$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/da990a35-70e2-3f3c-bb08-6231885c6343.roa File: da990a35-70e2-3f3c-bb08-6231885c6343.roa (raw, json) Hash identifier: EZrMe3mLuxVtf+8QrmYiTGVB2fy1ovh0INcaC+itH7M= Subject key identifier: 27:99:3F:38:E0:04:98:A1:BB:3E:D3:97:71:02:94:B6:88:24:AB:50 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F3052638E53D977C08C3FB500 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/da990a35-70e2-3f3c-bb08-6231885c6343.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 53472 IP address blocks: 76.191.73.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:63:8e:53:d9:77:c0:8c:3f:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=5746a2c5-ea7c-4d8b-bc61-0c709f0f4205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:bf:18:90:5a:ec:fa:60:12:29:70:5f:af: e9:62:79:99:52:cc:33:08:10:bf:0e:6c:dc:9f:6c: a4:b9:07:22:0a:6f:58:83:e8:d3:c8:45:98:e4:ef: fe:d1:23:08:cf:86:c1:4a:f0:23:99:91:fb:4a:2a: 44:ae:53:38:12:c1:e2:e5:e5:a8:6e:1e:59:2a:a9: 48:9b:b5:93:43:85:88:ca:5f:be:e8:65:8a:70:bd: b4:33:d5:bc:24:bf:ca:2a:1e:e9:47:c1:8e:af:e4: 47:ff:26:79:75:a7:22:ee:2e:dd:7e:29:e9:3c:eb: 6f:8e:9f:dd:8b:9d:5f:da:bf:55:20:53:0a:fc:93: bb:1f:00:f1:b2:37:46:22:47:e1:fd:2a:d7:ca:c5: b4:3c:d2:51:16:13:63:ce:85:3c:53:c4:15:63:ae: a3:94:e1:36:56:0b:fb:6f:59:29:c6:77:26:60:0e: 40:93:c4:74:88:66:75:65:1f:f5:d7:4e:83:61:57: 1e:d1:c7:f2:65:de:cf:20:b8:5b:9c:d3:96:01:30: e4:00:9a:63:94:4b:25:fc:5b:21:83:f1:ec:8b:5a: 16:17:7e:9a:91:55:6b:6a:ea:03:4e:9a:27:36:ff: c1:01:f6:5d:eb:62:26:cf:28:c4:81:03:08:e8:29: 54:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:99:3F:38:E0:04:98:A1:BB:3E:D3:97:71:02:94:B6:88:24:AB:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/da990a35-70e2-3f3c-bb08-6231885c6343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 76.191.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a6:e0:43:ca:06:b7:94:e7:e2:c7:88:46:8c:77:1e:a0:5b: b9:ce:9e:ed:13:05:db:6c:c5:da:07:e0:6b:9c:22:89:2e:cb: 61:60:cf:6f:cb:ab:f2:de:a3:11:ea:dc:07:dd:54:f9:54:52: b2:c3:74:b5:96:5d:77:66:91:a5:f2:0a:ac:89:4d:ae:81:5f: 0a:77:14:62:05:14:8c:fe:d0:72:de:d3:91:4b:c2:c3:ad:c6: ec:f3:c1:e5:f6:31:dd:81:8a:43:92:6b:fe:1c:20:43:7e:82: e6:f1:6e:f7:b9:4c:26:b1:0e:7f:cf:1f:89:da:12:c4:16:49: 63:3e:4d:44:8f:9c:81:26:94:f4:8e:74:d0:77:45:0f:0e:0b: ed:29:1c:cc:b5:8f:be:37:98:00:bc:3e:78:41:1a:be:86:78: be:69:14:c8:bf:0b:1f:6b:66:71:55:24:2b:c5:f4:47:37:9d: ba:fb:72:2f:e5:2c:f2:0a:4c:08:15:af:bf:8f:97:87:1a:2f: d9:09:e4:74:e8:7e:75:1a:6b:10:7f:df:91:0e:2b:34:78:be: 7c:ca:a4:44:11:55:8e:7a:be:a4:84:5b:ca:2b:77:20:46:c2: a9:c2:dd:85:2d:b1:86:b2:55:86:c9:74:57:1e:17:3c:d9:43: ec:1b:c6:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUmOOU9l3wIw/tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk NTc0NmEyYzUtZWE3Yy00ZDhiLWJjNjEtMGM3MDlmMGY0MjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFe/GJBa7PpgEilwX6/pYnmZUswzCBC/Dmzc n2ykuQciCm9Yg+jTyEWY5O/+0SMIz4bBSvAjmZH7SipErlM4EsHi5eWobh5ZKqlI m7WTQ4WIyl++6GWKcL20M9W8JL/KKh7pR8GOr+RH/yZ5daci7i7dfinpPOtvjp/d i51f2r9VIFMK/JO7HwDxsjdGIkfh/SrXysW0PNJRFhNjzoU8U8QVY66jlOE2Vgv7 b1kpxncmYA5Ak8R0iGZ1ZR/1106DYVce0cfyZd7PILhbnNOWATDkAJpjlEsl/Fsh g/Hsi1oWF36akVVrauoDTponNv/BAfZd62ImzyjEgQMI6ClUbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeZPzjgBJihuz7Tl3EClLaIJKtQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZGE5OTBhMzUtNzBlMi0z ZjNjLWJiMDgtNjIzMTg4NWM2MzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATL9JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWm4EPKBreU5+LHiEaMdx6gW7nOnu0TBdtsxdoH4GucIokuy2Fgz2/L q/LeoxHq3AfdVPlUUrLDdLWWXXdmkaXyCqyJTa6BXwp3FGIFFIz+0HLe05FLwsOt xuzzweX2Md2BikOSa/4cIEN+gubxbve5TCaxDn/PH4naEsQWSWM+TUSPnIEmlPSO dNB3RQ8OC+0pHMy1j743mAC8PnhBGr6GeL5pFMi/Cx9rZnFVJCvF9Ec3nbr7ci/l LPIKTAgVr7+Pl4caL9kJ5HTofnUaaxB/35EOKzR4vnzKpEQRVY56vqSEW8ordyBG wqnC3YUtsYayVYbJdFceFzzZQ+wbxgo= -----END CERTIFICATE-----Generated at Tue Sep 22 08:59:44 2026 by rpki-client