$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/9c1d34e0-ab53-3ff4-a42f-44ea191f4f2d.roa File: 9c1d34e0-ab53-3ff4-a42f-44ea191f4f2d.roa (raw, json) Hash identifier: 2/g51CJgjq3x7iKtGyTC2AMespsxOiz9RZ6fD8IZx3A= Subject key identifier: 24:1F:42:D5:8C:2E:66:98:F5:6F:0B:5B:4D:1E:6C:73:B0:08:DC:89 Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584F612D75A63E844D1E6F7F6C80 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/9c1d34e0-ab53-3ff4-a42f-44ea191f4f2d.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 31715 IP address blocks: 144.208.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:75:a6:3e:84:4d:1e:6f:7f:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=a8ffef47-43d2-49e9-9f46-76b41f9deb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b4:de:51:f5:6c:50:87:01:35:a7:c1:69:69: 5c:05:56:ae:e4:a0:a2:3a:e3:5d:5e:ae:da:8f:3d: 8e:d6:59:95:44:93:9e:ff:3b:8d:2e:d5:8e:6f:5b: 94:01:9b:85:11:d0:74:07:9a:07:cc:56:aa:5b:74: e0:d2:b3:b9:fb:3a:c9:15:27:cc:04:84:b3:bb:98: cc:d8:69:f7:9d:fb:2a:86:9d:79:c2:3b:c1:25:20: e6:ca:76:67:bf:61:e5:11:12:27:99:fc:bc:5f:54: 97:1c:6f:88:5f:95:23:93:0c:f5:93:ab:1a:41:60: c2:44:18:06:42:87:4d:d0:e4:a0:90:94:a3:33:b9: 6f:ce:52:37:0c:c2:49:7c:84:3f:d2:a3:c2:8b:f7: a1:3d:87:85:39:10:99:cd:f0:2f:25:fc:ea:8a:5d: 2b:ce:1e:2e:cf:dd:d4:b1:bf:db:2d:93:a5:2f:0e: 4f:96:0f:02:cd:38:92:ad:50:9c:ce:e6:a1:be:59: 70:d6:31:6b:2f:f7:94:ed:29:98:20:91:b1:03:cf: e3:54:7f:55:3c:f7:39:7f:77:79:76:ae:ff:2a:ef: 64:b4:fd:48:85:45:03:05:a5:2c:56:95:1f:9a:39: c8:14:15:a3:ce:e3:73:ff:8d:77:38:3d:83:a5:77: c8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1F:42:D5:8C:2E:66:98:F5:6F:0B:5B:4D:1E:6C:73:B0:08:DC:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/9c1d34e0-ab53-3ff4-a42f-44ea191f4f2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 144.208.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f5:0f:91:b3:58:ec:13:40:35:40:6a:59:13:ae:43:7a:9a: 4d:8a:80:d9:7f:8f:a2:28:8a:73:cd:d2:10:0f:08:c5:fd:fd: bc:20:3c:99:f0:11:9d:b0:c5:b2:9d:a4:05:ab:e4:fc:5a:eb: 60:d4:f8:a1:d7:25:38:e5:b0:fc:83:94:aa:6c:f4:86:29:7b: c3:62:62:62:9c:d0:c2:18:73:de:28:c1:3b:c0:8d:1f:44:36: a7:20:c5:e9:67:26:b7:b1:f1:ca:17:23:ec:9f:4a:f1:77:25: 2f:fd:f0:1c:ab:9f:44:5d:3c:00:b0:e1:c7:22:66:36:c2:4f: ec:35:4c:a1:c7:6b:e5:2b:af:6f:11:38:4e:51:80:bb:4b:87: e2:8e:27:15:3f:2c:19:16:2d:fb:f5:02:73:af:e6:4e:ef:a3: 45:32:eb:39:3c:8f:cd:6c:cd:95:44:fa:17:d8:68:f8:03:27: 36:67:7b:68:08:ab:92:a3:52:e8:1d:30:fd:2a:f8:0e:9e:82: 95:ec:b1:9b:b5:5f:e1:f2:a2:79:4e:5a:92:1d:6a:c0:c2:1c: 53:bc:e3:53:d8:e0:4c:22:17:a1:33:ae:af:c6:95:f6:53:b7: 02:7e:45:d1:58:c2:87:65:2f:e1:b7:ec:1a:82:94:8c:c3:44: 68:8f:c6:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLXWmPoRNHm9/bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk YThmZmVmNDctNDNkMi00OWU5LTlmNDYtNzZiNDFmOWRlYjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLTeUfVsUIcBNafBaWlcBVau5KCiOuNdXq7a jz2O1lmVRJOe/zuNLtWOb1uUAZuFEdB0B5oHzFaqW3Tg0rO5+zrJFSfMBISzu5jM 2Gn3nfsqhp15wjvBJSDmynZnv2HlERInmfy8X1SXHG+IX5Ujkwz1k6saQWDCRBgG QodN0OSgkJSjM7lvzlI3DMJJfIQ/0qPCi/ehPYeFORCZzfAvJfzqil0rzh4uz93U sb/bLZOlLw5Plg8CzTiSrVCczuahvllw1jFrL/eU7SmYIJGxA8/jVH9VPPc5f3d5 dq7/Ku9ktP1IhUUDBaUsVpUfmjnIFBWjzuNz/413OD2DpXfIHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQfQtWMLmaY9W8LW00ebHOwCNyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvOWMxZDM0ZTAtYWI1My0z ZmY0LWE0MmYtNDRlYTE5MWY0ZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkNBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC31D5GzWOwTQDVAalkTrkN6mk2KgNl/j6IoinPN0hAPCMX9/bwgPJnw EZ2wxbKdpAWr5Pxa62DU+KHXJTjlsPyDlKps9IYpe8NiYmKc0MIYc94owTvAjR9E NqcgxelnJrex8coXI+yfSvF3JS/98Byrn0RdPACw4cciZjbCT+w1TKHHa+Urr28R OE5RgLtLh+KOJxU/LBkWLfv1AnOv5k7vo0Uy6zk8j81szZVE+hfYaPgDJzZne2gI q5KjUugdMP0q+A6egpXssZu1X+HyonlOWpIdasDCHFO841PY4EwiF6Ezrq/GlfZT twJ+RdFYwodlL+G37BqClIzDRGiPxhU= -----END CERTIFICATE-----Generated at Mon Oct 19 01:44:41 2026 by rpki-client