$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/94b9d731-c9b3-3be4-9473-e1983db31768.roa File: 94b9d731-c9b3-3be4-9473-e1983db31768.roa (raw, json) Hash identifier: 6WfGeDhPayDXOoTRViqqsjh+TLvlVqhbJzrxPDS35fs= Subject key identifier: 71:95:8F:28:48:AA:42:E0:1B:8B:56:4E:6B:61:52:25:0F:B9:E6:79 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584EA787C97DD6DB762CF90F1480 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/94b9d731-c9b3-3be4-9473-e1983db31768.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 29802 IP address blocks: 172.84.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:c9:7d:d6:db:76:2c:f9:0f:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=af79a74a-4202-4bec-9717-88e00e21a072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:16:73:dc:84:1c:58:74:1c:f3:ea:34:35:b6: 16:53:cd:5f:5f:5b:09:7a:d5:b4:ab:0e:d0:b6:5a: 77:39:47:0f:ea:2e:89:04:39:d9:cc:11:b3:43:63: db:1b:b6:0b:b7:b8:75:f2:bf:52:45:df:5d:b8:92: 60:76:76:85:fe:6b:59:ff:ec:d4:71:0a:6c:2a:df: 25:50:3c:97:60:66:15:1d:a0:78:46:8c:03:3f:06: 06:6d:1c:a7:a7:5a:e6:fd:7c:8e:b5:54:53:e8:38: 30:30:13:01:c5:c7:8c:36:21:63:52:04:d5:94:e1: a0:2f:6d:98:9c:e4:6c:8b:9a:c8:ea:2e:de:f7:62: a8:aa:6f:33:d9:21:07:0a:7a:4c:f0:07:ba:ef:73: 0f:6c:12:74:a3:f6:82:ad:68:3e:88:3a:eb:8c:a9: 32:fc:ae:5d:a6:f1:dd:c3:57:4f:c8:8d:6d:20:7b: 81:a5:d6:13:74:e2:12:fb:5a:b2:e1:3e:ca:eb:00: 0a:32:c4:e1:50:c0:c4:ab:b3:5e:de:fe:57:fb:d6: b4:8f:00:76:89:1e:01:69:02:3f:b5:dd:b2:1f:16: 69:d4:30:32:f6:f6:3b:5e:74:65:22:b8:a6:5d:a9: 3e:0c:dc:86:ba:ab:91:75:23:2f:0b:b7:da:b3:58: 6e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:95:8F:28:48:AA:42:E0:1B:8B:56:4E:6B:61:52:25:0F:B9:E6:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/94b9d731-c9b3-3be4-9473-e1983db31768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fa:0a:08:c0:24:a3:d9:d8:9b:2c:27:2a:9c:69:a7:e2:1e: 77:46:09:0e:04:a5:9d:a2:73:2b:48:76:12:9d:4b:6b:fe:d1: 85:40:1d:0f:5d:52:66:97:d8:11:37:12:cf:ee:81:78:e2:fb: e1:ae:b6:ba:1f:65:06:e9:d0:04:8d:56:ab:cf:ec:53:f5:7a: ed:db:a2:aa:18:7e:32:29:4d:57:98:dc:a0:89:93:2b:15:88: 73:e6:f9:db:46:ca:fa:b7:2c:ac:70:42:b2:ad:df:5e:bb:33: 68:ed:5c:e2:3b:9c:e8:c0:f1:51:43:32:ad:83:25:8b:4f:24: de:77:6d:1f:13:34:57:b8:ee:67:9f:15:83:7d:23:94:2a:a4: 5f:a4:2e:f2:25:8a:a5:97:5f:fd:1d:0d:05:15:d6:be:f2:5e: 43:3d:aa:f3:c2:37:29:1e:9a:c0:d4:18:fd:ad:24:4c:59:6a: a6:95:e5:3c:46:07:e9:de:88:32:67:de:8d:d7:3c:b9:78:e6: 39:15:40:e5:62:1f:0a:5d:37:4c:a0:a1:80:bf:cd:68:f9:1a: 6c:49:60:3f:0f:6a:18:b5:2f:6b:8f:ea:73:cd:99:f4:94:a3: 29:be:6e:24:9d:97:ef:34:2b:48:06:a0:12:73:c3:e6:8f:73: 5c:81:0b:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh8l91tt2LPkPFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWY3OWE3NGEtNDIwMi00YmVjLTk3MTctODhlMDBlMjFhMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBZz3IQcWHQc8+o0NbYWU81fX1sJetW0qw7Q tlp3OUcP6i6JBDnZzBGzQ2PbG7YLt7h18r9SRd9duJJgdnaF/mtZ/+zUcQpsKt8l UDyXYGYVHaB4RowDPwYGbRynp1rm/XyOtVRT6DgwMBMBxceMNiFjUgTVlOGgL22Y nORsi5rI6i7e92Koqm8z2SEHCnpM8Ae673MPbBJ0o/aCrWg+iDrrjKky/K5dpvHd w1dPyI1tIHuBpdYTdOIS+1qy4T7K6wAKMsThUMDEq7Ne3v5X+9a0jwB2iR4BaQI/ td2yHxZp1DAy9vY7XnRlIrimXak+DNyGuquRdSMvC7fas1hu1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGVjyhIqkLgG4tWTmthUiUPueZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvOTRiOWQ3MzEtYzliMy0z YmU0LTk0NzMtZTE5ODNkYjMxNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFRMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr6CgjAJKPZ2JssJyqcaafiHndGCQ4EpZ2icytIdhKdS2v+0YVAHQ9d UmaX2BE3Es/ugXji++GutrofZQbp0ASNVqvP7FP1eu3boqoYfjIpTVeY3KCJkysV iHPm+dtGyvq3LKxwQrKt3167M2jtXOI7nOjA8VFDMq2DJYtPJN53bR8TNFe47mef FYN9I5QqpF+kLvIliqWXX/0dDQUV1r7yXkM9qvPCNykemsDUGP2tJExZaqaV5TxG B+neiDJn3o3XPLl45jkVQOViHwpdN0ygoYC/zWj5GmxJYD8Pahi1L2uP6nPNmfSU oym+biSdl+80K0gGoBJzw+aPc1yBC24= -----END CERTIFICATE-----Generated at Mon Aug 24 13:23:00 2026 by rpki-client