$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/039a554e-43ba-37e6-98d1-af4a718c60b8.roa File: 039a554e-43ba-37e6-98d1-af4a718c60b8.roa (raw, json) Hash identifier: xjBb6uCgU8cX4Fcr98eou/082y0vyoU8+wBuq9RHzpM= Subject key identifier: 03:DA:97:03:39:46:91:97:82:2D:1B:A3:8D:78:38:AD:B8:33:2D:54 Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b Certificate serial: 010D0C9F4328584F9BCDD7C1BCFAB0D8EF6332C0 Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/039a554e-43ba-37e6-98d1-af4a718c60b8.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 22925 IP address blocks: 192.95.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:d7:c1:bc:fa:b0:d8:ef:63:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=a5bcfa2c-b12f-416f-93dc-e47f76a95261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3f:f8:49:da:56:1c:47:70:8f:af:bd:6e:5b: 34:2f:82:5a:81:14:8e:4a:c6:fb:9a:3b:e2:92:94: 7b:7a:f6:e3:7b:9f:9e:1c:6a:10:98:8d:c4:96:fc: 4f:84:de:c2:06:64:34:42:d4:bb:87:33:13:ca:bc: c8:52:f1:c3:d8:99:71:73:56:49:e2:ba:35:c9:83: c5:76:38:4a:f8:23:70:69:62:b0:48:3d:b2:1a:73: 78:94:b1:9e:95:f3:13:2d:b6:cb:a2:5c:5a:38:50: be:04:b8:82:75:1e:17:7a:92:0c:0c:fc:4f:94:49: 1f:8a:c5:2f:a6:ae:45:85:b9:a1:eb:1d:ef:33:06: 3c:72:07:87:e7:e2:7a:2b:a8:62:31:ba:30:a7:f4: 33:da:a6:63:20:83:58:e6:da:11:21:b0:fa:d8:bd: 07:74:f6:6d:35:85:06:d8:10:10:9c:43:a7:4d:d5: 66:03:8a:04:31:d1:5d:0a:ec:6f:fe:c6:50:5b:33: e8:6d:ba:3c:ad:11:8e:67:75:ab:01:f1:88:ee:dd: 41:ff:35:f1:ac:bd:12:88:5e:72:ee:53:09:ea:a9: 88:48:92:3a:4f:19:b3:51:ab:74:98:81:0e:d9:42: 21:56:ad:ee:9b:47:3b:22:de:fd:f4:86:39:6b:79: 00:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DA:97:03:39:46:91:97:82:2D:1B:A3:8D:78:38:AD:B8:33:2D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/039a554e-43ba-37e6-98d1-af4a718c60b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl X509v3 Authority Key Identifier: keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer sbgp-ipAddrBlock: critical IPv4: 192.95.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:99:d2:8a:86:bc:21:9d:b0:a3:6b:0d:6a:07:d2:fc:3f:39: 21:66:d1:6d:b9:dc:8c:62:57:2e:6b:93:69:4e:2f:62:3c:0d: 62:f6:c2:a3:d9:3e:58:a2:ea:be:e2:40:f8:00:42:81:06:c8: cb:f0:b2:56:97:ab:c6:b3:16:c0:07:10:92:74:5f:28:e7:22: 05:c7:6d:75:7e:35:e0:a9:6e:b1:2b:f4:c3:39:6e:c2:9a:a9: f4:e6:10:2c:86:66:3f:32:54:1e:c0:a6:1a:e0:4f:3f:0d:c8: 46:30:76:80:ee:da:5d:a4:38:a1:ff:8c:83:04:ac:3a:65:d3: 88:04:e5:c2:56:08:a1:e9:f3:f9:0d:24:f1:26:44:db:c0:6b: 21:02:33:d6:36:c0:9c:24:07:ec:8a:e4:68:fd:38:e2:30:c4: db:18:bd:1f:3e:e4:31:82:14:70:66:36:f3:b7:a9:91:3a:69: 57:dd:f3:1c:42:af:4c:62:d4:c3:4d:a3:96:af:74:fa:34:fd: 6a:c1:5a:c5:0a:b1:c2:26:d5:af:2d:ce:9b:37:ce:e3:5e:de: 35:b7:b1:b2:66:04:1c:38:cb:cd:b3:5c:ce:86:b4:b6:ea:21: 1e:c9:60:02:da:27:93:43:e4:d6:07:a0:3f:98:0a:8b:d0:44: b8:08:c1:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzdfBvPqw2O9jMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy ZjFiMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YTViY2ZhMmMtYjEyZi00MTZmLTkzZGMtZTQ3Zjc2YTk1MjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT/4SdpWHEdwj6+9bls0L4JagRSOSsb7mjvi kpR7evbje5+eHGoQmI3ElvxPhN7CBmQ0QtS7hzMTyrzIUvHD2Jlxc1ZJ4ro1yYPF djhK+CNwaWKwSD2yGnN4lLGelfMTLbbLolxaOFC+BLiCdR4XepIMDPxPlEkfisUv pq5Fhbmh6x3vMwY8cgeH5+J6K6hiMbowp/Qz2qZjIINY5toRIbD62L0HdPZtNYUG 2BAQnEOnTdVmA4oEMdFdCuxv/sZQWzPobbo8rRGOZ3WrAfGI7t1B/zXxrL0SiF5y 7lMJ6qmISJI6TxmzUat0mIEO2UIhVq3um0c7It799IY5a3kAnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPalwM5RpGXgi0bo414OK24My1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvMDM5YTU1NGUtNDNiYS0z N2U2LTk4ZDEtYWY0YTcxOGM2MGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2 NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwF9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeZ0oqGvCGdsKNrDWoH0vw/OSFm0W253IxiVy5rk2lOL2I8DWL2wqPZ Plii6r7iQPgAQoEGyMvwslaXq8azFsAHEJJ0XyjnIgXHbXV+NeCpbrEr9MM5bsKa qfTmECyGZj8yVB7AphrgTz8NyEYwdoDu2l2kOKH/jIMErDpl04gE5cJWCKHp8/kN JPEmRNvAayECM9Y2wJwkB+yK5Gj9OOIwxNsYvR8+5DGCFHBmNvO3qZE6aVfd8xxC r0xi1MNNo5avdPo0/WrBWsUKscIm1a8tzps3zuNe3jW3sbJmBBw4y82zXM6GtLbq IR7JYALaJ5ND5NYHoD+YCovQRLgIwb8= -----END CERTIFICATE-----Generated at Sat Oct 31 02:42:14 2026 by rpki-client