$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b75aa677-d0d0-3e98-85d6-e63dccaae195.roa File: b75aa677-d0d0-3e98-85d6-e63dccaae195.roa (raw, json) Hash identifier: E3GZzh2KRw2xsXP1/pgsOF4k0Mm27MOOHW77ffMb5dM= Subject key identifier: B3:74:29:5C:64:6F:A4:64:C3:31:78:0F:E6:28:20:E7:7A:B0:C7:71 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584F58911ADFD5E8F18905BB6100 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b75aa677-d0d0-3e98-85d6-e63dccaae195.roa Signing time: Wed 30 Sep 2026 10:58:57 +0000 ROA not before: Wed 30 Sep 2026 10:58:57 +0000 ROA not after: Tue 29 Dec 2026 11:58:57 +0000 asID: 16647 IP address blocks: 70.39.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:91:1a:df:d5:e8:f1:89:05:bb:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Sep 30 10:58:57 2026 GMT Not After : Dec 29 11:58:57 2026 GMT Subject: CN=b277ed9d-5394-4e25-b63c-7b473b0dbea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4c:08:80:96:b0:95:c1:06:15:bb:9e:8f:28: ae:ff:d0:41:33:c5:99:02:0b:96:ed:2b:9e:9d:16: 13:8e:34:c8:79:92:cc:0c:29:a7:66:ef:23:2e:28: c6:d0:b4:06:4d:01:0c:16:f7:b4:e4:6d:09:1c:c8: e3:11:6d:ea:85:45:d4:86:5d:29:13:37:5c:ba:2e: ca:c4:7f:3a:39:c5:ad:92:15:bc:25:a2:d5:20:97: 59:fa:f6:f3:fa:06:d6:5a:6f:1f:0b:c1:8f:dc:ea: 73:d2:67:3a:ed:12:59:a0:2e:1b:8d:7f:d7:da:e5: db:27:83:55:ef:d0:21:d7:f9:48:95:d5:82:4b:39: 96:30:a7:04:ce:1d:fc:6c:8e:ed:cb:77:c1:8b:fa: 3a:4b:dc:22:ee:29:9e:c8:b4:71:c2:2f:d2:50:e3: c7:6c:c4:a4:39:88:9f:91:28:80:00:09:d3:2c:12: 38:1d:09:9d:56:71:e1:82:7e:09:86:b9:8a:ec:90: 4c:e6:13:76:55:03:e7:0b:18:26:08:0a:34:66:24: 58:47:a6:b5:1a:34:cd:72:5a:27:b4:90:39:81:08: 19:35:ea:4c:bb:2d:ed:54:58:f1:be:af:c0:39:9a: 72:73:c7:ed:0c:07:0a:e9:1d:28:e7:81:07:c4:09: c1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:74:29:5C:64:6F:A4:64:C3:31:78:0F:E6:28:20:E7:7A:B0:C7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b75aa677-d0d0-3e98-85d6-e63dccaae195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 70.39.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:02:18:f8:99:a3:c6:e3:34:7f:85:19:f2:2d:7f:2f:60:80: 5b:75:2a:7e:b6:b8:e3:8e:5c:45:4c:38:4f:68:cd:af:0e:c8: eb:34:9a:7d:c5:f1:5b:12:cd:0f:a4:5c:ed:9a:cf:8a:7d:1b: 00:ea:85:58:b7:bb:39:ed:0c:35:9d:92:7f:ab:c8:99:3a:51: f6:12:a3:a9:43:36:8c:d0:02:8b:45:d4:61:0c:b2:2b:2c:bc: c0:16:da:2c:27:11:7a:af:d2:52:3a:ac:04:85:5d:3d:14:5e: 84:14:5e:d3:55:f7:e8:51:b2:29:c4:41:a7:42:b7:9f:43:4a: a3:84:c7:ea:82:5f:33:96:f3:66:27:a1:8a:2f:9a:c3:1f:de: 36:d7:14:bf:c1:53:a3:6c:88:e1:42:5c:f6:1e:10:ea:d8:cf: ca:e6:f8:1a:7e:16:8f:df:41:b5:1c:e3:28:fd:60:a4:c4:8c: b5:76:b4:ca:ef:b5:b0:71:91:5b:9a:7c:21:62:dc:7f:f0:a4: af:c5:8d:cf:73:96:96:18:10:4d:af:96:94:9e:7c:c1:13:98: 69:d7:6d:83:cf:9a:0c:3b:b0:ab:f8:ca:44:07:6d:b6:ee:18: 70:1a:e5:a3:08:e7:ce:b2:91:e9:1c:a6:98:e6:13:e0:69:10: 20:ab:92:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YkRrf1ejxiQW7YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI2MDkzMDEwNTg1N1oXDTI2MTIyOTExNTg1N1owLzEtMCsGA1UEAxMk YjI3N2VkOWQtNTM5NC00ZTI1LWI2M2MtN2I0NzNiMGRiZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0wIgJawlcEGFbuejyiu/9BBM8WZAguW7Sue nRYTjjTIeZLMDCmnZu8jLijG0LQGTQEMFve05G0JHMjjEW3qhUXUhl0pEzdcui7K xH86OcWtkhW8JaLVIJdZ+vbz+gbWWm8fC8GP3Opz0mc67RJZoC4bjX/X2uXbJ4NV 79Ah1/lIldWCSzmWMKcEzh38bI7ty3fBi/o6S9wi7imeyLRxwi/SUOPHbMSkOYif kSiAAAnTLBI4HQmdVnHhgn4JhrmK7JBM5hN2VQPnCxgmCAo0ZiRYR6a1GjTNclon tJA5gQgZNepMuy3tVFjxvq/AOZpyc8ftDAcK6R0o54EHxAnBKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLN0KVxkb6RkwzF4D+YoIOd6sMdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvYjc1YWE2NzctZDBkMC0z ZTk4LTg1ZDYtZTYzZGNjYWFlMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARif9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEICGPiZo8bjNH+FGfItfy9ggFt1Kn62uOOOXEVMOE9oza8OyOs0mn3F 8VsSzQ+kXO2az4p9GwDqhVi3uzntDDWdkn+ryJk6UfYSo6lDNozQAotF1GEMsiss vMAW2iwnEXqv0lI6rASFXT0UXoQUXtNV9+hRsinEQadCt59DSqOEx+qCXzOW82Yn oYovmsMf3jbXFL/BU6NsiOFCXPYeEOrYz8rm+Bp+Fo/fQbUc4yj9YKTEjLV2tMrv tbBxkVuafCFi3H/wpK/Fjc9zlpYYEE2vlpSefMETmGnXbYPPmgw7sKv4ykQHbbbu GHAa5aMI586ykekcppjmE+BpECCrkss= -----END CERTIFICATE-----Generated at Mon Nov 2 14:27:56 2026 by rpki-client