$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa File: daea1d32-9330-32a9-8559-afb521212b02.roa (raw, json) Hash identifier: r0T3RBccDrIH4orK86pnuHpL9Ml84fxpmQJgL/qOpNI= Subject key identifier: D2:45:34:3D:2B:0D:69:02:30:E8:5D:BE:E8:F1:F9:97:3C:B7:82:3A Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Certificate serial: 010D0C9F4328584EED521A27EC11FA0B443EE400 Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 3257 IP address blocks: 76.10.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:1a:27:ec:11:fa:0b:44:3e:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=76e6ff8b-95f7-4ef1-8385-141f73444c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:03:84:12:a0:7f:36:d5:d5:a6:32:e0:fa:55: d3:a4:4e:b4:eb:f7:52:81:91:2b:1b:4a:35:4c:2a: 20:ad:d0:5f:3c:35:b4:6c:a4:76:6d:80:01:b2:54: d3:6d:c7:27:da:6a:2a:e2:a4:5d:8a:b4:73:98:11: 32:c9:66:b7:a8:9f:2b:c8:b4:7d:46:62:37:4c:c9: f7:fa:55:11:78:5d:f7:13:d8:6f:65:8e:f1:dd:32: d4:dd:5f:5d:e3:e5:bc:f1:cc:18:3f:aa:f4:eb:d7: 6f:ce:da:0a:69:5c:35:fb:25:1d:2d:50:40:38:36: 6b:a9:07:51:0a:cf:81:85:ff:1b:c7:88:3c:16:ee: 8c:b3:a5:17:e3:21:d3:53:48:da:8f:ba:d6:af:c5: d3:16:e4:60:17:e5:37:a6:50:b7:79:d9:3f:56:6e: 9e:e0:fe:c8:b4:e5:f0:da:c0:0b:79:84:7b:00:df: 9d:32:5f:7e:8b:64:8f:9b:9e:1c:b6:52:11:84:96: 79:8a:8a:a3:f0:d2:c6:75:e1:23:8d:2a:ad:a8:4a: c1:53:2a:9c:f5:16:0a:b0:70:7e:78:d3:81:c9:3e: 12:0b:04:dc:a9:3f:d4:3b:66:63:29:65:ca:59:6a: 2b:de:a4:6f:e5:ea:68:48:ce:53:71:5b:2d:71:75: cc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:45:34:3D:2B:0D:69:02:30:E8:5D:BE:E8:F1:F9:97:3C:B7:82:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl X509v3 Authority Key Identifier: keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer sbgp-ipAddrBlock: critical IPv4: 76.10.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d1:19:71:ed:b8:d6:49:05:68:79:60:99:60:64:ba:28:40: 72:4d:94:60:4e:1b:04:32:ed:cf:2d:f9:59:9e:8c:87:c4:d0: 7c:0e:28:6e:de:90:fa:38:95:c6:dd:ea:93:0f:7e:82:08:27: 07:2e:9c:87:9f:e0:2e:5c:96:c6:9d:db:c0:b2:29:ea:50:24: 91:9b:ce:f2:fa:7a:df:57:32:06:07:13:58:79:c2:33:49:49: 39:f7:d8:a4:f3:32:b4:86:29:2d:89:ec:91:71:43:d3:43:d5: 8f:8d:bd:a7:b4:8a:95:08:d5:f4:4e:88:57:ef:8d:65:88:02: 22:52:7f:42:ff:ed:9e:c0:c4:45:6b:11:f3:1b:e1:0a:2d:22: 89:c1:86:77:e9:51:24:38:45:5e:75:cb:ef:30:5a:d2:25:09: 6a:16:cf:29:66:5a:14:45:61:1d:3b:3c:31:04:39:00:e3:28: 0d:31:25:a8:88:e3:d3:4d:d5:0b:a6:03:77:4c:d3:b2:89:90: a3:3d:ac:37:a2:e7:36:02:a4:f9:94:12:09:48:e3:f2:d1:6c: bc:4e:74:0e:ea:a7:ae:c4:4e:a2:28:df:70:de:8b:45:19:7b: c4:93:d5:63:7d:0f:04:a5:57:b6:91:35:2f:8d:16:37:d6:e2: d9:f5:77:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhon7BH6C0Q+5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw MzJmMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NzZlNmZmOGItOTVmNy00ZWYxLTgzODUtMTQxZjczNDQ0Yzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AOEEqB/NtXVpjLg+lXTpE606/dSgZErG0o1 TCogrdBfPDW0bKR2bYABslTTbccn2moq4qRdirRzmBEyyWa3qJ8ryLR9RmI3TMn3 +lUReF33E9hvZY7x3TLU3V9d4+W88cwYP6r069dvztoKaVw1+yUdLVBAODZrqQdR Cs+Bhf8bx4g8Fu6Ms6UX4yHTU0jaj7rWr8XTFuRgF+U3plC3edk/Vm6e4P7ItOXw 2sALeYR7AN+dMl9+i2SPm54ctlIRhJZ5ioqj8NLGdeEjjSqtqErBUyqc9RYKsHB+ eNOByT4SCwTcqT/UO2ZjKWXKWWor3qRv5epoSM5TcVstcXXMuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJFND0rDWkCMOhdvujx+Zc8t4I6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvZGFlYTFkMzItOTMzMC0z MmE5LTg1NTktYWZiNTIxMjEyYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2 MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETArwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzRGXHtuNZJBWh5YJlgZLooQHJNlGBOGwQy7c8t+VmejIfE0HwOKG7e kPo4lcbd6pMPfoIIJwcunIef4C5clsad28CyKepQJJGbzvL6et9XMgYHE1h5wjNJ STn32KTzMrSGKS2J7JFxQ9ND1Y+Nvae0ipUI1fROiFfvjWWIAiJSf0L/7Z7AxEVr EfMb4QotIonBhnfpUSQ4RV51y+8wWtIlCWoWzylmWhRFYR07PDEEOQDjKA0xJaiI 49NN1QumA3dM07KJkKM9rDei5zYCpPmUEglI4/LRbLxOdA7qp67ETqIo33Dei0UZ e8ST1WN9DwSlV7aRNS+NFjfW4tn1dz0= -----END CERTIFICATE-----Generated at Tue Sep 1 03:05:50 2026 by rpki-client