$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/8cfcb8e1-8f43-3893-9d33-144e0e7e607c.roa File: 8cfcb8e1-8f43-3893-9d33-144e0e7e607c.roa (raw, json) Hash identifier: bh41cC4eLCgULyq2+TGk8Pzk8vI+GfxvgD0bxx5SoMc= Subject key identifier: 06:75:9A:12:E2:E5:F8:52:7A:73:73:73:94:9D:B5:44:93:CD:7A:F3 Certificate issuer: /CN=329c727b-a867-426a-ad3d-167aed3107dd Certificate serial: 010D0C9F4328584F15CCEAB04318E5B758D26900 Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/8cfcb8e1-8f43-3893-9d33-144e0e7e607c.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 6327 IP address blocks: 24.76.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:ea:b0:43:18:e5:b7:58:d2:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=ffb71dec-57c3-477e-963f-c3496d482778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c2:df:9e:4d:5f:80:99:ab:3c:38:c6:cd:a5: d0:c6:b2:7c:ad:94:9f:cc:ac:4d:50:9a:3a:c5:38: c7:f4:e5:a9:4e:ac:9b:07:d5:ae:78:e5:f1:ba:e5: e6:f3:5c:ff:bc:e8:0d:cd:98:08:9d:04:0f:6c:eb: c6:c3:e2:56:46:f8:b9:0c:4c:b7:8c:02:56:a2:42: 00:59:c0:92:e1:26:b9:c9:0b:be:10:59:2d:9b:31: fe:5a:3a:5a:7b:56:77:6f:d0:04:c5:d7:63:55:f2: 66:b6:92:4c:42:dd:76:47:bf:70:5f:38:d4:b0:16: 0a:a9:7b:b0:d2:b9:01:4a:77:0b:2d:f1:f6:8b:9c: 5b:2b:7e:d2:51:e5:35:73:c8:6e:c5:0a:21:01:32: 8d:89:cf:05:dc:98:a3:41:19:3e:b1:5f:78:9b:3f: ee:a1:c4:2b:f9:6c:c0:1b:d0:ec:c2:75:1d:2d:45: 2a:a2:28:73:61:40:91:09:c0:ac:78:7b:e6:99:19: 9b:62:7b:98:d4:9a:39:76:96:5e:b9:67:b5:cb:ec: d1:e6:b1:89:97:f5:eb:64:dd:21:9b:16:24:b1:82: f7:06:70:14:7d:df:f1:b4:d3:96:8c:a3:35:7f:33: ff:dd:32:0e:9b:8b:e0:ed:84:ec:5a:e6:b3:94:e7: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:75:9A:12:E2:E5:F8:52:7A:73:73:73:94:9D:B5:44:93:CD:7A:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/8cfcb8e1-8f43-3893-9d33-144e0e7e607c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl X509v3 Authority Key Identifier: keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer sbgp-ipAddrBlock: critical IPv4: 24.76.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:1f:8d:93:39:63:db:45:bc:e2:e0:ec:43:a3:9b:fe:ab:a3: 0c:91:fb:b5:d4:4f:af:2d:dd:74:7d:82:ad:1b:e6:38:b9:e1: b5:ce:e6:27:03:2b:69:78:11:cb:1b:e1:19:28:81:d9:97:5e: ec:d8:a4:1a:38:55:47:e2:07:33:a9:a0:ce:1b:71:57:9c:33: 22:22:26:63:4e:08:f3:a4:16:72:f7:2c:c4:81:b9:da:af:2a: 94:05:fe:d0:ac:83:cb:8c:d6:7d:72:16:67:38:fd:ce:27:73: 74:15:aa:61:e7:b7:59:8c:34:76:ba:00:3e:a7:8e:87:af:06: b3:f0:e8:de:8a:5b:0a:ca:0e:2c:00:2e:64:68:49:69:94:76: 2a:a6:eb:69:a5:ae:f6:cf:59:ec:86:1a:e1:27:cd:45:ca:fe: 55:64:7b:e6:6a:59:ff:8d:cf:35:ab:bc:e3:69:94:fa:2a:60: 95:10:65:86:0c:ce:a3:4b:ca:e1:4d:41:ca:c8:08:c3:64:59: 72:2f:9c:d1:60:78:ca:52:c6:69:7a:22:5c:93:f5:a3:15:a2: 1f:2b:ee:5f:34:e0:66:be:95:8a:a1:84:d5:a6:e0:36:01:19: 81:58:0b:6d:7b:10:eb:52:69:55:2c:1b:0a:78:25:41:58:68: 8a:4d:4a:52 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8VzOqwQxjlt1jSaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI5YzcyN2ItYTg2Ny00MjZhLWFkM2QtMTY3YWVkMzEw N2RkMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk ZmZiNzFkZWMtNTdjMy00NzdlLTk2M2YtYzM0OTZkNDgyNzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcLfnk1fgJmrPDjGzaXQxrJ8rZSfzKxNUJo6 xTjH9OWpTqybB9WueOXxuuXm81z/vOgNzZgInQQPbOvGw+JWRvi5DEy3jAJWokIA WcCS4Sa5yQu+EFktmzH+Wjpae1Z3b9AExddjVfJmtpJMQt12R79wXzjUsBYKqXuw 0rkBSncLLfH2i5xbK37SUeU1c8huxQohATKNic8F3JijQRk+sV94mz/uocQr+WzA G9DswnUdLUUqoihzYUCRCcCseHvmmRmbYnuY1Jo5dpZeuWe1y+zR5rGJl/XrZN0h mxYksYL3BnAUfd/xtNOWjKM1fzP/3TIOm4vg7YTsWuazlOfcKwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAZ1mhLi5fhSenNzc5SdtUSTzXrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjlj NzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdhZWQzMTA3ZGQvOGNmY2I4ZTEtOGY0My0z ODkzLTlkMzMtMTQ0ZTBlN2U2MDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzI5YzcyN2ItYTg2Ny00MjZhLWFk M2QtMTY3YWVkMzEwN2RkLzMyOWM3MjdiLWE4NjctNDI2YS1hZDNkLTE2N2FlZDMx MDdkZC5jcmwwHwYDVR0jBBgwFoAUPZZSNdHOoxLv1MM8HGrn4fAf9SIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjljNzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdh ZWQzMTA3ZGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCGEwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABx+Nkzlj20W84uDsQ6Ob/qujDJH7tdRPry3ddH2CrRvmOLnhtc7mJwMr aXgRyxvhGSiB2Zde7NikGjhVR+IHM6mgzhtxV5wzIiImY04I86QWcvcsxIG52q8q lAX+0KyDy4zWfXIWZzj9zidzdBWqYee3WYw0droAPqeOh68Gs/Do3opbCsoOLAAu ZGhJaZR2KqbraaWu9s9Z7IYa4SfNRcr+VWR75mpZ/43PNau842mU+ipglRBlhgzO o0vK4U1BysgIw2RZci+c0WB4ylLGaXoiXJP1oxWiHyvuXzTgZr6ViqGE1abgNgEZ gVgLbXsQ61JpVSwbCnglQVhoik1KUg== -----END CERTIFICATE-----Generated at Mon Sep 21 11:53:02 2026 by rpki-client