$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa File: d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa (raw, json) Hash identifier: XiBeYS58VG+c0xwhZdPZ6L1/GEz8l5/yt0gjXFIBzBY= Subject key identifier: 96:7B:A4:58:ED:8A:88:88:06:8F:99:EA:C2:E9:A0:54:36:88:79:31 Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584FB7D66892DB6E0BEF22826AE0 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa Signing time: Tue 03 Nov 2026 14:00:13 +0000 ROA not before: Tue 03 Nov 2026 14:00:13 +0000 ROA not after: Mon 01 Feb 2027 14:00:13 +0000 asID: 13213 IP address blocks: 209.236.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b7:d6:68:92:db:6e:0b:ef:22:82:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Nov 3 14:00:13 2026 GMT Not After : Feb 1 14:00:13 2027 GMT Subject: CN=0b5db249-c568-4a37-bdb2-f867e4ae7e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:bd:2a:83:37:41:a7:63:b2:10:9e:72:c4: da:69:f4:4a:25:1a:ee:a8:30:06:b0:95:e2:02:31: 09:e0:84:37:b8:3f:66:34:ee:a8:a3:ae:32:3f:b9: 2e:4d:b4:a1:06:b8:00:2f:4b:5e:b7:91:3b:0f:12: a7:c1:86:9b:4f:64:38:c8:e5:45:08:58:4f:c6:00: b7:da:0b:ab:fc:95:ac:9f:82:62:fd:c4:cb:95:41: 6c:0a:59:94:5d:7b:5b:58:6f:8e:73:b4:89:db:01: 2f:ec:c7:49:b1:cd:5a:89:43:f0:9c:4c:14:88:52: c5:6a:0e:20:56:87:2d:af:6d:37:db:18:6e:7b:29: 37:c2:5e:c4:81:af:76:0b:71:3b:53:df:fa:bf:ed: 85:13:82:00:2e:f9:73:fd:e9:45:fa:3c:21:2b:57: 92:23:9a:18:f5:9d:d3:b1:3d:6a:57:e1:06:21:c8: 31:51:6a:93:31:45:95:dd:fc:72:e4:64:ed:44:77: 36:9d:ef:db:06:d1:95:1d:fc:bf:59:89:f9:55:c3: c7:10:7f:01:66:69:53:50:f1:37:fd:b6:4d:bb:7b: 07:3e:dc:2a:a3:92:b6:e6:64:ea:6d:de:e9:47:3a: e3:cb:6a:d8:60:d2:66:59:48:b3:bb:cc:1f:95:0d: c7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7B:A4:58:ED:8A:88:88:06:8F:99:EA:C2:E9:A0:54:36:88:79:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5f:67:e4:42:56:c8:d9:b9:f6:ef:b6:c5:1e:a9:75:22:7c: a6:cd:28:ac:0e:69:58:58:98:63:d1:e7:0c:a3:a0:cf:c5:e5: 70:3b:68:6a:a3:b6:da:42:be:77:a0:71:69:2c:97:7f:10:38: 9c:09:b9:70:ff:11:3b:42:6a:79:f1:07:de:b4:28:bc:68:9f: c9:d6:eb:16:0b:63:b3:79:2e:c3:49:09:c4:d8:d0:f5:a0:64: ba:ca:da:44:0f:4f:de:00:f0:27:35:2a:6a:4f:74:ee:23:64: f0:e2:1f:57:0c:d7:ea:04:44:15:9a:48:d0:cc:cb:c2:40:f2: 8f:cf:7d:fe:cb:ad:65:da:aa:1a:3a:e4:de:04:c7:db:38:f8: 55:ca:5d:6c:56:a1:83:f1:3a:f6:7b:f1:0f:b1:34:2a:d8:1c: 8b:eb:1c:d4:1e:28:62:0c:76:6f:05:0a:d4:3c:70:e8:f2:66: 16:9a:2b:03:5a:69:6f:31:31:3c:21:dc:05:71:37:67:ba:ba: b7:7f:4f:c4:c7:67:d5:9b:0b:58:5b:0e:fe:12:b4:32:2d:f2: 63:41:ed:ec:7f:42:dc:72:76:73:6d:89:59:84:77:84:69:9a: 72:a4:be:7c:06:98:2c:dd:b9:e0:2d:4d:3a:80:45:ee:28:b6: 22:38:8a:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+31miS224L7yKCauAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI2MTEwMzE0MDAxM1oXDTI3MDIwMTE0MDAxM1owLzEtMCsGA1UEAxMk MGI1ZGIyNDktYzU2OC00YTM3LWJkYjItZjg2N2U0YWU3ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3y9KoM3QadjshCecsTaafRKJRruqDAGsJXi AjEJ4IQ3uD9mNO6oo64yP7kuTbShBrgAL0tet5E7DxKnwYabT2Q4yOVFCFhPxgC3 2gur/JWsn4Ji/cTLlUFsClmUXXtbWG+Oc7SJ2wEv7MdJsc1aiUPwnEwUiFLFag4g Voctr2032xhueyk3wl7Ega92C3E7U9/6v+2FE4IALvlz/elF+jwhK1eSI5oY9Z3T sT1qV+EGIcgxUWqTMUWV3fxy5GTtRHc2ne/bBtGVHfy/WYn5VcPHEH8BZmlTUPE3 /bZNu3sHPtwqo5K25mTqbd7pRzrjy2rYYNJmWUizu8wflQ3HDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZ7pFjtioiIBo+Z6sLpoFQ2iHkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZDBkNzZjMWItYTNmMS0z NDI0LTlhZDgtMWFkZmYyY2Q5Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0exIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZfZ+RCVsjZufbvtsUeqXUifKbNKKwOaVhYmGPR5wyjoM/F5XA7aGqj ttpCvnegcWksl38QOJwJuXD/ETtCannxB960KLxon8nW6xYLY7N5LsNJCcTY0PWg ZLrK2kQPT94A8Cc1KmpPdO4jZPDiH1cM1+oERBWaSNDMy8JA8o/Pff7LrWXaqho6 5N4Ex9s4+FXKXWxWoYPxOvZ78Q+xNCrYHIvrHNQeKGIMdm8FCtQ8cOjyZhaaKwNa aW8xMTwh3AVxN2e6urd/T8THZ9WbC1hbDv4StDIt8mNB7ex/QtxydnNtiVmEd4Rp mnKkvnwGmCzdueAtTTqARe4otiI4ihM= -----END CERTIFICATE-----Generated at Sun Nov 15 18:35:28 2026 by rpki-client