$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e595a06b-114f-37f3-ba1e-7e0ad6452aac.roa File: e595a06b-114f-37f3-ba1e-7e0ad6452aac.roa (raw, json) Hash identifier: ZfKeMNMETPYxJ2+vY9nv4kcQDP2gJ5DNbm5lha/VVmA= Subject key identifier: 78:3E:04:B3:52:53:17:FA:A1:81:DC:3A:92:59:EA:93:0A:78:40:12 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F3052627A5F924DA4F75D0460 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e595a06b-114f-37f3-ba1e-7e0ad6452aac.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 11404 IP address blocks: 209.34.128.0/19 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:62:7a:5f:92:4d:a4:f7:5d:04:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=ee9a5667-e157-40d3-a2b7-e94693996bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:df:c0:ad:e5:65:8b:05:29:43:5e:6b:4b: f0:ac:29:40:e1:2b:37:e1:ad:f4:87:7f:87:f2:a7: 79:cc:0f:5b:93:d0:7b:22:e9:59:5d:c5:af:79:09: 19:52:56:d8:85:27:70:01:66:9a:ec:cd:ca:8c:ed: 6c:4c:cd:dd:23:bf:0c:4f:3d:00:f8:03:09:cf:65: 95:76:04:30:40:7d:9f:c5:3b:04:9b:de:f0:f7:1a: ec:7b:51:da:c0:67:97:f1:e9:cb:2d:ec:0d:db:29: b9:44:e2:cb:fe:ee:3e:f2:5d:6e:ca:08:51:83:4a: 15:ab:ac:0e:45:79:de:a2:6f:b1:93:af:de:ce:91: 58:e9:49:a7:19:54:5e:25:e1:1b:23:a4:5d:eb:14: 58:83:8c:45:24:a9:43:42:79:62:2a:37:89:e5:85: 98:f2:16:93:78:a9:7e:7b:8e:99:be:af:1c:4e:e3: 10:b8:e5:30:3c:52:0f:85:7e:d9:e3:c1:3c:2a:c9: 3b:81:d8:3f:1f:d7:f9:b4:40:2d:92:c1:54:a4:67: a7:56:cf:f3:e4:e4:3b:f1:bd:3a:ce:d7:4b:d8:ca: 34:3e:b1:3d:66:21:8a:d4:83:a6:48:6a:2c:7a:56: 8a:6b:6e:73:2a:09:28:e1:fa:e8:6b:80:e3:35:77: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3E:04:B3:52:53:17:FA:A1:81:DC:3A:92:59:EA:93:0A:78:40:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e595a06b-114f-37f3-ba1e-7e0ad6452aac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 209.34.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c0:da:e3:30:86:98:1c:5f:62:3b:22:10:24:ed:4a:e1:36: 8f:9e:b0:76:8b:34:3c:dd:87:a2:c8:5c:06:69:6c:28:4f:11: 24:b4:ae:e3:7d:df:96:04:89:6d:df:e9:75:6b:cf:1b:44:3c: 97:cd:46:ed:26:5f:2c:f5:9e:c0:04:6b:f3:69:f1:68:06:7d: 1b:25:86:cc:76:2b:26:41:a3:45:28:ea:85:6d:39:69:b2:08: bc:c9:cc:25:ff:29:1b:bf:34:7b:8c:55:72:f6:6d:8c:8e:c7: 14:44:d7:0c:18:72:66:32:82:3d:c0:01:5e:68:e9:85:7f:bd: e1:04:8c:a2:bd:39:62:6d:ae:60:17:65:0c:b8:10:32:7f:98: d0:6e:84:7c:50:e5:d0:bc:26:fd:71:95:86:f6:22:c7:4a:d6: 6e:34:a6:cf:9a:e9:bb:a8:b9:62:ba:d5:3c:46:47:4f:74:9c: a0:4d:53:c4:ee:a1:73:eb:85:13:e2:9a:f2:9e:37:da:7c:95: b6:8e:3b:11:b0:ab:b9:f7:19:7d:48:e5:9f:e9:86:46:c1:93: dc:e4:2c:ed:ad:e3:23:85:70:72:cc:59:a5:d5:f3:be:05:da: eb:00:a6:e0:01:09:22:96:54:3f:8a:79:31:1b:54:13:a3:d0: ea:1a:56:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUmJ6X5JNpPddBGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZWU5YTU2NjctZTE1Ny00MGQzLWEyYjctZTk0NjkzOTk2YmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1jfwK3lZYsFKUNea0vwrClA4Ss34a30h3+H 8qd5zA9bk9B7IulZXcWveQkZUlbYhSdwAWaa7M3KjO1sTM3dI78MTz0A+AMJz2WV dgQwQH2fxTsEm97w9xrse1HawGeX8enLLewN2ym5ROLL/u4+8l1uyghRg0oVq6wO RXneom+xk6/ezpFY6UmnGVReJeEbI6Rd6xRYg4xFJKlDQnliKjeJ5YWY8haTeKl+ e46Zvq8cTuMQuOUwPFIPhX7Z48E8Ksk7gdg/H9f5tEAtksFUpGenVs/z5OQ78b06 ztdL2Mo0PrE9ZiGK1IOmSGoselaKa25zKgko4froa4DjNXdRnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHg+BLNSUxf6oYHcOpJZ6pMKeEASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZTU5NWEwNmItMTE0Zi0z N2YzLWJhMWUtN2UwYWQ2NDUyYWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0SKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7A2uMwhpgcX2I7IhAk7UrhNo+esHaLNDzdh6LIXAZpbChPESS0ruN9 35YEiW3f6XVrzxtEPJfNRu0mXyz1nsAEa/Np8WgGfRslhsx2KyZBo0Uo6oVtOWmy CLzJzCX/KRu/NHuMVXL2bYyOxxRE1wwYcmYygj3AAV5o6YV/veEEjKK9OWJtrmAX ZQy4EDJ/mNBuhHxQ5dC8Jv1xlYb2IsdK1m40ps+a6buouWK61TxGR090nKBNU8Tu oXPrhRPimvKeN9p8lbaOOxGwq7n3GX1I5Z/phkbBk9zkLO2t4yOFcHLMWaXV874F 2usApuABCSKWVD+KeTEbVBOj0OoaVgA= -----END CERTIFICATE-----Generated at Tue Sep 22 20:22:32 2026 by rpki-client