$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/9072e23d-9ddb-3cf1-b470-91c7b3c8485f.roa File: 9072e23d-9ddb-3cf1-b470-91c7b3c8485f.roa (raw, json) Hash identifier: JU0tBiNSD+xC4DOtxARdUV4VkFmAX8uglqJvllk9i4k= Subject key identifier: 76:61:87:FA:66:40:AF:68:E6:81:70:0B:17:57:65:47:55:28:33:AA Certificate issuer: /CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a Certificate serial: 010D0C9F4328584F78E832CD006B9698FE95D600 Authority key identifier: E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/9072e23d-9ddb-3cf1-b470-91c7b3c8485f.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 3599 IP address blocks: 64.73.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:32:cd:00:6b:96:98:fe:95:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=1b1037d4-7dc4-42c3-a7b9-9d39e90b3815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:84:3d:cf:5b:14:10:12:ef:5a:7b:27:2c:dd: 7d:ba:56:56:ae:6a:11:cb:e3:36:cb:16:12:d0:3c: 2b:1a:87:08:72:92:c1:ae:98:d7:ce:bb:a8:28:3d: c2:b6:b5:7c:09:4b:12:42:54:25:d8:8a:75:bd:f8: c0:93:f3:9b:8b:fe:0e:bc:9d:c0:91:38:f0:d7:36: 60:ea:a5:61:af:44:82:a0:79:7a:77:4a:2c:76:4d: 6a:b8:8f:c2:08:4e:a2:28:2d:b7:3d:45:2c:cb:9b: d4:18:a8:75:92:48:32:2c:6d:8a:bf:cf:e8:39:af: 09:00:41:b0:7e:da:69:35:3f:16:2c:aa:33:d6:09: 5d:93:2d:0a:65:f1:a6:41:af:d4:27:46:ef:e9:9f: 71:89:34:22:07:a0:8b:76:2c:6b:d8:c2:e8:32:1e: 6c:5b:49:53:2b:c4:f3:f3:b9:c0:3f:b2:1f:5c:7b: 7f:fb:99:dc:13:cc:35:19:5e:b8:3b:c2:81:45:57: 59:28:03:cc:92:fe:4a:bd:07:47:d3:4d:72:ad:38: 0d:5f:79:41:9e:98:d6:0d:65:89:01:45:57:48:f6: c6:5e:09:8f:df:da:26:07:c0:0b:a2:96:d4:ce:80: 8c:f5:31:12:b4:99:a9:23:58:57:b8:1e:4a:fb:51: 03:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:61:87:FA:66:40:AF:68:E6:81:70:0B:17:57:65:47:55:28:33:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/9072e23d-9ddb-3cf1-b470-91c7b3c8485f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl X509v3 Authority Key Identifier: keyid:E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer sbgp-ipAddrBlock: critical IPv4: 64.73.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:29:5a:cf:56:2c:ea:34:55:07:89:08:22:03:63:a1:00:ca: 40:40:e6:58:8f:d6:11:1a:16:5c:40:cd:bb:e1:e9:3b:9f:b1: f3:04:c0:b4:53:86:4c:b2:0a:bd:80:41:c1:c2:e4:a7:1d:e7: bd:01:64:37:85:2e:18:b7:40:ba:61:2b:6e:a4:b2:7a:0c:19: 91:b4:be:50:25:5b:85:7a:ab:39:83:0f:99:94:da:d5:88:f5: dc:1e:b3:34:04:19:58:e1:8e:c9:f7:c0:06:57:58:48:5b:2f: 04:64:aa:b5:43:0a:0c:65:93:89:91:22:19:1a:38:6e:05:bf: 05:1c:6d:96:46:b5:6d:f0:56:80:cd:3d:fc:18:f3:99:02:c9: a6:14:25:8f:32:e2:10:7a:60:2b:98:b5:c2:b4:4d:1a:24:ad: 7e:39:79:b3:9a:7a:5b:fa:81:ff:95:76:97:23:ee:81:7c:be: db:6f:a1:59:a7:d9:e1:7b:00:a9:8f:1d:52:6d:42:eb:ed:a8: cd:f3:27:4f:d8:14:32:89:59:11:db:a0:ca:d3:5f:bb:12:68: 06:c9:c4:2f:f0:09:2a:f6:32:f8:2f:72:3a:b3:62:41:e7:e5: 2b:62:cd:53:fb:51:01:fa:13:49:82:db:6a:ff:19:9a:71:98: da:bc:93:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946DLNAGuWmP6V1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDhkMTRhOWItMGRjZS00NTc2LThkMjAtOGRhNGJjMTVm YjdhMB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk MWIxMDM3ZDQtN2RjNC00MmMzLWE3YjktOWQzOWU5MGIzODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4Q9z1sUEBLvWnsnLN19ulZWrmoRy+M2yxYS 0DwrGocIcpLBrpjXzruoKD3CtrV8CUsSQlQl2Ip1vfjAk/Obi/4OvJ3AkTjw1zZg 6qVhr0SCoHl6d0osdk1quI/CCE6iKC23PUUsy5vUGKh1kkgyLG2Kv8/oOa8JAEGw ftppNT8WLKoz1gldky0KZfGmQa/UJ0bv6Z9xiTQiB6CLdixr2MLoMh5sW0lTK8Tz 87nAP7IfXHt/+5ncE8w1GV64O8KBRVdZKAPMkv5KvQdH001yrTgNX3lBnpjWDWWJ AUVXSPbGXgmP39omB8ALopbUzoCM9TEStJmpI1hXuB5K+1ED1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZhh/pmQK9o5oFwCxdXZUdVKDOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQx NGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0YmMxNWZiN2EvOTA3MmUyM2QtOWRkYi0z Y2YxLWI0NzAtOTFjN2IzYzg0ODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDhkMTRhOWItMGRjZS00NTc2LThk MjAtOGRhNGJjMTVmYjdhLzA4ZDE0YTliLTBkY2UtNDU3Ni04ZDIwLThkYTRiYzE1 ZmI3YS5jcmwwHwYDVR0jBBgwFoAU518BJuVvelX+TBq3q+e776PO3jMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQxNGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0 YmMxNWZiN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQEmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYpWs9WLOo0VQeJCCIDY6EAykBA5liP1hEaFlxAzbvh6TufsfMEwLRT hkyyCr2AQcHC5Kcd570BZDeFLhi3QLphK26ksnoMGZG0vlAlW4V6qzmDD5mU2tWI 9dweszQEGVjhjsn3wAZXWEhbLwRkqrVDCgxlk4mRIhkaOG4FvwUcbZZGtW3wVoDN PfwY85kCyaYUJY8y4hB6YCuYtcK0TRokrX45ebOaelv6gf+Vdpcj7oF8vttvoVmn 2eF7AKmPHVJtQuvtqM3zJ0/YFDKJWRHboMrTX7sSaAbJxC/wCSr2MvgvcjqzYkHn 5StizVP7UQH6E0mC22r/GZpxmNq8k+A= -----END CERTIFICATE-----Generated at Sun Oct 18 07:09:10 2026 by rpki-client