 3QoTHnh4t8aCjygZdvLv6vuSqs+Hc9qev37XT2mvyqS3XD6al9LkeORWySEpisFO PP9f/hZ6Bx4Kt7SsuJfJdpth4tR/WFXQF4J4DdCql8YXkaYns4WZWeI7NeWw9Ipp ejIb6eUBZl6UJgpICaBmNSbblPrssFNWVs9Cy2k/yzDXtMxrpn8TBgKQVCXVcdZa wE5DoW6wOiEYaVXYJ+U6Mi2x5u63bXry9cpPPA4+ijn1MUbpsBlEDWlWUIBFtyvk GhtDUQDtZHCmCVpMhxAU0tOrJvIvd0XW/gBvyBArIyDNiI4AYwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGpFlXdmBQ+ySWG58UWXZW2z+PiSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zOTk3 YjM3My02YzRlLTQ4Y2YtODRmZi1hNDFiZGQ4MWVlMzQvNTljMTJmMmUtMTg3NC0z ZmU0LTgwZTItNzcwYTVkZWEyMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzk5N2IzNzMtNmM0ZS00OGNmLTg0 ZmYtYTQxYmRkODFlZTM0LzM5OTdiMzczLTZjNGUtNDhjZi04NGZmLWE0MWJkZDgx ZWUzNC5jcmwwHwYDVR0jBBgwFoAU5vaFjn7xzpPZ/e1h5JxVgudQLrEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zOTk3YjM3My02YzRlLTQ4Y2YtODRmZi1hNDFi ZGQ4MWVlMzQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQESA3AAwQE 0bGAAwQE2OUgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJyh/Rk81fGRl5qSBE7PukgunPMSCfGqTPI5WdGZ VORxxyrm+ZfabXtvYrw89iwo8hs/Ihxjs6Ex3bvERDON1n2hbGn12U8bsPf6IJxB Kf4vOHyPsV/QAFhT8ASNksjMXPAsWZV4LUk0Vz513sfI7MeEg/vcxq+BhmlzM4Vd 0Wy1aaooKf1+hqyZFOB1zwfHCPzY6Wh02SOnHLsk2Zmh10ZLNC+IK9J/B6LPAIK2 30A0jQRJLmW+X/Pb5cnQ3OYhEJ2FBzm9kSlkQhl2J/OMmxuwJFW9j3k2vTzvfazi 4LhhYEEYeqrcW4ZkZ1ZQBI/9a4wqx3vaSKJmvqv4HRZKrME= -----END CERTIFICATE-----Generated at Wed Nov 4 11:12:30 2026 by rpki-client