$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622/a538d5d2-6702-316c-b9b8-c478837b52c1.roa File: a538d5d2-6702-316c-b9b8-c478837b52c1.roa (raw, json) Hash identifier: g6kbpVXfOyPXIwSP1FrBWZDqom6fDypTpp4QxbeC8pY= Subject key identifier: 5A:DE:D9:2B:EA:D2:3E:01:48:28:92:DA:DE:1D:66:FE:27:0D:E3:84 Certificate issuer: /CN=06a70abd-bd67-4449-954d-d126a76d2622 Certificate serial: 010D0C9F4328584F96DA2B7A31CA8E320A261E47 Authority key identifier: 49:F9:6A:C5:C4:92:25:27:9F:A3:7B:AA:99:FE:FD:85:12:8A:11:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622/a538d5d2-6702-316c-b9b8-c478837b52c1.roa Signing time: Thu 22 Oct 2026 18:26:17 +0000 ROA not before: Thu 22 Oct 2026 18:26:17 +0000 ROA not after: Wed 20 Jan 2027 19:26:17 +0000 asID: 212396 IP address blocks: 172.82.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622/06a70abd-bd67-4449-954d-d126a76d2622.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622/06a70abd-bd67-4449-954d-d126a76d2622.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:da:2b:7a:31:ca:8e:32:0a:26:1e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a70abd-bd67-4449-954d-d126a76d2622 Validity Not Before: Oct 22 18:26:17 2026 GMT Not After : Jan 20 19:26:17 2027 GMT Subject: CN=4680edab-201e-4227-9dc3-88e0a61e6a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:ce:25:c3:8c:03:af:75:d2:e6:f8:76:58: 53:6f:4c:f7:d8:49:6d:d1:32:67:b2:45:10:5a:08: d2:a1:30:00:e9:8d:a1:9d:a6:cf:36:c2:57:a0:2b: 19:ac:1c:b9:9f:d7:f5:17:13:71:57:12:36:03:fb: 29:f3:6b:86:aa:a7:9c:1f:f4:c4:3d:ff:92:6f:d7: 4d:5a:0e:a8:ab:89:b2:09:c3:b6:e1:b1:e2:c0:06: 89:37:4f:ba:b6:c7:b0:28:92:a1:c3:99:7b:fe:dc: f0:50:05:12:94:c9:d0:e4:6f:3b:70:a7:81:a1:28: 07:cb:12:62:68:e9:1b:69:71:75:9a:ae:97:af:6a: a9:13:03:5b:de:df:54:30:52:23:99:d0:ca:42:7a: 4e:49:d2:8f:6f:8e:7d:c5:fe:db:e9:68:00:d3:cb: fe:2d:33:30:6a:89:39:ce:d3:55:e0:83:12:72:32: a4:4f:11:77:c5:56:f7:43:80:f0:10:d2:71:22:93: 8d:69:b2:8c:bb:ec:23:54:81:e4:5d:a8:d8:eb:96: 56:f1:25:92:81:8a:52:6c:f9:2e:49:a9:98:2a:85: 62:9e:5f:3d:6f:4e:0c:36:c6:f8:2a:0d:9b:b0:ce: 0e:0b:e1:05:0b:6d:ab:8f:60:fb:f4:78:9f:33:54: 4b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DE:D9:2B:EA:D2:3E:01:48:28:92:DA:DE:1D:66:FE:27:0D:E3:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622/a538d5d2-6702-316c-b9b8-c478837b52c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622/06a70abd-bd67-4449-954d-d126a76d2622.crl X509v3 Authority Key Identifier: keyid:49:F9:6A:C5:C4:92:25:27:9F:A3:7B:AA:99:FE:FD:85:12:8A:11:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06a70abd-bd67-4449-954d-d126a76d2622.cer sbgp-ipAddrBlock: critical IPv4: 172.82.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:bb:8a:bd:93:19:28:fe:9b:ca:5e:7f:1c:b9:2e:8a:03:36: 10:02:8e:64:d0:cf:1f:cc:ed:1c:b4:47:14:80:5d:0f:20:b5: e9:ba:e6:61:4d:e3:66:5f:8c:0d:42:49:b3:9a:ef:d3:e6:2e: 16:29:35:40:99:97:86:a5:56:57:82:02:a3:1b:85:13:d4:fe: 97:94:4b:4c:61:e0:f9:ac:88:f4:9a:45:65:53:e6:5e:ac:89: a5:88:11:ca:f4:6e:10:6f:29:f4:df:dd:a8:89:e4:4b:cc:04: 9e:ce:c5:6a:48:2a:86:4e:e2:63:34:24:14:00:04:f0:9a:59: da:ad:7c:15:6c:b3:9f:fa:b9:4a:6a:52:f6:27:44:b7:0f:ba: 54:b4:98:ab:1d:22:f5:9e:99:66:3f:92:72:4a:01:67:4c:cc: 69:f6:ca:65:bf:3e:38:cb:64:c9:d5:04:fa:4d:03:c5:04:74: 9f:37:48:bd:da:3d:2d:0d:95:72:d7:72:67:0b:6f:7a:89:e1: b9:f5:be:39:a9:1d:e7:b8:99:80:f4:0e:49:af:db:b9:9c:70: b1:3c:9b:a4:de:4f:12:e9:c2:43:eb:6c:ee:54:0d:2a:39:6c: 9e:6c:1b:01:3d:4a:e4:57:18:22:94:97:b2:2e:ee:0a:02:93: 21:59:2c:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+W2it6McqOMgomHkcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZhNzBhYmQtYmQ2Ny00NDQ5LTk1NGQtZDEyNmE3NmQy NjIyMB4XDTI2MTAyMjE4MjYxN1oXDTI3MDEyMDE5MjYxN1owLzEtMCsGA1UEAxMk NDY4MGVkYWItMjAxZS00MjI3LTlkYzMtODhlMGE2MWU2YTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZzOJcOMA6910ub4dlhTb0z32Elt0TJnskUQ WgjSoTAA6Y2hnabPNsJXoCsZrBy5n9f1FxNxVxI2A/sp82uGqqecH/TEPf+Sb9dN Wg6oq4myCcO24bHiwAaJN0+6tsewKJKhw5l7/tzwUAUSlMnQ5G87cKeBoSgHyxJi aOkbaXF1mq6Xr2qpEwNb3t9UMFIjmdDKQnpOSdKPb459xf7b6WgA08v+LTMwaok5 ztNV4IMScjKkTxF3xVb3Q4DwENJxIpONabKMu+wjVIHkXajY65ZW8SWSgYpSbPku SamYKoVinl89b04MNsb4Kg2bsM4OC+EFC22rj2D79HifM1RLDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFre2Svq0j4BSCiS2t4dZv4nDeOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wNmE3 MGFiZC1iZDY3LTQ0NDktOTU0ZC1kMTI2YTc2ZDI2MjIvYTUzOGQ1ZDItNjcwMi0z MTZjLWI5YjgtYzQ3ODgzN2I1MmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDZhNzBhYmQtYmQ2Ny00NDQ5LTk1 NGQtZDEyNmE3NmQyNjIyLzA2YTcwYWJkLWJkNjctNDQ0OS05NTRkLWQxMjZhNzZk MjYyMi5jcmwwHwYDVR0jBBgwFoAUSflqxcSSJSefo3uqmf79hRKKEagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wNmE3MGFiZC1iZDY3LTQ0NDktOTU0ZC1kMTI2 YTc2ZDI2MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFJbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK7ir2TGSj+m8pefxy5LooDNhACjmTQzx/M7Ry0RxSAXQ8gtem65mFN 42ZfjA1CSbOa79PmLhYpNUCZl4alVleCAqMbhRPU/peUS0xh4PmsiPSaRWVT5l6s iaWIEcr0bhBvKfTf3aiJ5EvMBJ7OxWpIKoZO4mM0JBQABPCaWdqtfBVss5/6uUpq UvYnRLcPulS0mKsdIvWemWY/knJKAWdMzGn2ymW/PjjLZMnVBPpNA8UEdJ83SL3a PS0NlXLXcmcLb3qJ4bn1vjmpHee4mYD0Dkmv27mccLE8m6TeTxLpwkPrbO5UDSo5 bJ5sGwE9SuRXGCKUl7Iu7goCkyFZLME= -----END CERTIFICATE-----Generated at Wed Oct 28 03:13:29 2026 by rpki-client