$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/a95ab48a-9ff9-3d91-87e9-0efe82cdfa77.roa File: a95ab48a-9ff9-3d91-87e9-0efe82cdfa77.roa (raw, json) Hash identifier: GzP+T+Uwd1IovK3SZtq2H1MbzJbEnmfVVnFprqntNCU= Subject key identifier: AC:9E:8E:E2:E0:B7:DC:BC:FE:2F:B0:F6:D3:08:F9:A4:7D:58:E1:1F Certificate issuer: /CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Certificate serial: 010D0C9F4328584F1467977ACC9B2278D8ECE280 Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/a95ab48a-9ff9-3d91-87e9-0efe82cdfa77.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 33189 IP address blocks: 206.71.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:97:7a:cc:9b:22:78:d8:ec:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=ac10052f-dc97-4471-b984-1c7f50cf48f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:70:fd:d4:2e:69:47:10:42:8e:a5:da:0c:3e: 53:f7:b1:1f:10:82:8a:56:96:08:ed:5c:86:0b:7f: b6:0e:ec:96:7c:7c:a3:f5:71:7e:54:35:df:39:b4: 5b:28:1a:ea:32:e6:d7:3e:26:d2:05:2c:f1:fa:92: 32:8b:57:d3:9d:da:34:8e:3a:ae:f4:65:54:81:c9: fa:76:f8:a1:46:44:36:b3:1a:c4:ca:31:35:8a:61: 9a:76:1d:5c:3c:05:1f:08:4d:3c:d2:2b:0d:95:7e: f9:70:49:1d:72:b5:70:7e:0a:a8:3b:fe:8c:37:bb: 33:16:eb:98:ba:2c:59:2f:43:49:d9:54:58:0a:2b: c3:5b:b8:39:f4:96:9d:71:7c:31:31:d1:c7:00:87: 86:18:cc:90:39:01:e1:f9:98:10:28:41:43:6e:31: 08:ec:8e:c4:0b:94:59:a6:10:a9:e0:85:d5:ae:1c: 72:f9:37:28:87:99:47:01:97:0d:81:2c:41:7d:0a: a3:ef:9e:ca:91:a4:8f:6a:19:fe:03:f7:0c:b1:32: c6:2f:fe:b1:8c:46:23:a6:a8:64:1f:5c:95:52:c7: 69:ca:69:15:f8:f2:c9:9b:b5:b8:90:75:12:f5:ae: d3:e8:0f:43:e2:03:de:e2:25:40:d3:33:38:2c:c0: fd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9E:8E:E2:E0:B7:DC:BC:FE:2F:B0:F6:D3:08:F9:A4:7D:58:E1:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/a95ab48a-9ff9-3d91-87e9-0efe82cdfa77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl X509v3 Authority Key Identifier: keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer sbgp-ipAddrBlock: critical IPv4: 206.71.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:eb:ef:dd:2b:a3:4b:19:90:c3:9e:a9:63:05:88:b0:19:5f: 44:0b:e1:d6:46:0b:98:df:f0:e5:7f:18:82:7e:11:a5:d8:41: 6a:76:d2:e4:ab:1f:fb:d3:aa:9a:5b:ed:af:4b:73:76:e2:66: 8a:6d:62:98:c9:00:1c:53:58:fd:32:3e:2f:c8:71:8c:df:02: 6f:78:71:03:23:94:0d:38:ae:b6:d0:04:53:16:03:4e:20:25: 1b:c2:da:d1:09:78:36:d3:d7:d7:59:0e:da:98:fd:a9:ec:ca: fb:50:cf:59:cf:2a:37:68:bc:e2:a1:48:58:4b:97:25:70:f6: 64:2d:5e:1f:ed:eb:be:dd:ae:6c:6d:65:a3:c6:33:ff:90:c4: 8e:28:5e:5d:84:08:27:80:c4:e4:ce:2f:35:7b:b0:2b:e8:82: b3:95:c1:c6:76:88:17:b5:e5:1e:69:bc:22:eb:67:02:65:86: 59:d8:88:49:dd:d2:2e:3a:1a:32:26:d3:24:16:16:b7:d4:66: dd:6d:f9:fa:af:0b:76:d4:41:db:0d:68:6e:a6:07:a0:bb:1a: 90:ac:65:a5:8d:bc:9c:00:89:5e:f4:75:b2:a1:56:9a:b7:1b: 03:bb:dd:57:33:74:23:7a:00:bd:d1:9b:32:6f:44:2b:8d:39: 4c:d5:cc:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5d6zJsieNjs4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc5MzdiNzYtMTQwMS00YTE5LTg2ZWYtMjM1MWZkMDE5 OGE2MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YWMxMDA1MmYtZGM5Ny00NDcxLWI5ODQtMWM3ZjUwY2Y0OGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinD91C5pRxBCjqXaDD5T97EfEIKKVpYI7VyG C3+2DuyWfHyj9XF+VDXfObRbKBrqMubXPibSBSzx+pIyi1fTndo0jjqu9GVUgcn6 dvihRkQ2sxrEyjE1imGadh1cPAUfCE080isNlX75cEkdcrVwfgqoO/6MN7szFuuY uixZL0NJ2VRYCivDW7g59JadcXwxMdHHAIeGGMyQOQHh+ZgQKEFDbjEI7I7EC5RZ phCp4IXVrhxy+Tcoh5lHAZcNgSxBfQqj757KkaSPahn+A/cMsTLGL/6xjEYjpqhk H1yVUsdpymkV+PLJm7W4kHUS9a7T6A9D4gPe4iVA0zM4LMD9aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyejuLgt9y8/i+w9tMI+aR9WOEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkz N2I3Ni0xNDAxLTRhMTktODZlZi0yMzUxZmQwMTk4YTYvYTk1YWI0OGEtOWZmOS0z ZDkxLTg3ZTktMGVmZTgyY2RmYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDc5MzdiNzYtMTQwMS00YTE5LTg2 ZWYtMjM1MWZkMDE5OGE2L2Q3OTM3Yjc2LTE0MDEtNGExOS04NmVmLTIzNTFmZDAx OThhNi5jcmwwHwYDVR0jBBgwFoAUzCmYA5nGRcTgpU9GWUkMpY/nz8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkzN2I3Ni0xNDAxLTRhMTktODZlZi0yMzUx ZmQwMTk4YTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzkcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPr790ro0sZkMOeqWMFiLAZX0QL4dZGC5jf8OV/GIJ+EaXYQWp20uSr H/vTqppb7a9Lc3biZoptYpjJABxTWP0yPi/IcYzfAm94cQMjlA04rrbQBFMWA04g JRvC2tEJeDbT19dZDtqY/ansyvtQz1nPKjdovOKhSFhLlyVw9mQtXh/t677drmxt ZaPGM/+QxI4oXl2ECCeAxOTOLzV7sCvogrOVwcZ2iBe15R5pvCLrZwJlhlnYiEnd 0i46GjIm0yQWFrfUZt1t+fqvC3bUQdsNaG6mB6C7GpCsZaWNvJwAiV70dbKhVpq3 GwO73VczdCN6AL3RmzJvRCuNOUzVzNA= -----END CERTIFICATE-----Generated at Tue Sep 22 22:18:06 2026 by rpki-client