$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa File: 70876b56-c403-3345-8194-f6fcf917a625.roa (raw, json) Hash identifier: A1mtbZ4L9OO269jf54WTeFVxl95TM/UC7UaHvqZ7pD0= Subject key identifier: BA:1D:B0:7D:2F:43:D8:92:71:99:51:0C:CF:40:5D:D2:3D:35:F9:30 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F4328584F9A6862995942900129141100 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 22115 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:62:99:59:42:90:01:29:14:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=2a3ff318-3271-47c2-ac88-2f0afe957f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9e:24:87:ea:ab:8e:6a:e0:06:9b:aa:de:be: 6d:cf:40:89:77:1d:89:7b:28:90:a3:82:15:4b:97: 8c:37:b7:57:45:6c:19:09:a5:05:3a:f1:14:55:ae: 90:41:41:64:da:41:a5:13:1f:0c:78:bd:26:a9:ec: 6c:d5:8a:ba:d9:5a:87:40:a0:29:12:10:01:23:11: 9d:18:50:c8:e6:67:df:5c:20:77:18:7c:a1:dd:b2: bb:4b:83:31:3d:18:88:7a:77:af:4e:3f:e1:8e:33: 34:62:a9:0b:13:63:02:db:78:35:46:c3:51:62:a5: 31:94:b8:25:c4:c4:ce:04:12:61:a8:53:fa:91:e3: dc:0b:0f:66:e7:0f:73:73:13:6b:a9:e8:96:db:45: 6f:6b:5a:55:1d:cb:02:93:c0:d3:3d:ef:f1:f6:b3: 50:50:f3:c7:cc:18:e8:cb:49:69:e6:e3:cd:5d:e4: 5a:ac:e9:f5:58:5c:04:f8:5d:0a:96:68:de:92:b1: 2d:c5:47:32:7c:65:a2:5c:7f:ff:67:33:a8:d2:13: 0e:7a:ac:cb:48:0f:a7:2a:1f:39:86:94:04:c3:68: a4:b3:b9:d2:c6:4c:fb:4a:5e:15:d4:38:7d:a8:d6: f9:74:da:e8:7a:df:63:68:c6:2b:0f:61:9c:ee:02: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1D:B0:7D:2F:43:D8:92:71:99:51:0C:CF:40:5D:D2:3D:35:F9:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d4:0f:29:2f:ae:d4:e7:46:25:3d:15:13:2d:e2:bb:3a:27: 62:e2:d6:aa:63:11:a4:12:21:06:4a:1b:d9:e8:39:d4:48:35: fc:b4:2c:51:0b:b1:f4:a5:65:ef:1a:9d:1d:d4:ca:17:76:4a: 0b:b3:21:7b:d9:39:87:b8:bd:7a:29:e9:cb:e4:fc:01:4f:29: 0e:ba:13:d6:fb:a0:e8:35:44:65:fe:ec:90:e6:05:92:c1:8b: f4:fc:7f:ae:fb:b5:06:6f:e7:75:ff:42:56:47:cc:e7:5e:7c: c9:92:ed:aa:6d:87:ea:0e:4e:db:55:e0:65:2d:b3:fd:a7:79: 11:59:d2:3a:12:a4:f3:a7:ab:e1:d8:10:73:9f:8c:95:cb:ad: e3:01:55:b8:0c:e7:ab:6c:e2:ce:ce:79:56:2e:d8:3a:33:37: ef:f1:11:1b:a2:76:c6:00:dc:a8:e1:43:4c:43:06:55:3c:09: a0:3f:97:d1:f4:19:c0:be:5d:b6:54:91:0a:73:53:86:a7:5b: 9a:19:e5:61:1c:6c:74:57:6c:12:9d:b6:25:cb:c5:b0:16:01: db:64:de:9f:e5:a2:97:07:85:61:73:d6:4c:b9:96:88:cb:64: 42:1f:45:47:9f:5c:96:2d:10:01:66:7b:fc:49:de:8a:73:b0: 92:06:b8:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaGKZWUKQASkUEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MmEzZmYzMTgtMzI3MS00N2MyLWFjODgtMmYwYWZlOTU3ZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk54kh+qrjmrgBpuq3r5tz0CJdx2JeyiQo4IV S5eMN7dXRWwZCaUFOvEUVa6QQUFk2kGlEx8MeL0mqexs1Yq62VqHQKApEhABIxGd GFDI5mffXCB3GHyh3bK7S4MxPRiIenevTj/hjjM0YqkLE2MC23g1RsNRYqUxlLgl xMTOBBJhqFP6kePcCw9m5w9zcxNrqeiW20Vva1pVHcsCk8DTPe/x9rNQUPPHzBjo y0lp5uPNXeRarOn1WFwE+F0KlmjekrEtxUcyfGWiXH//ZzOo0hMOeqzLSA+nKh85 hpQEw2iks7nSxkz7Sl4V1Dh9qNb5dNroet9jaMYrD2Gc7gIxJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLodsH0vQ9iScZlRDM9AXdI9NfkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvNzA4NzZiNTYtYzQwMy0z MzQ1LTgxOTQtZjZmY2Y5MTdhNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPUDykvrtTnRiU9FRMt4rs6J2Li1qpjEaQSIQZKG9noOdRINfy0LFEL sfSlZe8anR3Uyhd2SguzIXvZOYe4vXop6cvk/AFPKQ66E9b7oOg1RGX+7JDmBZLB i/T8f677tQZv53X/QlZHzOdefMmS7apth+oOTttV4GUts/2neRFZ0joSpPOnq+HY EHOfjJXLreMBVbgM56ts4s7OeVYu2DozN+/xERuidsYA3KjhQ0xDBlU8CaA/l9H0 GcC+XbZUkQpzU4anW5oZ5WEcbHRXbBKdtiXLxbAWAdtk3p/lopcHhWFz1ky5lojL ZEIfRUefXJYtEAFme/xJ3opzsJIGuBU= -----END CERTIFICATE-----Generated at Thu Oct 29 22:46:17 2026 by rpki-client