$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa File: caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa (raw, json) Hash identifier: pCjjzjXdjw1yRpfmk+881ZuxdRyIkuG6XAuCWZX2Gf4= Subject key identifier: 39:A4:F7:9C:AF:D0:71:2A:25:D3:3A:BD:DF:D6:B2:EC:0E:A3:0A:51 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584FA2C87695D6F7240A8F3C3CC0 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 23316 IP address blocks: 72.37.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:76:95:d6:f7:24:0a:8f:3c:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=7b911ef7-7da1-4a1e-bbd5-e1ef3043c5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:54:dc:28:f9:bf:f5:ec:3f:64:44:c1:f2:c1: b7:c4:c2:1a:c4:3b:e5:ba:f7:d3:04:2c:b1:4d:66: 10:68:cd:3c:1e:bf:74:e7:c1:0b:05:fc:2a:fd:49: bf:dd:98:9b:60:3c:05:af:58:62:f4:66:c2:60:36: 51:fa:1d:26:93:f0:d6:bb:11:2e:ad:1b:c4:04:f9: 11:a4:92:c3:f3:9a:f0:14:ff:2a:20:25:13:1a:29: d1:ff:9a:93:4a:a3:c7:bf:30:e9:9b:55:31:cf:6f: f3:e6:b4:55:2f:34:d6:7c:95:55:b8:2f:17:2d:f9: 5f:b6:c6:9d:43:04:c6:93:0f:55:a0:e4:bf:f4:80: 0c:e5:b2:8e:f5:1e:b7:f0:7e:92:0f:f7:e8:bf:e3: 6b:de:89:fc:e3:d3:8d:12:07:91:78:39:49:b5:96: 99:6a:9a:e9:7a:58:d0:22:4e:8b:de:79:3e:96:09: c6:37:8c:22:81:e1:02:68:e6:35:f6:6a:65:54:55: d3:b4:18:75:fe:62:36:1e:b4:9f:3f:89:03:6d:bc: 9c:1f:77:3d:98:f4:38:db:7a:a6:18:03:10:d2:5a: e9:41:d4:3b:27:61:76:3f:4b:19:a3:2f:b2:49:db: 83:5a:ec:08:75:aa:3a:30:96:99:46:85:61:82:80: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A4:F7:9C:AF:D0:71:2A:25:D3:3A:BD:DF:D6:B2:EC:0E:A3:0A:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 72.37.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e6:de:40:12:63:1c:0f:73:c5:cb:38:88:3e:87:cf:1a:18: 67:0e:6f:37:55:bb:bb:d6:87:90:13:4c:24:42:fd:b2:fc:50: ec:6e:0e:8a:c2:63:26:fd:49:ec:db:38:2d:c3:9d:f4:d1:68: bc:3d:8e:fc:a1:d5:1d:40:f3:1a:00:e7:be:76:22:04:66:9a: 4d:68:f7:3b:bd:f2:af:7a:38:ce:9f:0a:a2:30:10:a6:05:92: 7c:22:5b:c7:ca:f5:2c:0a:27:68:fa:2e:74:9b:d4:f8:fc:57: 0c:7e:f3:4d:eb:b3:e7:a3:6d:58:1d:33:64:56:47:78:ce:d7: 2d:5d:7d:43:62:48:f9:00:7e:4a:59:db:ef:ed:d5:9f:a4:74: b5:cc:5d:08:75:2e:40:a4:f9:0c:e7:05:e1:24:30:62:1d:92: 08:21:41:c1:db:82:c7:a4:b3:f4:87:d2:bf:09:82:59:51:4d: 75:a4:ea:6b:0b:87:9e:69:5d:3f:e8:19:9e:92:a4:18:24:81: d5:6d:c1:2b:52:55:23:61:2a:53:12:17:07:8d:01:86:fa:0c: 21:e5:bf:df:4b:0a:51:45:2b:d8:8c:26:b8:af:6b:4e:dd:d2: e1:1f:6d:4e:f5:80:5a:28:1c:be:d7:f6:3c:c4:e8:51:5b:19: f7:74:9a:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iyHaV1vckCo88PMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk N2I5MTFlZjctN2RhMS00YTFlLWJiZDUtZTFlZjMwNDNjNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FTcKPm/9ew/ZETB8sG3xMIaxDvluvfTBCyx TWYQaM08Hr9058ELBfwq/Um/3ZibYDwFr1hi9GbCYDZR+h0mk/DWuxEurRvEBPkR pJLD85rwFP8qICUTGinR/5qTSqPHvzDpm1Uxz2/z5rRVLzTWfJVVuC8XLflftsad QwTGkw9VoOS/9IAM5bKO9R638H6SD/fov+Nr3on849ONEgeReDlJtZaZaprpeljQ Ik6L3nk+lgnGN4wigeECaOY19mplVFXTtBh1/mI2HrSfP4kDbbycH3c9mPQ423qm GAMQ0lrpQdQ7J2F2P0sZoy+ySduDWuwIdao6MJaZRoVhgoCj/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmk95yv0HEqJdM6vd/WsuwOowpRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvY2FhZDIxYWEtZGFhNC0z N2IyLWFkNzYtMWUyZTliMWEwMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3m3kASYxwPc8XLOIg+h88aGGcObzdVu7vWh5ATTCRC/bL8UOxuDorC Yyb9SezbOC3DnfTRaLw9jvyh1R1A8xoA5752IgRmmk1o9zu98q96OM6fCqIwEKYF knwiW8fK9SwKJ2j6LnSb1Pj8Vwx+803rs+ejbVgdM2RWR3jO1y1dfUNiSPkAfkpZ 2+/t1Z+kdLXMXQh1LkCk+QznBeEkMGIdkgghQcHbgseks/SH0r8JgllRTXWk6msL h55pXT/oGZ6SpBgkgdVtwStSVSNhKlMSFweNAYb6DCHlv99LClFFK9iMJriva07d 0uEfbU71gFooHL7X9jzE6FFbGfd0mn0= -----END CERTIFICATE-----Generated at Thu Nov 5 18:09:11 2026 by rpki-client