$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c4b2a1-5ebf-3773-892f-4f93759a06f1.roa File: 25c4b2a1-5ebf-3773-892f-4f93759a06f1.roa (raw, json) Hash identifier: GkFOrS+9/TMvwWjdD77IElkNMSFkYAWcn3wuobHUV6o= Subject key identifier: 87:39:07:44:1F:F7:44:CC:61:D6:77:07:E0:2B:C5:52:BD:BC:EE:57 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584F06729739E96CBC9E6A718840 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c4b2a1-5ebf-3773-892f-4f93759a06f1.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 36522 IP address blocks: 76.70.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:97:39:e9:6c:bc:9e:6a:71:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=93b08de8-8572-4235-9597-0eaa1f444d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:32:91:51:1d:9b:f3:b3:ee:c5:83:4a:07: 49:58:d2:a2:91:b9:53:6a:b1:f3:64:8f:89:04:69: 2c:ba:c2:a1:27:37:9a:cc:27:0e:ca:61:0f:2a:bc: 8b:48:f0:d5:7e:6f:3b:e5:fc:5e:1c:20:7c:03:a7: 48:e5:fa:af:44:c1:c2:3d:fc:0f:bf:7c:2e:ea:6c: b3:f1:ba:d4:65:b9:7d:15:d2:e9:b7:79:1d:f8:97: e5:2c:29:12:82:66:38:fe:78:26:3a:ba:47:49:f5: f5:4d:78:58:d8:33:56:ce:74:b6:3d:c0:3b:dd:10: 21:bb:35:67:58:22:ab:20:f8:22:e6:ef:ca:54:3a: eb:1b:05:b0:fb:5f:ac:9d:6b:9b:4f:3a:44:3c:48: a3:b0:c6:57:dc:bc:58:94:6c:ad:36:75:88:16:8d: 5a:65:23:23:6e:29:3b:6e:09:1d:d0:4b:c7:3d:87: 55:ab:40:e7:85:75:19:45:f3:cb:e8:50:70:cb:09: c0:28:da:d5:fe:60:8f:28:ce:ab:ba:74:9a:5b:8d: c1:e8:12:65:29:46:1f:57:09:62:e3:87:6f:57:0d: 98:15:73:8d:6d:5f:f2:9d:e6:50:6b:8a:9e:ce:b8: 95:25:4c:50:db:99:99:0e:9b:1f:2f:ab:1b:95:3d: d1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:39:07:44:1F:F7:44:CC:61:D6:77:07:E0:2B:C5:52:BD:BC:EE:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c4b2a1-5ebf-3773-892f-4f93759a06f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 76.70.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:75:2d:8c:9f:e8:1c:58:4c:45:97:3d:ac:43:f4:d2:2d:e4: 79:13:04:2f:8a:4a:cf:8d:95:24:cc:a3:1c:8a:16:9e:50:30: ed:de:53:fb:d5:92:29:26:b9:6c:00:0c:60:26:3a:0a:c4:9b: 15:24:44:36:55:55:49:4b:39:dc:ab:f2:12:d6:aa:ad:c7:e7: 26:2c:af:a4:1d:08:ef:46:d3:5c:7d:65:23:9d:95:2c:b3:26: 1a:04:10:6d:2a:d8:be:21:52:df:f7:d2:01:76:88:27:9a:98: 20:3f:f8:8e:ff:7b:fe:16:83:c7:44:e0:5d:39:6f:2c:59:ad: 50:18:d0:0c:2a:56:4a:80:f4:45:86:de:c1:a4:46:bc:bb:fa: e3:d4:ea:34:f3:7f:84:84:17:34:39:15:fc:59:80:93:35:12: 1c:7e:7a:a9:20:e6:c5:cd:63:30:7e:e6:18:af:1a:23:44:0b: 9e:5d:1b:bf:c4:52:cd:a2:75:3f:13:0c:02:15:b7:cd:18:4a: d9:e1:64:b3:c5:67:9d:ba:8c:84:7a:29:0a:dd:02:ae:4d:53: 19:7a:d5:85:6e:97:9b:e4:bd:99:58:9e:ac:12:87:6e:4c:04: 50:1b:8a:8c:7a:73:c8:a9:35:03:80:7d:e5:91:d9:e8:a4:3d: ae:68:a1:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gcpc56Wy8nmpxiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk OTNiMDhkZTgtODU3Mi00MjM1LTk1OTctMGVhYTFmNDQ0ZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1AykVEdm/Oz7sWDSgdJWNKikblTarHzZI+J BGksusKhJzeazCcOymEPKryLSPDVfm875fxeHCB8A6dI5fqvRMHCPfwPv3wu6myz 8brUZbl9FdLpt3kd+JflLCkSgmY4/ngmOrpHSfX1TXhY2DNWznS2PcA73RAhuzVn WCKrIPgi5u/KVDrrGwWw+1+snWubTzpEPEijsMZX3LxYlGytNnWIFo1aZSMjbik7 bgkd0EvHPYdVq0DnhXUZRfPL6FBwywnAKNrV/mCPKM6runSaW43B6BJlKUYfVwli 44dvVw2YFXONbV/yneZQa4qezriVJUxQ25mZDpsfL6sblT3ROQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc5B0Qf90TMYdZ3B+ArxVK9vO5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjVjNGIyYTEtNWViZi0z NzczLTg5MmYtNGY5Mzc1OWEwNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTEbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJh1LYyf6BxYTEWXPaxD9NIt5HkTBC+KSs+NlSTMoxyKFp5QMO3eU/vV kikmuWwADGAmOgrEmxUkRDZVVUlLOdyr8hLWqq3H5yYsr6QdCO9G01x9ZSOdlSyz JhoEEG0q2L4hUt/30gF2iCeamCA/+I7/e/4Wg8dE4F05byxZrVAY0AwqVkqA9EWG 3sGkRry7+uPU6jTzf4SEFzQ5FfxZgJM1Ehx+eqkg5sXNYzB+5hivGiNEC55dG7/E Us2idT8TDAIVt80YStnhZLPFZ526jIR6KQrdAq5NUxl61YVul5vkvZlYnqwSh25M BFAbiox6c8ipNQOAfeWR2eikPa5oobg= -----END CERTIFICATE-----Generated at Sun Oct 11 07:50:23 2026 by rpki-client