$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa File: 1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa (raw, json) Hash identifier: D/ak20P3QxOxaE+dcJsTNdvguV5fVVBvf1sZ5SxV8as= Subject key identifier: 31:40:C9:D2:96:C9:33:30:61:11:C7:52:A6:71:E8:95:2D:4F:A8:78 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584F9BCDC7460602CBA8E304E1A0 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 32181 IP address blocks: 69.39.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:c7:46:06:02:cb:a8:e3:04:e1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=a0e966f5-9c81-4387-a805-4b31924b81f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:72:67:91:db:02:91:f6:12:6d:b5:14:2c:28: 60:f2:a7:55:1a:60:67:ba:30:c5:16:17:c1:8a:c8: 8c:16:62:a9:12:80:6d:f9:11:5c:bc:1f:20:ee:3e: 96:47:f8:1a:6e:22:f3:7c:a9:80:4a:bd:01:04:2e: 16:bf:0c:b3:09:8a:ef:43:7e:26:1e:f4:5f:b7:0f: a8:c3:f5:fa:2e:05:1c:78:d6:b1:36:61:d6:c6:73: 50:48:43:3f:f0:7d:65:c7:1b:a5:17:8b:a7:35:91: e7:be:8d:b7:81:f2:4d:d4:f8:18:ed:7e:f3:b9:18: f0:c0:43:65:5e:45:12:31:9b:1f:10:cf:b3:74:45: a8:a3:9c:16:dc:fd:9e:85:0d:99:e8:0d:25:bf:a7: 5b:4e:f9:0a:d2:51:3f:6d:d7:24:c7:8c:84:c7:68: 5f:38:09:ba:d6:c3:7a:ca:35:ee:ab:63:50:52:68: 49:4a:e9:8d:1f:e1:a2:75:e1:b3:dc:47:2d:ae:37: 3c:bf:07:6c:28:77:f1:e1:93:9f:84:be:6c:1a:83: b2:60:2f:5c:36:e0:34:10:7c:21:76:42:2e:cf:db: 8e:75:b4:16:8a:a0:3c:0c:29:11:71:fe:ec:cc:6a: d9:bd:d2:fb:1d:78:ef:c2:31:45:56:c2:1b:bd:b4: 64:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:40:C9:D2:96:C9:33:30:61:11:C7:52:A6:71:E8:95:2D:4F:A8:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/1fcaae2f-56ca-31a2-b2b5-4e63daeaab78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 69.39.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:91:82:1e:97:60:6f:6b:1a:96:a9:cc:5a:c3:15:67:86:c8: 9a:ef:f0:77:e4:d2:89:d6:16:8f:ab:45:39:0d:32:5a:d0:54: a8:f1:6a:5e:43:e8:6d:a1:bc:e3:2c:ac:d5:71:00:ee:f8:3f: ec:50:a9:7e:de:a2:83:33:9e:1b:ce:93:b5:46:a4:18:f6:67: 30:43:5b:0c:92:a2:8a:0d:94:8d:28:fa:12:b1:b0:20:97:c3: fe:07:8c:36:a2:a8:23:07:0b:36:4f:59:68:54:00:e2:1a:8b: cc:b2:07:67:1f:59:21:f6:01:03:b6:17:6b:68:24:e6:f2:2f: e0:86:d0:b2:87:df:b5:ee:5e:39:f0:db:12:e2:4d:84:7c:1f: a9:7d:48:fc:bd:7b:c1:10:dd:ec:94:65:15:f7:77:73:dd:88: 62:3a:3a:68:1f:2f:01:e6:cd:0a:d1:4d:99:f4:49:d6:ef:1d: 2a:40:d3:85:b3:3a:39:0e:c3:90:6e:ee:05:e5:df:ed:80:0c: 0c:95:83:8b:79:a1:6a:a5:6c:17:b5:a1:00:bb:87:48:c4:57: 5f:f5:63:59:1b:83:b2:ee:35:1b:b1:f2:75:2e:e0:60:98:05: 79:f9:52:c9:c6:6f:b9:77:bc:32:10:c5:70:10:97:3d:c7:88: 46:c5:e0:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzcdGBgLLqOME4aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YTBlOTY2ZjUtOWM4MS00Mzg3LWE4MDUtNGIzMTkyNGI4MWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHJnkdsCkfYSbbUULChg8qdVGmBnujDFFhfB isiMFmKpEoBt+RFcvB8g7j6WR/gabiLzfKmASr0BBC4WvwyzCYrvQ34mHvRftw+o w/X6LgUceNaxNmHWxnNQSEM/8H1lxxulF4unNZHnvo23gfJN1PgY7X7zuRjwwENl XkUSMZsfEM+zdEWoo5wW3P2ehQ2Z6A0lv6dbTvkK0lE/bdckx4yEx2hfOAm61sN6 yjXuq2NQUmhJSumNH+GideGz3Ectrjc8vwdsKHfx4ZOfhL5sGoOyYC9cNuA0EHwh dkIuz9uOdbQWiqA8DCkRcf7szGrZvdL7HXjvwjFFVsIbvbRkXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFAydKWyTMwYRHHUqZx6JUtT6h4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvMWZjYWFlMmYtNTZjYS0z MWEyLWIyYjUtNGU2M2RhZWFhYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuRgh6XYG9rGpapzFrDFWeGyJrv8Hfk0onWFo+rRTkNMlrQVKjxal5D 6G2hvOMsrNVxAO74P+xQqX7eooMznhvOk7VGpBj2ZzBDWwySoooNlI0o+hKxsCCX w/4HjDaiqCMHCzZPWWhUAOIai8yyB2cfWSH2AQO2F2toJObyL+CG0LKH37XuXjnw 2xLiTYR8H6l9SPy9e8EQ3eyUZRX3d3PdiGI6OmgfLwHmzQrRTZn0SdbvHSpA04Wz OjkOw5Bu7gXl3+2ADAyVg4t5oWqlbBe1oQC7h0jEV1/1Y1kbg7LuNRux8nUu4GCY BXn5UsnGb7l3vDIQxXAQlz3HiEbF4MY= -----END CERTIFICATE-----Generated at Tue Oct 27 22:32:55 2026 by rpki-client