$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca/0f7d6047-c6e3-3d46-a586-f40b9313f0a9.roa File: 0f7d6047-c6e3-3d46-a586-f40b9313f0a9.roa (raw, json) Hash identifier: mfBITFmnmufzDs9lH+BfA3p+PztsVAe7kx9ifEY8K0A= Subject key identifier: 90:CB:12:66:A2:53:8B:9A:17:52:0A:1E:58:87:FF:E0:F3:78:CE:56 Certificate issuer: /CN=69859de6-ef56-44d3-8f0e-07916c5ce9ca Certificate serial: 010D0C9F4328584F49885E6BBAD2C4283EFEAF40 Authority key identifier: 41:9B:EC:BE:34:FF:FA:E0:2C:30:3B:BD:17:B3:BF:E7:46:E6:72:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca/0f7d6047-c6e3-3d46-a586-f40b9313f0a9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7922 IP address blocks: 170.76.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca/69859de6-ef56-44d3-8f0e-07916c5ce9ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca/69859de6-ef56-44d3-8f0e-07916c5ce9ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:5e:6b:ba:d2:c4:28:3e:fe:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69859de6-ef56-44d3-8f0e-07916c5ce9ca Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=83957fc6-8e4b-439a-8aa3-1f8c03ac7540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7e:79:b9:b1:2b:8a:81:b1:0c:0d:44:01:9d: 3c:d5:4b:e3:ff:54:55:e1:47:a8:17:8a:09:15:1d: ef:dd:07:10:20:c7:ad:08:84:06:fe:5a:96:ab:64: 4b:ca:12:23:1f:00:8c:c4:05:45:a5:f3:3a:e2:f3: b7:f1:16:35:c2:e8:f1:a5:cb:31:80:8c:dc:55:eb: e7:8f:57:a4:e5:00:74:aa:1b:b2:1f:f2:64:ce:d8: 00:af:9e:09:0f:cc:e8:e1:24:9d:ce:46:eb:6b:ca: d3:f4:ad:21:f5:9b:d5:42:aa:5c:95:06:de:fe:36: ef:42:73:ac:f8:2c:1e:51:0f:9f:93:42:70:e2:a8: 76:d3:a2:ea:e8:45:61:1e:63:7b:81:f2:a6:d7:c6: d7:32:7d:29:d6:a6:d1:61:da:ed:4a:38:98:af:49: 73:b0:da:e6:46:0c:65:46:6f:1e:ab:f7:f4:71:a8: b0:3a:6c:de:31:ed:f8:ce:f0:d8:22:8f:e5:66:2f: 1d:b1:0c:cb:f7:d3:bf:51:5a:cf:99:b0:68:df:91: da:69:87:4b:3b:ef:95:68:e8:99:0d:03:4d:f2:1e: 9e:79:a6:08:a0:e6:38:61:28:4b:dd:5c:7e:c0:5b: a9:40:04:40:e0:d1:fc:3d:79:bc:96:62:5e:9a:58: f7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CB:12:66:A2:53:8B:9A:17:52:0A:1E:58:87:FF:E0:F3:78:CE:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca/0f7d6047-c6e3-3d46-a586-f40b9313f0a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca/69859de6-ef56-44d3-8f0e-07916c5ce9ca.crl X509v3 Authority Key Identifier: keyid:41:9B:EC:BE:34:FF:FA:E0:2C:30:3B:BD:17:B3:BF:E7:46:E6:72:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69859de6-ef56-44d3-8f0e-07916c5ce9ca.cer sbgp-ipAddrBlock: critical IPv4: 170.76.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:63:27:52:c5:14:24:c0:a3:43:43:f6:10:1f:41:f8:94:6f: 14:e8:d4:d2:59:89:54:45:86:f2:27:a0:6c:08:0c:d5:75:4d: ac:6f:4f:44:1a:19:a4:e1:be:e3:93:62:f4:80:94:00:7e:91: 1f:d4:9c:64:e1:68:ac:83:c9:80:53:39:86:0e:d2:9b:43:22: 61:95:b3:99:b8:02:7c:78:96:1d:55:d1:fc:61:e4:d8:fd:8d: 37:c4:94:71:66:fa:a8:a6:22:d2:b7:f3:4d:47:52:08:6c:ab: 4b:82:c4:cb:6c:55:4e:6c:b0:bf:f0:ef:fd:b8:ee:4a:76:72: f7:09:85:43:20:f7:6a:ee:e7:e9:41:6e:b5:b6:36:99:0f:c1: f0:c3:10:97:85:e8:19:4d:4d:b4:f6:41:98:d2:4e:0a:f7:87: 84:c5:42:ab:ce:ae:b4:d3:18:1b:44:68:9e:ca:cb:f6:54:f4: 23:35:3b:da:43:8b:b8:a3:95:f9:23:07:a9:0a:a2:f9:2a:38: 3d:f9:07:49:a9:69:99:5d:bf:bd:63:02:94:e2:ae:b0:67:9f: 44:94:22:59:63:8a:37:db:7d:78:8e:e1:1d:36:a7:3d:bb:46: 15:92:d5:22:db:44:5b:5a:ff:ea:36:91:ee:b3:2e:e9:a9:f1: 67:34:82:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiF5rutLEKD7+r0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjk4NTlkZTYtZWY1Ni00NGQzLThmMGUtMDc5MTZjNWNl OWNhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODM5NTdmYzYtOGU0Yi00MzlhLThhYTMtMWY4YzAzYWM3NTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn55ubErioGxDA1EAZ081Uvj/1RV4UeoF4oJ FR3v3QcQIMetCIQG/lqWq2RLyhIjHwCMxAVFpfM64vO38RY1wujxpcsxgIzcVevn j1ek5QB0qhuyH/JkztgAr54JD8zo4SSdzkbra8rT9K0h9ZvVQqpclQbe/jbvQnOs +CweUQ+fk0Jw4qh206Lq6EVhHmN7gfKm18bXMn0p1qbRYdrtSjiYr0lzsNrmRgxl Rm8eq/f0caiwOmzeMe34zvDYIo/lZi8dsQzL99O/UVrPmbBo35HaaYdLO++VaOiZ DQNN8h6eeaYIoOY4YShL3Vx+wFupQARA4NH8PXm8lmJemlj3BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDLEmaiU4uaF1IKHliH/+DzeM5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82OTg1 OWRlNi1lZjU2LTQ0ZDMtOGYwZS0wNzkxNmM1Y2U5Y2EvMGY3ZDYwNDctYzZlMy0z ZDQ2LWE1ODYtZjQwYjkzMTNmMGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjk4NTlkZTYtZWY1Ni00NGQzLThm MGUtMDc5MTZjNWNlOWNhLzY5ODU5ZGU2LWVmNTYtNDRkMy04ZjBlLTA3OTE2YzVj ZTljYS5jcmwwHwYDVR0jBBgwFoAUQZvsvjT/+uAsMDu9F7O/50bmcmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82OTg1OWRlNi1lZjU2LTQ0ZDMtOGYwZS0wNzkx NmM1Y2U5Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqkzDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBjJ1LFFCTAo0ND9hAfQfiUbxTo1NJZiVRFhvInoGwIDNV1TaxvT0Qa GaThvuOTYvSAlAB+kR/UnGThaKyDyYBTOYYO0ptDImGVs5m4Anx4lh1V0fxh5Nj9 jTfElHFm+qimItK3801HUghsq0uCxMtsVU5ssL/w7/247kp2cvcJhUMg92ru5+lB brW2NpkPwfDDEJeF6BlNTbT2QZjSTgr3h4TFQqvOrrTTGBtEaJ7Ky/ZU9CM1O9pD i7ijlfkjB6kKovkqOD35B0mpaZldv71jApTirrBnn0SUIlljijfbfXiO4R02pz27 RhWS1SLbRFta/+o2ke6zLump8Wc0grE= -----END CERTIFICATE-----Generated at Sat Oct 10 12:56:59 2026 by rpki-client