$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/72ab1602-760b-3d0f-ad32-f23c1d100036.roa File: 72ab1602-760b-3d0f-ad32-f23c1d100036.roa (raw, json) Hash identifier: LeYrQxxFaudNHPYG+dMQ47Bq/xcRVTpnG5XJEfxl0FU= Subject key identifier: 7A:F4:38:80:82:4A:D6:EB:A7:71:7A:FA:29:47:83:71:7A:F3:AF:88 Certificate issuer: /CN=12380a37-68ce-4e9c-9585-53cd09071ada Certificate serial: 010D0C9F4328584F7782D40834287FA7B22C8F00 Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/72ab1602-760b-3d0f-ad32-f23c1d100036.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 21713 IP address blocks: 209.166.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:d4:08:34:28:7f:a7:b2:2c:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=a8f3a3aa-7ff0-4cab-a4d8-5ae8d427bd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:ea:7f:68:f4:1c:75:65:a7:a6:d4:ea:77: 05:c4:7c:91:1e:fe:db:58:a5:39:0a:1b:b5:20:14: d8:97:7e:93:e5:02:5e:88:5c:a9:57:43:ea:6d:5f: d6:b9:23:66:ae:a5:ce:24:63:91:1d:d4:2e:df:50: 75:cb:33:63:66:39:a6:46:bb:ab:fb:cf:60:da:51: 91:7c:f9:79:dd:13:fc:25:88:ee:aa:03:d3:06:7d: 30:19:b6:f0:2f:fc:18:e6:e8:1e:64:2a:68:f6:20: 62:00:a6:82:f8:a8:5a:4b:c3:0c:fe:5d:1a:24:b0: 1b:69:84:13:8b:c3:10:ef:4a:df:5c:37:0f:f9:09: c4:1f:3c:81:9e:6c:0a:6d:b6:1d:b8:a0:85:69:f2: 2c:d7:b3:56:07:47:de:ed:28:d2:9a:e6:a3:3e:1d: 6a:ca:51:ea:4e:24:ec:bc:94:ca:1d:4b:72:df:89: a4:cb:52:48:52:4a:84:fc:7c:55:4a:a6:42:6f:c0: d7:20:0a:16:06:e1:bd:bd:af:51:6a:96:bc:16:40: 83:23:43:35:7d:58:79:2d:b1:d9:eb:3b:96:12:0e: e3:f7:ce:f8:02:f7:31:e4:7d:10:ce:f8:26:28:a9: b6:81:e2:c5:f5:c5:ef:93:81:29:47:19:41:2f:59: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F4:38:80:82:4A:D6:EB:A7:71:7A:FA:29:47:83:71:7A:F3:AF:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/72ab1602-760b-3d0f-ad32-f23c1d100036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl X509v3 Authority Key Identifier: keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer sbgp-ipAddrBlock: critical IPv4: 209.166.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:45:08:d7:6c:b2:0d:26:5d:a5:a7:22:c2:1b:2e:61:53:c4: f3:69:08:2e:93:76:c2:50:bb:4b:fb:29:86:f0:87:06:d6:81: ad:3a:eb:31:4b:67:b1:1d:db:38:13:d4:9e:32:f0:fb:76:76: a7:7d:00:10:c8:8e:f3:b4:4f:91:8f:93:42:bb:01:0a:7c:e4: 4f:d4:86:f4:89:9d:d5:3d:85:3c:00:fa:76:68:10:46:2b:67: 36:7f:d1:7d:75:e9:02:5e:49:82:3c:61:bc:a6:10:d9:70:ac: f5:9b:86:2b:c3:ce:ce:f9:2f:ef:3a:f5:18:5d:44:83:f3:04: 18:16:cf:cf:1c:b1:9b:13:28:21:5a:99:65:0b:20:1b:78:02: f1:18:34:13:0a:ca:11:fc:dc:ec:60:9e:f2:d0:87:f2:52:84: 88:93:50:26:cf:73:b3:a0:7c:66:36:81:a6:62:e4:1c:b0:72: d5:8a:b6:f6:ca:8b:56:91:0a:78:74:5a:a3:9a:1f:81:a2:89: 10:09:73:af:24:8a:ee:9d:08:86:90:27:0a:cc:e7:77:6f:40: 7f:ee:6f:62:51:b1:2d:e2:6d:e8:90:d7:32:95:7e:08:46:3e: 64:c4:95:7e:3c:35:4a:4a:32:be:a3:f1:55:71:2f:dc:43:97: f1:b9:f8:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gtQINCh/p7IsjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTIzODBhMzctNjhjZS00ZTljLTk1ODUtNTNjZDA5MDcx YWRhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YThmM2EzYWEtN2ZmMC00Y2FiLWE0ZDgtNWFlOGQ0MjdiZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZXqf2j0HHVlp6bU6ncFxHyRHv7bWKU5Chu1 IBTYl36T5QJeiFypV0PqbV/WuSNmrqXOJGORHdQu31B1yzNjZjmmRrur+89g2lGR fPl53RP8JYjuqgPTBn0wGbbwL/wY5ugeZCpo9iBiAKaC+KhaS8MM/l0aJLAbaYQT i8MQ70rfXDcP+QnEHzyBnmwKbbYduKCFafIs17NWB0fe7SjSmuajPh1qylHqTiTs vJTKHUty34mky1JIUkqE/HxVSqZCb8DXIAoWBuG9va9Rapa8FkCDI0M1fVh5LbHZ 6zuWEg7j9874Avcx5H0QzvgmKKm2geLF9cXvk4EpRxlBL1ksHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHr0OICCStbrp3F6+ilHg3F686+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4 MGEzNy02OGNlLTRlOWMtOTU4NS01M2NkMDkwNzFhZGEvNzJhYjE2MDItNzYwYi0z ZDBmLWFkMzItZjIzYzFkMTAwMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTIzODBhMzctNjhjZS00ZTljLTk1 ODUtNTNjZDA5MDcxYWRhLzEyMzgwYTM3LTY4Y2UtNGU5Yy05NTg1LTUzY2QwOTA3 MWFkYS5jcmwwHwYDVR0jBBgwFoAUC+v8Zzc9d2IVQpU/rmHdVlHBuaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4MGEzNy02OGNlLTRlOWMtOTU4NS01M2Nk MDkwNzFhZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0aZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZFCNdssg0mXaWnIsIbLmFTxPNpCC6TdsJQu0v7KYbwhwbWga066zFL Z7Ed2zgT1J4y8Pt2dqd9ABDIjvO0T5GPk0K7AQp85E/UhvSJndU9hTwA+nZoEEYr ZzZ/0X116QJeSYI8YbymENlwrPWbhivDzs75L+869RhdRIPzBBgWz88csZsTKCFa mWULIBt4AvEYNBMKyhH83OxgnvLQh/JShIiTUCbPc7OgfGY2gaZi5BywctWKtvbK i1aRCnh0WqOaH4GiiRAJc68kiu6dCIaQJwrM53dvQH/ub2JRsS3ibeiQ1zKVfghG PmTElX48NUpKMr6j8VVxL9xDl/G5+Hs= -----END CERTIFICATE-----Generated at Tue Oct 13 21:33:37 2026 by rpki-client