$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/463948fe-8663-3463-a31b-0e36530971ad.roa File: 463948fe-8663-3463-a31b-0e36530971ad.roa (raw, json) Hash identifier: i29+aZNR6iFcie4jObkQ3+1AQ947twxvq10ZOe+3G1E= Subject key identifier: AC:23:2D:3B:53:FF:28:02:46:D4:B4:E7:01:93:FE:5B:18:60:69:CA Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584F9BCDEC8DB450744A41CF9CA0 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/463948fe-8663-3463-a31b-0e36530971ad.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 10796 IP address blocks: 76.58.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:ec:8d:b4:50:74:4a:41:cf:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=4a4dce4b-7491-4fa0-8318-4f11724d6ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:64:f8:ed:50:1d:67:ce:49:cd:b3:c2:6e: d1:4c:0c:ae:b5:b5:26:62:9f:a1:bb:3f:27:16:42: 5e:2b:99:37:f7:20:f7:86:c4:02:8a:ef:9e:ee:d4: a1:cc:05:f9:40:30:99:b8:a7:53:7d:62:81:63:54: 29:8f:0b:b4:39:97:84:28:48:5f:e2:f3:cb:f8:28: 3c:be:ab:22:60:f3:9d:09:02:b2:fa:5e:3b:cb:5c: 88:69:2f:50:d2:e9:8b:46:0b:a2:bb:ce:87:b8:b4: 84:23:7f:41:d7:c7:c1:73:57:a5:3e:5a:48:d2:8d: 1c:fb:b5:ee:54:a4:67:7e:62:84:87:69:01:f3:02: 31:9a:12:7d:d3:71:32:d1:f8:83:0c:79:3a:97:21: a2:26:45:4e:99:71:33:d5:0c:28:cb:78:d8:dd:43: d8:cd:12:36:09:ea:88:4b:97:f4:12:65:16:3f:e7: fa:86:23:c6:ee:99:e2:4b:0f:05:9d:27:3e:cb:5e: 86:83:f8:ba:96:ec:95:75:9d:70:39:9d:40:5d:41: 75:7d:dd:f1:44:61:c1:5d:59:b1:9c:18:b7:11:f1: 7d:04:0b:12:1e:88:ee:88:37:cc:fc:ab:35:dc:92: be:70:1f:23:ff:8f:14:33:c9:82:7c:e4:ee:eb:48: 6c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:23:2D:3B:53:FF:28:02:46:D4:B4:E7:01:93:FE:5B:18:60:69:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/463948fe-8663-3463-a31b-0e36530971ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 76.58.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:64:20:55:92:ac:3a:28:dd:c6:43:a7:f1:06:4e:61:5c:a1: f5:47:a4:cb:c6:38:e2:d8:2e:9d:b2:d6:90:f9:fb:cb:4a:f0: 58:2c:2a:37:e8:bc:ee:cc:d0:ca:1f:35:df:53:28:a6:ae:c6: 08:70:68:01:78:ab:b7:29:eb:86:7e:75:6e:59:44:27:b1:13: 2e:cd:46:bd:a6:21:4f:2b:a2:b8:76:62:42:ed:aa:dd:81:ae: 99:d1:ff:72:24:36:53:40:89:10:da:68:9c:a9:4f:17:d1:9c: 80:16:d9:33:5e:a0:e2:ba:63:4c:fc:0b:47:a7:c4:3c:75:9e: 4d:7c:76:34:f2:d4:c2:8e:39:1d:97:88:79:a5:23:03:13:86: 9c:57:5d:2a:cc:e1:27:93:5c:c9:e1:ef:9c:21:ba:e9:18:8a: be:ad:40:54:f0:22:79:ac:b4:fd:dc:34:87:79:18:02:48:06: 69:a6:4e:e8:06:8f:80:00:23:d7:65:69:0b:dc:1a:0a:a3:49: cc:b9:cc:7e:05:29:42:c2:b3:8a:b7:4b:83:bc:83:3f:b9:fb: 9c:1d:45:07:5e:d2:e3:a7:70:fc:ad:41:18:e5:93:bd:21:ba: d3:91:74:14:85:1d:36:51:7a:06:b7:d3:df:bc:b6:5e:30:bb: 76:5e:ce:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzeyNtFB0SkHPnKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NGE0ZGNlNGItNzQ5MS00ZmEwLTgzMTgtNGYxMTcyNGQ2YWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo9k+O1QHWfOSc2zwm7RTAyutbUmYp+huz8n FkJeK5k39yD3hsQCiu+e7tShzAX5QDCZuKdTfWKBY1Qpjwu0OZeEKEhf4vPL+Cg8 vqsiYPOdCQKy+l47y1yIaS9Q0umLRguiu86HuLSEI39B18fBc1elPlpI0o0c+7Xu VKRnfmKEh2kB8wIxmhJ903Ey0fiDDHk6lyGiJkVOmXEz1Qwoy3jY3UPYzRI2CeqI S5f0EmUWP+f6hiPG7pniSw8FnSc+y16Gg/i6luyVdZ1wOZ1AXUF1fd3xRGHBXVmx nBi3EfF9BAsSHojuiDfM/Ks13JK+cB8j/48UM8mCfOTu60hsawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwjLTtT/ygCRtS05wGT/lsYYGnKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNDYzOTQ4ZmUtODY2My0z NDYzLWEzMWItMGUzNjUzMDk3MWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClkIFWSrDoo3cZDp/EGTmFcofVHpMvGOOLYLp2y1pD5+8tK8FgsKjfo vO7M0MofNd9TKKauxghwaAF4q7cp64Z+dW5ZRCexEy7NRr2mIU8rorh2YkLtqt2B rpnR/3IkNlNAiRDaaJypTxfRnIAW2TNeoOK6Y0z8C0enxDx1nk18djTy1MKOOR2X iHmlIwMThpxXXSrM4SeTXMnh75whuukYir6tQFTwInmstP3cNId5GAJIBmmmTugG j4AAI9dlaQvcGgqjScy5zH4FKULCs4q3S4O8gz+5+5wdRQde0uOncPytQRjlk70h utORdBSFHTZRega309+8tl4wu3Zezsc= -----END CERTIFICATE-----Generated at Tue Oct 27 15:26:09 2026 by rpki-client