$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa File: 87fd4b0d-6f9b-3caf-ad67-299517a44066.roa (raw, json) Hash identifier: AIYMQfPaqoKh/NOKRg/CiKsxqO6eyn+WxEMu8vkZP50= Subject key identifier: 05:72:F8:30:D7:1D:71:41:7E:97:C0:64:21:53:88:B6:2B:C0:E4:CD Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584F480D4577F183F327679F2380 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 174 IP address blocks: 65.110.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:45:77:f1:83:f3:27:67:9f:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=5767f4fe-930f-4d3b-8708-f9e4b21bdd72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:35:85:a1:57:ff:1a:5c:76:58:0e:ea:11:5f: 7e:2e:3a:4f:6d:c8:2e:cd:19:68:a4:be:65:37:3b: 96:73:cc:8b:b8:b8:73:15:65:4b:a4:ae:f0:a3:c3: c5:5a:d0:72:bc:98:5b:0e:7b:f3:91:43:6a:8b:54: eb:d0:de:aa:0a:3c:f4:bf:dd:2f:47:a9:ce:65:f0: 93:34:c2:0e:3f:82:e5:e9:73:4e:c9:e7:3a:f4:77: e8:4e:c1:9e:5a:79:72:17:f7:f4:fe:4d:99:40:28: d1:41:31:29:69:7d:70:be:12:d9:04:dd:48:a6:fc: 23:4f:00:08:63:4c:b1:74:f6:d2:60:f8:8c:1f:34: a1:fc:3d:54:91:3c:a3:5f:65:41:4c:fe:fd:b8:e5: 42:fe:eb:76:3c:9d:bc:19:aa:62:08:f5:c7:7a:4e: 45:af:3d:90:99:32:cd:ba:51:e6:c3:8a:10:da:f2: 0f:59:02:c8:63:c5:b1:ec:b1:28:33:bf:ed:0a:f1: 91:3e:8e:4c:28:de:4e:3b:21:50:a1:22:17:2f:53: 2a:cc:1a:a8:3a:d4:9a:dc:66:63:06:76:fa:3c:8d: bc:4a:a7:e8:50:6b:01:a9:a6:5e:e9:ec:2f:39:5a: 95:b4:bf:3e:86:63:f9:56:fc:cd:40:42:e0:30:b3: 62:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:72:F8:30:D7:1D:71:41:7E:97:C0:64:21:53:88:B6:2B:C0:E4:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/87fd4b0d-6f9b-3caf-ad67-299517a44066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 65.110.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e5:e5:bb:bf:53:cb:aa:4a:61:4b:93:cf:aa:fd:aa:bc:74: 93:74:b0:e1:a6:e3:d9:d8:01:05:eb:dd:bf:27:94:d8:a3:97: 3e:16:2b:ac:34:26:f4:95:77:cd:6a:66:f7:5f:37:cc:fc:93: 61:3b:e8:61:03:f1:9b:87:b8:52:c6:d9:62:7c:6d:4d:b0:3c: a6:50:05:2c:1a:1f:6e:36:cc:e1:27:25:56:60:33:5c:50:3b: 37:ed:bc:34:e1:f1:17:0d:fc:07:c1:0a:0f:3d:60:5a:a4:fa: b5:04:ea:ca:20:d5:8a:38:31:1b:a9:8b:9e:84:66:38:82:07: 03:68:68:bd:54:6f:34:b2:78:e0:16:26:88:f5:30:a4:b3:ef: 88:f4:e6:0d:ad:ea:93:0c:af:5d:18:61:23:a0:07:48:63:f0: 10:4d:ea:fb:22:28:db:78:7a:af:68:5a:75:45:cc:42:3e:40: ac:75:66:09:09:02:1e:2a:af:17:84:e8:ad:1d:29:50:b4:88: 54:a7:45:91:73:73:b9:5e:a2:42:b1:b4:a6:5b:5e:32:2a:ec: bc:6a:21:e5:f4:d2:6e:fb:9e:cc:b7:0a:88:16:fa:79:37:b4: 8a:99:2f:b7:ee:67:35:d2:1f:9d:13:db:85:d6:fb:8f:70:ab: 48:df:48:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUV38YPzJ2efI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk NTc2N2Y0ZmUtOTMwZi00ZDNiLTg3MDgtZjllNGIyMWJkZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizWFoVf/Glx2WA7qEV9+LjpPbcguzRlopL5l NzuWc8yLuLhzFWVLpK7wo8PFWtByvJhbDnvzkUNqi1Tr0N6qCjz0v90vR6nOZfCT NMIOP4Ll6XNOyec69HfoTsGeWnlyF/f0/k2ZQCjRQTEpaX1wvhLZBN1IpvwjTwAI Y0yxdPbSYPiMHzSh/D1UkTyjX2VBTP79uOVC/ut2PJ28GapiCPXHek5Frz2QmTLN ulHmw4oQ2vIPWQLIY8Wx7LEoM7/tCvGRPo5MKN5OOyFQoSIXL1MqzBqoOtSa3GZj Bnb6PI28SqfoUGsBqaZe6ewvOVqVtL8+hmP5VvzNQELgMLNiDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVy+DDXHXFBfpfAZCFTiLYrwOTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvODdmZDRiMGQtNmY5Yi0z Y2FmLWFkNjctMjk5NTE3YTQ0MDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzl5bu/U8uqSmFLk8+q/aq8dJN0sOGm49nYAQXr3b8nlNijlz4WK6w0 JvSVd81qZvdfN8z8k2E76GED8ZuHuFLG2WJ8bU2wPKZQBSwaH242zOEnJVZgM1xQ OzftvDTh8RcN/AfBCg89YFqk+rUE6sog1Yo4MRupi56EZjiCBwNoaL1UbzSyeOAW Joj1MKSz74j05g2t6pMMr10YYSOgB0hj8BBN6vsiKNt4eq9oWnVFzEI+QKx1ZgkJ Ah4qrxeE6K0dKVC0iFSnRZFzc7leokKxtKZbXjIq7LxqIeX00m77nsy3CogW+nk3 tIqZL7fuZzXSH50T24XW+49wq0jfSKA= -----END CERTIFICATE-----Generated at Mon Oct 19 08:06:01 2026 by rpki-client