$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/df21d110-4970-3241-a169-7ac7cce64a91.roa File: df21d110-4970-3241-a169-7ac7cce64a91.roa (raw, json) Hash identifier: aP9Nc2iMzJZ0Cz3NeFIpJBGYwo/VvdkIOI5cviyybWg= Subject key identifier: 1D:BE:AF:3C:CD:9C:E9:E4:96:2A:62:02:13:6D:41:68:15:CB:12:D3 Certificate issuer: /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17 Certificate serial: 010D0C9F4328584F549D5F226C4B0E1C6EE79880 Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/df21d110-4970-3241-a169-7ac7cce64a91.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 36734 IP address blocks: 173.195.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5f:22:6c:4b:0e:1c:6e:e7:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=801a3966-69db-4984-9cbc-1fe0b8cc608c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:20:f6:6a:f8:22:1f:d7:7c:08:fe:d9:1e:15: 2c:8f:2c:1b:79:da:89:14:46:ac:34:59:b8:03:1b: 6e:2c:92:10:f5:c7:3b:54:6c:88:c3:f8:7b:e9:4c: f9:c8:f5:ec:d0:90:95:13:e6:05:54:59:90:ec:c4: 08:21:42:a0:05:36:d2:66:42:c4:e3:1a:2e:96:e4: 8f:55:5a:89:40:8b:12:24:6c:dd:7d:99:75:49:12: 2e:47:d8:93:4d:48:61:9b:ce:d7:bd:0d:61:4f:91: f8:56:91:f7:b8:22:c5:84:5d:30:71:cd:dc:c9:07: 7a:2f:99:43:de:b1:ea:30:51:a6:20:6a:96:99:4f: 79:65:11:70:d4:ae:3a:d9:0a:08:3e:8f:9c:38:6b: a0:42:c9:3c:07:7c:74:c3:14:98:30:88:97:11:d0: 26:93:ba:46:7d:3f:ba:3f:c9:16:e1:97:d1:89:f7: f9:bb:43:8c:8c:46:d1:aa:94:27:98:61:95:7c:34: a0:fe:e2:bd:ee:05:f8:a9:a3:1a:a0:dd:ab:91:63: 65:b2:ed:03:4b:b7:72:9b:7d:02:41:76:a0:d6:68: 67:4f:94:07:16:f9:04:8d:ae:03:fc:ea:cf:8c:bd: 1e:08:03:c4:4c:eb:45:34:a1:e2:7f:52:bc:3d:d0: 3f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BE:AF:3C:CD:9C:E9:E4:96:2A:62:02:13:6D:41:68:15:CB:12:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/df21d110-4970-3241-a169-7ac7cce64a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl X509v3 Authority Key Identifier: keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer sbgp-ipAddrBlock: critical IPv4: 173.195.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0f:06:f7:c4:a3:b7:16:b8:40:5c:49:19:34:b5:24:d8:1f: 20:73:84:86:91:64:49:83:0c:4d:a9:c2:a0:78:31:ce:04:55: bd:fa:72:61:5d:a4:66:fd:e4:f6:67:e1:b6:e6:bd:fc:13:42: 4a:4b:08:95:2f:98:43:ea:f6:99:07:3d:9a:16:18:1f:db:a9: 70:06:e6:88:ad:c3:36:ca:22:d2:96:31:57:97:d6:2a:83:78: 79:50:53:ab:2e:01:e3:a8:54:61:3a:af:57:dd:0a:bd:78:90: ad:5d:a4:e5:9e:81:a7:d2:ba:71:a6:9b:c7:c2:6c:94:57:67: c7:8a:e8:8b:1a:24:30:b0:8c:0a:fb:17:9e:98:cd:9b:b0:ea: 8d:62:06:7f:9b:0b:44:d0:60:05:42:a9:4e:7e:36:ca:c1:9d: 4c:55:49:05:49:72:75:83:59:bb:67:f2:f9:65:d1:e9:da:52: b4:3a:0b:7b:35:2d:8f:bc:27:8b:51:d4:22:4e:32:cc:33:c4: 15:bc:0c:d9:62:72:45:42:75:5f:f2:d0:d8:16:0f:6f:44:f9: 3c:8c:f8:8a:f6:f5:2a:b7:f3:69:0d:f8:7c:ae:71:0c:5b:2c: b7:04:49:d7:af:62:6f:7c:69:96:c4:8c:24:90:a7:04:f5:91: ae:82:09:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnV8ibEsOHG7nmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU2YmVlZGYtYmM5OS00ZDdjLTlhMjAtNjBlYzkxM2E2 YTE3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ODAxYTM5NjYtNjlkYi00OTg0LTljYmMtMWZlMGI4Y2M2MDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyD2avgiH9d8CP7ZHhUsjywbedqJFEasNFm4 AxtuLJIQ9cc7VGyIw/h76Uz5yPXs0JCVE+YFVFmQ7MQIIUKgBTbSZkLE4xouluSP VVqJQIsSJGzdfZl1SRIuR9iTTUhhm87XvQ1hT5H4VpH3uCLFhF0wcc3cyQd6L5lD 3rHqMFGmIGqWmU95ZRFw1K462QoIPo+cOGugQsk8B3x0wxSYMIiXEdAmk7pGfT+6 P8kW4ZfRiff5u0OMjEbRqpQnmGGVfDSg/uK97gX4qaMaoN2rkWNlsu0DS7dym30C QXag1mhnT5QHFvkEja4D/OrPjL0eCAPETOtFNKHif1K8PdA/BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2+rzzNnOnklipiAhNtQWgVyxLTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ZTZi ZWVkZi1iYzk5LTRkN2MtOWEyMC02MGVjOTEzYTZhMTcvZGYyMWQxMTAtNDk3MC0z MjQxLWExNjktN2FjN2NjZTY0YTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGU2YmVlZGYtYmM5OS00ZDdjLTlh MjAtNjBlYzkxM2E2YTE3LzRlNmJlZWRmLWJjOTktNGQ3Yy05YTIwLTYwZWM5MTNh NmExNy5jcmwwHwYDVR0jBBgwFoAUyQ4hHWXwKXwCsjkvnzZN9Y5CVlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80ZTZiZWVkZi1iYzk5LTRkN2MtOWEyMC02MGVj OTEzYTZhMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrcNMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEPBvfEo7cWuEBcSRk0tSTYHyBzhIaRZEmDDE2pwqB4Mc4EVb36cmFd pGb95PZn4bbmvfwTQkpLCJUvmEPq9pkHPZoWGB/bqXAG5oitwzbKItKWMVeX1iqD eHlQU6suAeOoVGE6r1fdCr14kK1dpOWegafSunGmm8fCbJRXZ8eK6IsaJDCwjAr7 F56YzZuw6o1iBn+bC0TQYAVCqU5+NsrBnUxVSQVJcnWDWbtn8vll0enaUrQ6C3s1 LY+8J4tR1CJOMswzxBW8DNlickVCdV/y0NgWD29E+TyM+Ir29Sq382kN+HyucQxb LLcESdevYm98aZbEjCSQpwT1ka6CCUQ= -----END CERTIFICATE-----Generated at Sun Nov 1 08:36:58 2026 by rpki-client