$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/412ca72f-9edd-3e5b-9c01-bafb60c17755.roa File: 412ca72f-9edd-3e5b-9c01-bafb60c17755.roa (raw, json) Hash identifier: X3lpIngUREEn7PPlkhSmIfF1tG5O5fVjaWvBwj+jdY0= Subject key identifier: 42:92:F1:C8:C9:2E:38:91:F0:34:09:65:25:D5:BA:8E:17:E3:E8:2E Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F4112B49ECB013D9F84834400 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/412ca72f-9edd-3e5b-9c01-bafb60c17755.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22652 IP address blocks: 75.98.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b4:9e:cb:01:3d:9f:84:83:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=20e954ef-1b6d-46ab-bafb-7ed7e3180647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:f6:e9:2e:26:5e:f2:c2:37:67:2e:08:8f: 73:ac:ad:fc:16:8d:33:b3:cf:e4:34:ec:f6:d8:35: 3c:2b:3d:f2:c5:f3:0d:a2:3f:88:76:b3:64:e5:df: 23:62:c7:c1:c1:ca:d7:51:11:2b:07:74:e0:99:00: 0e:c6:e2:7d:92:13:c5:e7:d0:6e:6f:32:1e:ca:66: 20:20:82:20:26:aa:05:59:33:9f:c9:41:9d:55:10: d1:09:92:bd:ec:1f:02:21:e0:fb:a1:7f:48:e5:93: 56:21:d8:da:49:17:c4:33:e9:39:3e:cd:df:08:c3: 83:29:f7:22:0f:25:9b:80:3a:e2:77:5f:a5:82:3f: f5:eb:24:fc:4a:4f:03:bf:67:56:1e:65:a0:b5:d9: 80:e9:52:0e:ce:f2:8f:2b:ce:4f:1b:06:7b:77:c7: e7:93:ec:af:f0:83:51:17:55:d4:d7:48:96:81:3e: a9:48:11:88:4b:e0:e7:9d:11:29:cb:54:7b:29:58: aa:d7:cb:05:d3:ea:20:33:08:0d:6c:3d:ae:41:62: d2:5e:c4:97:9b:f4:42:92:a2:67:63:02:6f:56:2b: d9:f4:06:25:a2:8c:f3:9a:da:c2:74:09:9c:89:17: 5e:b7:ee:ce:42:29:64:b5:5d:43:cb:68:27:8d:30: 56:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:F1:C8:C9:2E:38:91:F0:34:09:65:25:D5:BA:8E:17:E3:E8:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/412ca72f-9edd-3e5b-9c01-bafb60c17755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 75.98.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:7b:af:d8:00:65:44:09:54:2b:de:ea:aa:62:a7:b0:dd:58: 0a:a8:e5:41:bd:90:ae:23:54:c4:35:0b:ad:6a:33:a4:02:91: 92:b6:14:4e:5d:04:49:ee:9b:5b:71:4e:c8:60:00:ec:88:e4: 78:af:eb:63:1f:b6:e2:79:9a:7d:b9:de:8e:71:33:c1:e8:d6: 3d:db:9f:e2:55:2a:0f:68:e3:3e:3c:cc:f2:d0:b1:77:47:e1: 16:16:aa:13:c2:01:b7:e5:88:11:74:9b:8c:ff:d3:c2:07:a7: 95:12:7f:0d:43:1a:56:3d:4e:29:45:e7:96:c3:d4:af:77:c2: a7:12:24:0f:08:74:48:1c:55:c5:b9:42:ff:48:9e:24:bc:43: ad:2a:66:10:f5:2e:00:d1:42:1d:b1:59:43:d7:4d:02:df:66: 63:89:c7:e8:67:20:02:1f:80:58:16:60:84:e0:21:5e:ba:33: a8:9b:82:6b:7b:89:c6:55:02:92:da:89:66:bc:2b:9a:ca:33: 76:44:60:1a:e3:db:a4:65:b5:a9:0c:91:87:3e:71:a9:59:90: 34:76:ea:29:63:17:62:32:ee:80:30:32:88:dd:7f:25:7c:07: 7a:36:fd:69:d8:52:f0:f2:31:f7:90:8b:8f:d5:99:a9:4f:9b: 52:0e:c2:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErSeywE9n4SDRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk MjBlOTU0ZWYtMWI2ZC00NmFiLWJhZmItN2VkN2UzMTgwNjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygH26S4mXvLCN2cuCI9zrK38Fo0zs8/kNOz2 2DU8Kz3yxfMNoj+IdrNk5d8jYsfBwcrXURErB3TgmQAOxuJ9khPF59BubzIeymYg IIIgJqoFWTOfyUGdVRDRCZK97B8CIeD7oX9I5ZNWIdjaSRfEM+k5Ps3fCMODKfci DyWbgDrid1+lgj/16yT8Sk8Dv2dWHmWgtdmA6VIOzvKPK85PGwZ7d8fnk+yv8INR F1XU10iWgT6pSBGIS+DnnREpy1R7KViq18sF0+ogMwgNbD2uQWLSXsSXm/RCkqJn YwJvVivZ9AYloozzmtrCdAmciRdet+7OQilktV1Dy2gnjTBWDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKS8cjJLjiR8DQJZSXVuo4X4+guMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNDEyY2E3MmYtOWVkZC0z ZTViLTljMDEtYmFmYjYwYzE3NzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2KEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh7r9gAZUQJVCve6qpip7DdWAqo5UG9kK4jVMQ1C61qM6QCkZK2FE5d BEnum1txTshgAOyI5Hiv62MftuJ5mn253o5xM8Ho1j3bn+JVKg9o4z48zPLQsXdH 4RYWqhPCAbfliBF0m4z/08IHp5USfw1DGlY9TilF55bD1K93wqcSJA8IdEgcVcW5 Qv9IniS8Q60qZhD1LgDRQh2xWUPXTQLfZmOJx+hnIAIfgFgWYITgIV66M6ibgmt7 icZVApLaiWa8K5rKM3ZEYBrj26RltakMkYc+calZkDR26iljF2Iy7oAwMojdfyV8 B3o2/WnYUvDyMfeQi4/VmalPm1IOwpk= -----END CERTIFICATE-----Generated at Tue Sep 22 16:21:57 2026 by rpki-client