$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa File: c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa (raw, json) Hash identifier: eVWDax8L8glNx2Chnl6Solf1ro/Ulll1gjmSer3rjY8= Subject key identifier: B8:D8:A5:8D:13:AE:22:25:C8:75:B6:D7:FD:29:A5:35:B4:98:49:33 Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584F89A865897EFCBEAA8D262100 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 11260 IP address blocks: 173.252.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:65:89:7e:fc:be:aa:8d:26:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=9cb9ce64-b1c9-4cca-8413-3abe7ab008a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:21:ef:cf:e9:42:8e:69:4e:b6:a4:25:f1:46: c2:d1:55:28:0b:d9:b9:ad:e4:c8:30:83:e4:32:6f: c7:78:1d:06:cb:83:29:84:3c:a2:5d:a2:f1:f3:ee: 57:d6:a7:d4:b2:73:4b:d6:bc:e1:52:93:c3:04:80: 2f:9b:6c:95:52:e2:c4:04:7c:2e:53:bc:5e:01:1a: 19:6c:78:a3:a8:3a:67:a6:48:3e:0d:0c:3f:ce:12: dd:08:b1:80:47:56:0a:39:a3:cf:47:96:c0:71:b4: 5f:87:27:b5:04:24:aa:20:b8:41:b3:2f:59:64:bd: e1:47:72:40:fc:93:a4:c9:2a:6c:72:04:61:61:15: c1:4d:40:2f:d6:be:aa:70:bd:30:df:21:90:10:b4: ab:d3:2a:ff:da:41:8e:45:76:1c:41:65:86:a1:bf: 5e:4f:c6:86:53:e4:c2:22:16:30:ee:6a:41:ad:c9: f9:69:57:63:04:52:47:b8:4d:e2:16:54:72:42:55: aa:93:32:69:6b:e6:6c:29:27:6d:f8:24:81:75:02: 51:14:3c:21:ce:f3:a3:95:23:f7:dd:44:8a:9f:e1: f9:c2:c6:95:a8:a3:22:93:9f:42:bb:ab:1d:ec:f8: 01:4a:be:db:f1:ce:ed:f5:6f:62:d5:78:59:c1:c9: cd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D8:A5:8D:13:AE:22:25:C8:75:B6:D7:FD:29:A5:35:B4:98:49:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c4dcb647-7f16-3b54-9ee8-f20c3da2ac1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 173.252.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:8b:13:50:32:3e:01:4e:dd:18:e2:14:ac:5b:de:ac:64:19: 85:fd:90:d3:80:1f:38:8b:e6:bc:de:9d:bb:22:79:75:ef:66: 38:87:c6:62:1f:a4:f7:72:89:69:6d:08:64:51:1a:ab:66:f9: 4e:bc:05:1c:65:11:17:97:28:2a:d3:be:c0:2d:41:76:5a:67: ca:69:c1:56:dc:c0:60:d2:38:20:47:a9:33:2e:56:70:27:61: 2e:ce:d1:22:3e:48:9d:51:fe:49:a6:61:88:12:d6:6b:5f:71: 80:67:55:95:e0:16:08:a4:8a:3d:02:03:a7:cf:d9:f0:33:7b: d9:40:ec:1a:58:b3:ea:db:58:ec:fa:0e:b3:9f:98:97:90:21: e7:f6:15:c5:9c:34:74:37:b9:6c:2f:4f:af:85:45:d7:ac:04: 15:4f:52:89:50:a0:5d:64:c4:db:7f:02:e1:5a:8e:0d:9f:ad: 5a:07:87:08:fb:5c:be:05:d7:fe:be:b5:0a:d4:c7:41:e8:e8: c6:92:0e:ee:41:7a:0f:6f:b7:68:27:52:1c:d8:88:84:c1:1e: e4:eb:b1:d2:89:61:7d:b5:0b:af:e2:4f:e6:87:04:79:4d:6c: c2:23:c7:26:3f:bb:fa:4d:71:03:2b:5e:e2:2e:95:7d:b6:95: 56:88:e6:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqGWJfvy+qo0mIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk OWNiOWNlNjQtYjFjOS00Y2NhLTg0MTMtM2FiZTdhYjAwOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyHvz+lCjmlOtqQl8UbC0VUoC9m5reTIMIPk Mm/HeB0Gy4MphDyiXaLx8+5X1qfUsnNL1rzhUpPDBIAvm2yVUuLEBHwuU7xeARoZ bHijqDpnpkg+DQw/zhLdCLGAR1YKOaPPR5bAcbRfhye1BCSqILhBsy9ZZL3hR3JA /JOkySpscgRhYRXBTUAv1r6qcL0w3yGQELSr0yr/2kGORXYcQWWGob9eT8aGU+TC IhYw7mpBrcn5aVdjBFJHuE3iFlRyQlWqkzJpa+ZsKSdt+CSBdQJRFDwhzvOjlSP3 3USKn+H5wsaVqKMik59Cu6sd7PgBSr7b8c7t9W9i1XhZwcnNjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjYpY0TriIlyHW21/0ppTW0mEkzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvYzRkY2I2NDctN2YxNi0z YjU0LTllZTgtZjIwYzNkYTJhYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrfwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2LE1AyPgFO3RjiFKxb3qxkGYX9kNOAHziL5rzenbsieXXvZjiHxmIf pPdyiWltCGRRGqtm+U68BRxlEReXKCrTvsAtQXZaZ8ppwVbcwGDSOCBHqTMuVnAn YS7O0SI+SJ1R/kmmYYgS1mtfcYBnVZXgFgikij0CA6fP2fAze9lA7BpYs+rbWOz6 DrOfmJeQIef2FcWcNHQ3uWwvT6+FRdesBBVPUolQoF1kxNt/AuFajg2frVoHhwj7 XL4F1/6+tQrUx0Ho6MaSDu5Beg9vt2gnUhzYiITBHuTrsdKJYX21C6/iT+aHBHlN bMIjxyY/u/pNcQMrXuIulX22lVaI5vU= -----END CERTIFICATE-----Generated at Tue Oct 27 20:51:59 2026 by rpki-client