$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa File: d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa (raw, json) Hash identifier: 6HZgNR9w/nCXxDDNyVa+/KrBhd/hKo/4wytKE1JtAsw= Subject key identifier: D6:6F:D4:AC:FC:2F:B0:C0:1E:F0:C2:9C:3E:02:78:AD:CB:4B:3B:8F Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584F15CCEFB8D42F0EB3570C7680 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 13213 IP address blocks: 209.236.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:ef:b8:d4:2f:0e:b3:57:0c:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=52226c5b-cede-4642-8bf1-25c7b70bd9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:5b:fc:69:cf:ad:73:62:aa:77:71:e6:65: dc:66:b3:9a:42:d7:97:4f:be:7d:6d:fb:8f:84:48: 28:ec:43:e5:23:5b:54:4a:d2:b4:2e:d4:aa:63:b2: f8:95:fa:e7:b2:c7:90:0a:d7:81:69:73:a8:1a:3e: ab:94:21:88:d1:89:5f:08:c2:55:d2:c7:4b:4f:f3: 98:9f:d9:db:55:71:57:90:0d:34:91:86:ef:47:d6: 09:83:6e:a5:ca:e1:25:8a:25:63:be:84:99:2e:a2: 9b:3e:cd:1a:04:5a:6a:17:ca:66:d0:1f:2f:41:22: 24:11:aa:56:a5:8f:1e:86:75:75:40:da:1f:d9:df: 19:1c:62:aa:bd:46:f7:64:44:12:77:05:5e:99:e4: cf:71:53:d5:e0:a7:28:90:07:dd:43:76:1d:40:13: 8d:5a:a8:f2:53:b6:72:c9:aa:3f:f9:ad:26:cc:f2: 73:47:cb:f3:f4:3c:af:59:03:3a:c9:37:8c:29:26: 89:78:e1:7c:1f:cd:d4:09:a3:d7:c6:28:85:ca:99: 2e:f6:02:fa:43:38:f7:9e:29:2e:21:54:73:6e:4e: c0:a5:cc:5f:52:09:9d:57:3d:e1:99:81:47:19:19: 19:a4:10:29:8a:62:fa:83:58:ec:d1:53:05:43:2c: e5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6F:D4:AC:FC:2F:B0:C0:1E:F0:C2:9C:3E:02:78:AD:CB:4B:3B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0d76c1b-a3f1-3424-9ad8-1adff2cd9caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9e:83:0c:bd:ac:76:20:9a:08:27:1f:b9:3b:07:36:34:e6: 0b:5e:75:a4:a4:e9:57:b7:d5:34:77:49:69:c3:d6:7a:8d:3a: 01:9e:d3:91:9c:db:89:4d:a3:27:90:14:ce:b8:4f:d4:73:1d: 0b:cc:21:8e:35:5c:9a:11:55:6c:c6:e5:0f:e0:34:da:04:af: 96:96:bd:ce:5c:e5:de:91:82:07:2d:7e:ed:57:57:17:4e:e0: 5e:df:78:ec:15:2e:c4:5a:ce:0a:0d:c6:fc:d1:c4:e8:6f:15: e4:df:95:90:97:ba:b9:d3:d4:f7:1b:75:18:7f:8f:2c:b5:2c: 54:73:3a:44:41:1d:83:01:a1:e0:d0:5d:4a:10:f9:0e:9a:00: 60:a8:22:0d:3b:ad:8c:78:83:9c:70:06:68:6f:97:fe:da:14: 28:ee:5b:c5:c3:69:66:bc:4f:c4:7a:3f:a8:77:00:b8:79:9f: 74:6f:08:a9:74:2a:72:4c:ac:55:b6:aa:48:3d:1e:0f:60:04: 8f:73:68:fb:47:78:0c:3f:1a:cb:2d:e9:4a:1b:29:a1:62:32: 5c:53:b6:9a:e8:75:c5:ba:12:ad:dd:98:f6:25:21:7b:4a:dd: 26:97:7f:8d:89:d1:ed:32:6d:fb:f2:31:45:be:26:26:fd:fb: 56:3e:41:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzO+41C8Os1cMdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk NTIyMjZjNWItY2VkZS00NjQyLThiZjEtMjVjN2I3MGJkOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhRb/GnPrXNiqndx5mXcZrOaQteXT759bfuP hEgo7EPlI1tUStK0LtSqY7L4lfrnsseQCteBaXOoGj6rlCGI0YlfCMJV0sdLT/OY n9nbVXFXkA00kYbvR9YJg26lyuEliiVjvoSZLqKbPs0aBFpqF8pm0B8vQSIkEapW pY8ehnV1QNof2d8ZHGKqvUb3ZEQSdwVemeTPcVPV4KcokAfdQ3YdQBONWqjyU7Zy yao/+a0mzPJzR8vz9DyvWQM6yTeMKSaJeOF8H83UCaPXxiiFypku9gL6Qzj3niku IVRzbk7ApcxfUgmdVz3hmYFHGRkZpBApimL6g1js0VMFQyzlXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZv1Kz8L7DAHvDCnD4CeK3LSzuPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZDBkNzZjMWItYTNmMS0z NDI0LTlhZDgtMWFkZmYyY2Q5Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0exIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmegwy9rHYgmggnH7k7BzY05gtedaSk6Ve31TR3SWnD1nqNOgGe05Gc 24lNoyeQFM64T9RzHQvMIY41XJoRVWzG5Q/gNNoEr5aWvc5c5d6Rggctfu1XVxdO 4F7feOwVLsRazgoNxvzRxOhvFeTflZCXurnT1PcbdRh/jyy1LFRzOkRBHYMBoeDQ XUoQ+Q6aAGCoIg07rYx4g5xwBmhvl/7aFCjuW8XDaWa8T8R6P6h3ALh5n3RvCKl0 KnJMrFW2qkg9Hg9gBI9zaPtHeAw/Gsst6UobKaFiMlxTtprodcW6Eq3dmPYlIXtK 3SaXf42J0e0ybfvyMUW+Jib9+1Y+QfE= -----END CERTIFICATE-----Generated at Sun Sep 20 21:59:22 2026 by rpki-client