$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/a48b96c3-1f34-3ac5-afc2-cc9442d5e6c6.roa File: a48b96c3-1f34-3ac5-afc2-cc9442d5e6c6.roa (raw, json) Hash identifier: 3JsxFkhEUdIhQkvyq5Ave5kDNydYv8g1SJM+sp3kyI0= Subject key identifier: 58:AC:A3:10:70:7F:37:05:CF:6F:A4:FE:B9:95:80:CE:A1:E0:76:54 Certificate issuer: /CN=cb3c1858-774e-412f-8f35-dbceb0979782 Certificate serial: 010D0C9F4328584F8412E3079A3B0CBCED5B3700 Authority key identifier: B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/a48b96c3-1f34-3ac5-afc2-cc9442d5e6c6.roa Signing time: Fri 16 Oct 2026 01:00:12 +0000 ROA not before: Fri 16 Oct 2026 01:00:12 +0000 ROA not after: Thu 14 Jan 2027 02:00:12 +0000 asID: 23118 IP address blocks: 69.77.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:84:12:e3:07:9a:3b:0c:bc:ed:5b:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3c1858-774e-412f-8f35-dbceb0979782 Validity Not Before: Oct 16 01:00:12 2026 GMT Not After : Jan 14 02:00:12 2027 GMT Subject: CN=2888bf4d-6d82-4ffa-aea9-70c9ec253284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:96:e6:79:ca:63:be:04:d0:e0:2a:f9:a6: 42:76:99:6f:8a:7c:bb:46:18:88:1c:c6:73:8a:75: 8e:14:9b:4f:d0:06:31:41:80:35:f7:ca:8e:27:d5: 60:a0:14:86:d5:40:bc:b2:ae:4f:94:c7:31:c7:01: c8:d7:36:8e:d9:f5:cf:cc:1f:9f:68:18:e3:c2:a5: 81:16:39:13:24:9e:f5:0f:c0:16:33:89:47:fc:9c: ea:2f:4e:9f:75:47:29:aa:69:24:84:20:c0:9b:8a: 5c:18:4b:7e:d6:b5:8f:c8:a5:44:a2:38:ab:e3:56: 7a:43:fa:47:90:7c:f9:48:70:3c:36:56:00:c8:8b: e2:0f:b6:5c:26:d2:83:e2:e3:f4:c5:3b:c8:2d:ba: 76:fc:c0:92:29:c6:c3:f9:5d:7d:72:f3:1a:8c:2c: a4:64:c9:96:fd:df:7f:12:2e:02:e8:0e:f5:2d:8c: f1:0d:e1:d2:df:29:d4:70:5a:59:8c:f6:23:5b:01: ad:2d:42:6a:b5:2e:98:b8:13:2c:11:b0:88:3f:7c: 3b:27:06:76:29:15:2e:31:39:50:1a:53:47:99:bd: 41:29:6e:0b:fb:f3:46:75:df:2d:37:0b:c2:8a:f5: 78:85:50:4b:03:15:92:98:dd:9f:40:f5:2f:55:0a: c3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AC:A3:10:70:7F:37:05:CF:6F:A4:FE:B9:95:80:CE:A1:E0:76:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/a48b96c3-1f34-3ac5-afc2-cc9442d5e6c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl X509v3 Authority Key Identifier: keyid:B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer sbgp-ipAddrBlock: critical IPv4: 69.77.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:00:39:16:95:d3:93:75:64:e1:44:7f:c0:0c:97:d1:95:50: a1:1f:9f:9a:46:b9:2b:f1:52:2c:2e:1e:ec:b7:de:a0:cf:2b: 1e:bf:b4:45:8e:2f:b4:b5:40:f5:bd:d6:52:7e:a7:4e:a1:21: d3:b2:31:b8:26:1f:2c:16:2b:37:55:e1:9e:26:93:33:ac:a4: 14:ce:2d:23:5c:78:af:a0:10:49:fa:84:3e:ef:87:ea:3b:ac: 33:71:c5:1f:77:53:5b:5a:7b:c0:47:56:52:09:13:56:85:5f: f2:8f:da:5f:bc:3e:b9:29:3e:d6:91:1b:2e:c0:06:74:89:86: d3:b1:f6:f6:16:65:fa:6a:01:c1:87:dc:96:97:e4:3e:ba:fd: 18:b4:b2:ce:cd:31:12:1c:3d:b7:ab:bc:36:ef:4e:d2:3e:68: 50:e9:0d:6b:92:6f:48:00:4d:1e:0b:5b:25:d3:03:7f:a6:6f: e9:92:ad:7a:81:c6:a5:8e:9a:28:5c:11:78:95:54:bc:01:1b: 32:a9:73:dc:4a:bf:37:a5:00:01:4f:45:93:38:df:d7:96:d7: 95:51:2f:96:79:71:a5:8d:8b:e6:6a:e7:56:e1:85:96:b0:96: 06:32:f8:40:b7:f4:bf:3f:08:e2:e8:91:ae:74:99:92:b4:ec: 4d:c3:29:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+EEuMHmjsMvO1bNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYzE4NTgtNzc0ZS00MTJmLThmMzUtZGJjZWIwOTc5 NzgyMB4XDTI2MTAxNjAxMDAxMloXDTI3MDExNDAyMDAxMlowLzEtMCsGA1UEAxMk Mjg4OGJmNGQtNmQ4Mi00ZmZhLWFlYTktNzBjOWVjMjUzMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw2W5nnKY74E0OAq+aZCdplviny7RhiIHMZz inWOFJtP0AYxQYA198qOJ9VgoBSG1UC8sq5PlMcxxwHI1zaO2fXPzB+faBjjwqWB FjkTJJ71D8AWM4lH/JzqL06fdUcpqmkkhCDAm4pcGEt+1rWPyKVEojir41Z6Q/pH kHz5SHA8NlYAyIviD7ZcJtKD4uP0xTvILbp2/MCSKcbD+V19cvMajCykZMmW/d9/ Ei4C6A71LYzxDeHS3ynUcFpZjPYjWwGtLUJqtS6YuBMsEbCIP3w7JwZ2KRUuMTlQ GlNHmb1BKW4L+/NGdd8tNwvCivV4hVBLAxWSmN2fQPUvVQrDHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFisoxBwfzcFz2+k/rmVgM6h4HZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYjNj MTg1OC03NzRlLTQxMmYtOGYzNS1kYmNlYjA5Nzk3ODIvYTQ4Yjk2YzMtMWYzNC0z YWM1LWFmYzItY2M5NDQyZDVlNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2IzYzE4NTgtNzc0ZS00MTJmLThm MzUtZGJjZWIwOTc5NzgyL2NiM2MxODU4LTc3NGUtNDEyZi04ZjM1LWRiY2ViMDk3 OTc4Mi5jcmwwHwYDVR0jBBgwFoAUsxchefvHIXUBMemhKCKmwsqNtjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYjNjMTg1OC03NzRlLTQxMmYtOGYzNS1kYmNl YjA5Nzk3ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRU2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgAORaV05N1ZOFEf8AMl9GVUKEfn5pGuSvxUiwuHuy33qDPKx6/tEWO L7S1QPW91lJ+p06hIdOyMbgmHywWKzdV4Z4mkzOspBTOLSNceK+gEEn6hD7vh+o7 rDNxxR93U1tae8BHVlIJE1aFX/KP2l+8PrkpPtaRGy7ABnSJhtOx9vYWZfpqAcGH 3JaX5D66/Ri0ss7NMRIcPbervDbvTtI+aFDpDWuSb0gATR4LWyXTA3+mb+mSrXqB xqWOmihcEXiVVLwBGzKpc9xKvzelAAFPRZM439eW15VRL5Z5caWNi+Zq51bhhZaw lgYy+EC39L8/COLoka50mZK07E3DKQ4= -----END CERTIFICATE-----Generated at Sat Oct 31 12:28:58 2026 by rpki-client