$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa File: a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa (raw, json) Hash identifier: BwL5FxLSrsg7bpCWOQbCLqVlaI8IM605ftD36uPRG3E= Subject key identifier: B6:3B:3C:1B:D3:5B:9C:B7:42:81:41:3D:A5:1A:94:98:46:60:FB:6C Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584F0D6CE9E91D9F365EB6A539C0 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 396085 IP address blocks: 72.249.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e9:e9:1d:9f:36:5e:b6:a5:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=2014c933-ff5a-4f49-bde3-87db5549d458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:86:c6:bf:4b:3d:07:c8:da:86:c0:dc:bd:77: 54:c3:e8:3e:11:fe:01:1e:9f:e1:4c:fe:b3:df:cc: 29:f7:5c:b8:03:2f:e3:d0:e5:0a:f6:de:d7:6b:2e: 13:5b:76:0f:9a:b6:df:d8:38:f4:cc:51:f3:27:21: d5:26:4e:89:b7:d6:3f:3d:5c:af:de:76:b3:80:82: 43:59:56:02:40:2a:ea:54:df:30:79:0b:bb:9d:a6: d4:65:bd:92:af:91:7a:32:b3:f4:62:a1:c8:3e:02: 50:9a:5e:e5:26:ff:59:bb:9a:2f:0b:2b:6a:f5:6e: 97:ac:f0:19:67:89:fb:0e:f4:40:ea:de:91:d6:72: 08:0f:fe:b3:44:14:74:67:e3:90:ab:f4:1f:d9:04: b6:48:d9:61:84:92:2f:63:a3:14:8a:f8:e0:41:fb: c8:f9:19:12:cb:1b:7f:40:0f:4a:1e:06:19:ab:4a: a0:aa:c1:b0:dc:45:c0:f1:a0:4e:b4:de:4c:70:3e: d8:77:e8:ec:ae:af:8b:6c:5e:6e:a5:98:b5:83:b5: 5f:35:7e:32:3c:6f:99:9b:8c:be:44:3f:66:2d:7d: ef:e6:13:c1:f6:f1:f1:88:f3:42:70:ab:ca:14:fd: 4d:77:84:a3:fe:2d:38:e1:b3:87:c8:2d:0d:02:27: 55:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3B:3C:1B:D3:5B:9C:B7:42:81:41:3D:A5:1A:94:98:46:60:FB:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 72.249.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c1:26:9e:6c:a9:c0:c6:73:15:50:93:9e:a6:14:09:94:b6: 77:9b:da:39:9d:b5:54:79:05:a2:0b:e6:53:ca:5c:ca:73:a7: 1a:5b:93:b9:71:74:ae:09:22:bc:b9:e9:28:1e:48:bd:cc:d7: 6e:c2:28:bf:ec:56:6a:40:dd:0f:b2:ee:07:84:2c:d9:c5:6a: 9e:6b:cf:16:b0:3a:fa:b7:42:49:94:30:25:6b:a1:67:25:0a: 4e:73:1c:03:36:72:62:b1:dc:b3:e8:78:5a:8e:da:3d:5d:a0: e3:df:3c:8b:6a:0c:56:b8:66:3c:c0:bc:74:d9:33:7f:62:6a: 47:7c:a6:8a:2b:fd:98:84:6e:a1:5b:6d:d0:fa:e0:50:18:28: 2a:ce:0c:64:66:8a:26:ff:d3:76:fc:29:2d:67:a9:7b:3d:94: b0:93:7f:af:b1:dd:21:96:f8:f3:1f:4d:d1:8b:c4:56:4a:f3: 1e:5b:a9:7f:51:22:b5:ee:d8:3d:8d:ff:33:58:06:5f:31:98: c1:91:e7:72:b9:8f:62:0e:b7:25:c9:42:15:2f:cc:9d:c1:d5: b8:43:47:5a:3a:44:80:aa:c6:6d:d0:74:fb:2f:43:0f:15:95: 5e:b5:72:7c:25:1c:aa:36:18:d4:d4:af:9b:15:e8:40:9a:45: ad:6d:9c:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOnpHZ82XralOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MjAxNGM5MzMtZmY1YS00ZjQ5LWJkZTMtODdkYjU1NDlkNDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYbGv0s9B8jahsDcvXdUw+g+Ef4BHp/hTP6z 38wp91y4Ay/j0OUK9t7Xay4TW3YPmrbf2Dj0zFHzJyHVJk6Jt9Y/PVyv3nazgIJD WVYCQCrqVN8weQu7nabUZb2Sr5F6MrP0YqHIPgJQml7lJv9Zu5ovCytq9W6XrPAZ Z4n7DvRA6t6R1nIID/6zRBR0Z+OQq/Qf2QS2SNlhhJIvY6MUivjgQfvI+RkSyxt/ QA9KHgYZq0qgqsGw3EXA8aBOtN5McD7Yd+jsrq+LbF5upZi1g7VfNX4yPG+Zm4y+ RD9mLX3v5hPB9vHxiPNCcKvKFP1Nd4Sj/i044bOHyC0NAidVxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY7PBvTW5y3QoFBPaUalJhGYPtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTcwODFjZTYtZDBhNS0z OThhLTkwZTQtMmJmNGRmMGQ4NWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbBJp5sqcDGcxVQk56mFAmUtneb2jmdtVR5BaIL5lPKXMpzpxpbk7lx dK4JIry56SgeSL3M127CKL/sVmpA3Q+y7geELNnFap5rzxawOvq3QkmUMCVroWcl Ck5zHAM2cmKx3LPoeFqO2j1doOPfPItqDFa4ZjzAvHTZM39iakd8poor/ZiEbqFb bdD64FAYKCrODGRmiib/03b8KS1nqXs9lLCTf6+x3SGW+PMfTdGLxFZK8x5bqX9R IrXu2D2N/zNYBl8xmMGR53K5j2IOtyXJQhUvzJ3B1bhDR1o6RICqxm3QdPsvQw8V lV61cnwlHKo2GNTUr5sV6ECaRa1tnBg= -----END CERTIFICATE-----Generated at Sat Sep 5 08:04:06 2026 by rpki-client