$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f6a9e206-4f53-37a1-af90-2d5d3d49ec71.roa File: f6a9e206-4f53-37a1-af90-2d5d3d49ec71.roa (raw, json) Hash identifier: DUxw6ip8FlIcnNS93DNWShHc22RteEOo/e7s+Q2rtcQ= Subject key identifier: EA:72:5F:C0:A7:8F:0C:8F:31:00:B7:CE:A8:42:5C:41:41:B2:16:38 Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584F4F0833CD2CA458D655FE9160 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f6a9e206-4f53-37a1-af90-2d5d3d49ec71.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 72.0.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:33:cd:2c:a4:58:d6:55:fe:91:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=dab32095-fe29-45ff-8476-c958b60215a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:33:ac:eb:aa:58:5e:de:31:f7:1e:7f:dc: 0f:7c:50:1b:3c:38:43:ad:a1:2e:94:57:a1:ce:a9: 13:75:3d:79:bb:1f:5b:38:50:e7:55:29:de:ad:28: 89:69:b9:fa:43:ab:d2:49:5d:0c:73:41:fb:53:90: 1f:64:b4:6e:3d:31:2b:ff:18:c4:57:01:97:06:b8: b7:cf:ba:6c:3b:bf:45:33:a7:d6:67:c1:2a:38:35: 8a:a4:19:ba:7b:3d:17:08:f7:5a:6b:68:03:91:9f: 08:ea:24:2f:55:59:40:bf:87:12:51:b9:5b:ed:82: 0c:53:a0:02:6d:08:45:76:46:e8:d1:e2:ac:59:62: d6:71:3c:25:33:81:66:78:5d:97:ca:bc:c5:b4:f2: 41:21:c1:48:93:05:53:f7:d8:02:82:44:72:e1:08: 2b:b7:b9:d1:60:63:86:f0:60:cc:07:a2:5c:8e:de: 8f:76:66:de:16:d8:3f:49:6c:65:84:88:12:2f:d5: bc:c7:df:4d:9c:81:ea:e4:f8:37:27:c8:05:8e:c5: 33:73:04:b8:e3:d7:2c:f6:c2:bd:29:9e:5c:d0:da: 87:82:d7:dc:53:9b:5f:ef:0c:52:79:b2:6d:77:e9: e8:dd:52:e7:27:ae:b1:d8:42:7d:8d:9c:ab:2e:28: d2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:72:5F:C0:A7:8F:0C:8F:31:00:B7:CE:A8:42:5C:41:41:B2:16:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f6a9e206-4f53-37a1-af90-2d5d3d49ec71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 72.0.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f8:31:18:01:3a:16:f2:f8:bd:14:2b:90:eb:4e:5c:fd:96: f9:d2:7a:89:61:7b:8b:f1:96:d8:b6:0f:73:cb:1c:88:26:3b: f9:82:35:cf:91:c4:80:b0:82:eb:ce:ba:af:77:82:c0:86:36: 89:0d:3f:4d:3a:2d:12:28:3b:6f:71:d6:fb:01:8c:19:f7:2b: 84:b9:8a:2c:e6:86:bc:b6:62:b9:26:f3:bf:97:cb:a8:39:da: 4c:1f:8f:77:de:64:35:00:ab:65:f1:f4:b2:c0:d9:49:81:47: 96:3c:63:82:05:b8:c9:68:72:59:6d:69:0f:a7:34:f2:6c:7a: 36:b6:4c:e9:60:2c:e1:1b:f1:87:2a:9b:4e:27:ee:fb:52:28: 57:23:93:b4:bf:4d:2b:ff:ec:c3:3a:81:0c:cd:d8:a1:a7:39: e0:8c:67:55:19:09:e1:47:59:54:5c:0e:b8:bf:10:07:f6:ba: 8d:0b:b8:8e:d8:ac:f2:34:19:fd:40:ca:83:ca:63:59:bc:fe: 85:c3:a1:39:42:ed:49:32:4a:bd:c8:f0:d3:04:54:9f:5a:79: 1a:93:b3:5e:73:3a:c5:86:4e:80:23:22:8a:1f:b1:19:0e:be: 13:8e:ec:ea:0c:ca:12:ef:60:50:35:f9:a6:9a:30:50:27:81: 54:7b:bd:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCDPNLKRY1lX+kWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZGFiMzIwOTUtZmUyOS00NWZmLTg0NzYtYzk1OGI2MDIxNWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf0zrOuqWF7eMfcef9wPfFAbPDhDraEulFeh zqkTdT15ux9bOFDnVSnerSiJabn6Q6vSSV0Mc0H7U5AfZLRuPTEr/xjEVwGXBri3 z7psO79FM6fWZ8EqODWKpBm6ez0XCPdaa2gDkZ8I6iQvVVlAv4cSUblb7YIMU6AC bQhFdkbo0eKsWWLWcTwlM4FmeF2XyrzFtPJBIcFIkwVT99gCgkRy4Qgrt7nRYGOG 8GDMB6Jcjt6PdmbeFtg/SWxlhIgSL9W8x99NnIHq5Pg3J8gFjsUzcwS449cs9sK9 KZ5c0NqHgtfcU5tf7wxSebJtd+no3VLnJ66x2EJ9jZyrLijSnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpyX8CnjwyPMQC3zqhCXEFBshY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvZjZhOWUyMDYtNGY1My0z N2ExLWFmOTAtMmQ1ZDNkNDllYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASADtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/4MRgBOhby+L0UK5DrTlz9lvnSeolhe4vxlti2D3PLHIgmO/mCNc+R xICwguvOuq93gsCGNokNP006LRIoO29x1vsBjBn3K4S5iizmhry2Yrkm87+Xy6g5 2kwfj3feZDUAq2Xx9LLA2UmBR5Y8Y4IFuMloclltaQ+nNPJseja2TOlgLOEb8Ycq m04n7vtSKFcjk7S/TSv/7MM6gQzN2KGnOeCMZ1UZCeFHWVRcDri/EAf2uo0LuI7Y rPI0Gf1AyoPKY1m8/oXDoTlC7UkySr3I8NMEVJ9aeRqTs15zOsWGToAjIoofsRkO vhOO7OoMyhLvYFA1+aaaMFAngVR7vRg= -----END CERTIFICATE-----Generated at Tue Oct 6 20:33:12 2026 by rpki-client