$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/b76220b4-2974-3e26-adfe-1897e4b5b302.roa File: b76220b4-2974-3e26-adfe-1897e4b5b302.roa (raw, json) Hash identifier: p18MFiu/SUrccS6hioRb9wAPXN9DKXMm6ioq/IT+pIQ= Subject key identifier: 67:B7:97:89:C7:33:A8:10:E1:D3:AA:49:22:EC:59:EC:87:69:61:81 Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Certificate serial: 010D0C9F4328584F89A85B95974F65BBD88288C0 Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/b76220b4-2974-3e26-adfe-1897e4b5b302.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 36100 IP address blocks: 72.10.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:5b:95:97:4f:65:bb:d8:82:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=d3bdbeba-b8c5-4445-a178-5fae38073d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a7:aa:92:e9:4a:f6:12:2b:80:e1:af:d0:ed: e9:f3:12:64:7c:4b:16:79:1b:6a:7f:d6:7e:e4:e4: 7b:a4:2a:3e:00:8e:56:2d:f4:eb:9e:c1:e8:6a:dc: 7e:ed:5c:84:6a:4b:66:93:38:3e:cf:17:01:fa:61: aa:11:79:72:5e:c5:ed:6b:c0:bd:77:e8:fb:2c:39: 83:76:86:e1:43:49:c6:7f:06:c9:0a:ca:17:bd:1e: 0f:60:93:20:d3:cc:34:e1:58:52:55:db:1c:9a:af: c9:b5:3f:0d:c5:81:aa:76:3e:a6:c8:d2:74:3a:f5: 59:a8:7d:42:6c:a8:69:60:0b:ad:03:42:48:3a:70: 54:29:60:f7:56:08:0b:b4:d2:ad:22:27:1c:f0:2b: fd:8e:e5:ab:53:f4:2f:ff:f9:4f:87:d1:a0:38:05: 8a:92:2a:5b:27:1f:21:81:e4:fc:11:c4:c4:92:e8: 61:5f:88:2e:f1:93:fc:4d:09:2b:bb:0b:ad:28:0f: 8b:a2:e0:da:5a:ab:46:a4:84:1b:2f:f6:4e:66:60: 49:f1:ef:21:22:e9:3b:84:21:af:ca:ea:c5:43:9e: b6:5b:dc:f9:9b:6a:7a:f7:cb:4b:1a:35:92:f6:a3: bf:67:cb:c9:ef:e3:a6:ee:7c:3e:cd:9a:61:20:f9: 15:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B7:97:89:C7:33:A8:10:E1:D3:AA:49:22:EC:59:EC:87:69:61:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/b76220b4-2974-3e26-adfe-1897e4b5b302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl X509v3 Authority Key Identifier: keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer sbgp-ipAddrBlock: critical IPv4: 72.10.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:45:c3:17:02:12:5c:2b:aa:f1:c0:1c:d9:f1:b0:e1:6d:7a: c2:7a:68:bc:d5:1a:74:fc:da:41:dc:93:3d:23:91:7c:a5:02: 09:49:08:96:b8:c9:62:2a:90:67:46:c6:aa:8a:d8:5a:4a:53: 41:1d:21:33:a8:b3:c4:fe:2f:ba:8b:28:84:5f:95:29:59:3a: e0:f2:27:c5:fd:d5:12:7b:71:d3:1c:e7:c0:1f:16:75:66:ba: f7:d8:79:43:67:c0:0f:d2:3f:97:ab:c9:06:a9:04:60:cd:e6: 6e:5a:94:a8:67:c9:44:05:e4:64:83:63:63:0b:4b:ca:11:c7: 0d:92:52:f0:9c:22:0f:b7:ca:73:c2:f6:15:ae:7f:4d:a6:6b: 49:5f:5b:de:db:21:8b:97:c1:21:f4:5e:72:86:25:c6:99:49: 80:10:a2:f4:57:d2:7f:ff:88:cb:17:31:34:f4:9b:f5:51:3f: 41:5d:eb:67:6a:f7:b8:ea:4a:54:2d:9e:43:73:dd:de:ec:19: 32:2c:57:e0:32:d8:c5:98:a1:ce:bb:7c:3c:13:a9:44:1f:53: 0e:d9:b0:5c:7a:79:57:05:43:3c:3f:1a:d7:ed:11:a3:f6:18: b2:f1:57:e5:14:70:08:66:10:b0:b1:bd:a7:e5:cd:78:38:a2: 81:77:8f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqFuVl09lu9iCiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj YTRkMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk ZDNiZGJlYmEtYjhjNS00NDQ1LWExNzgtNWZhZTM4MDczZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aeqkulK9hIrgOGv0O3p8xJkfEsWeRtqf9Z+ 5OR7pCo+AI5WLfTrnsHoatx+7VyEaktmkzg+zxcB+mGqEXlyXsXta8C9d+j7LDmD dobhQ0nGfwbJCsoXvR4PYJMg08w04VhSVdscmq/JtT8NxYGqdj6myNJ0OvVZqH1C bKhpYAutA0JIOnBUKWD3VggLtNKtIicc8Cv9juWrU/Qv//lPh9GgOAWKkipbJx8h geT8EcTEkuhhX4gu8ZP8TQkruwutKA+LouDaWqtGpIQbL/ZOZmBJ8e8hIuk7hCGv yurFQ562W9z5m2p698tLGjWS9qO/Z8vJ7+Om7nw+zZphIPkV6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe3l4nHM6gQ4dOqSSLsWeyHaWGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvYjc2MjIwYjQtMjk3NC0z ZTI2LWFkZmUtMTg5N2U0YjViMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1 Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSArEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9FwxcCElwrqvHAHNnxsOFtesJ6aLzVGnT82kHckz0jkXylAglJCJa4 yWIqkGdGxqqK2FpKU0EdITOos8T+L7qLKIRflSlZOuDyJ8X91RJ7cdMc58AfFnVm uvfYeUNnwA/SP5eryQapBGDN5m5alKhnyUQF5GSDY2MLS8oRxw2SUvCcIg+3ynPC 9hWuf02ma0lfW97bIYuXwSH0XnKGJcaZSYAQovRX0n//iMsXMTT0m/VRP0Fd62dq 97jqSlQtnkNz3d7sGTIsV+Ay2MWYoc67fDwTqUQfUw7ZsFx6eVcFQzw/GtftEaP2 GLLxV+UUcAhmELCxvaflzXg4ooF3j6k= -----END CERTIFICATE-----Generated at Mon Oct 26 15:37:20 2026 by rpki-client