$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3dffc443-44e3-38a4-b7c1-d886a3339950.roa File: 3dffc443-44e3-38a4-b7c1-d886a3339950.roa (raw, json) Hash identifier: N9AQRXstCvskCNP8kIznbw/+lO5j0WOuR2dVcnmXO+g= Subject key identifier: 21:D2:28:1B:B6:F7:70:D1:26:FD:76:1B:DE:E2:B7:31:FF:86:E7:55 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584F30528059D0ED69C574070C00 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3dffc443-44e3-38a4-b7c1-d886a3339950.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 33307 IP address blocks: 172.84.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:80:59:d0:ed:69:c5:74:07:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=8a4d405a-1289-45e7-ab44-3490d44932bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:2e:87:5e:57:05:a4:80:d4:8c:9d:6f:04: fb:5b:b1:f8:b6:e8:37:13:db:6a:4a:06:e4:e1:4a: 24:20:b8:09:18:47:0f:65:97:2c:89:6a:66:f0:ff: ff:4e:9c:2d:02:c7:d3:6c:a5:d5:15:33:2e:84:e6: bd:ba:c9:cc:72:87:3a:56:dc:13:8d:a3:ec:6f:15: 08:39:d4:7e:46:51:6c:9b:2e:db:ee:1d:cb:db:65: 3a:95:ea:6e:27:0b:03:f1:64:0b:7b:47:78:46:ff: 6a:32:a9:d3:10:e9:6a:a7:5a:24:50:bd:49:2b:1a: 5b:21:85:66:6e:0a:37:19:e6:02:b4:89:4f:29:fd: 56:aa:e2:28:aa:13:54:bc:70:c3:c7:99:0b:10:e1: 2c:6b:3a:64:e7:93:40:07:9a:8f:4a:55:da:a8:07: 2d:f3:62:d4:f4:66:3a:26:85:ac:89:e5:f8:f9:5f: b5:f9:e9:83:fe:12:34:eb:a6:e5:ba:f1:f8:04:93: 91:ae:dd:e2:ec:85:1b:c1:d4:e2:6d:7c:26:28:5c: 55:d0:a7:4c:5c:74:f6:b6:34:8b:78:a8:73:f8:92: 07:2f:7b:30:b7:c6:6e:d4:f0:84:42:77:71:9a:cc: 43:7a:3b:a6:1c:ce:da:13:1f:b1:60:08:06:03:65: 5e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D2:28:1B:B6:F7:70:D1:26:FD:76:1B:DE:E2:B7:31:FF:86:E7:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3dffc443-44e3-38a4-b7c1-d886a3339950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:88:b8:d6:33:3e:08:34:c5:72:47:f6:a4:45:83:fa:20:19: 86:c4:d6:d9:7a:f4:e4:b7:cb:69:1f:50:63:fb:b0:c1:d4:16: 77:64:39:c4:16:1f:d8:ec:74:64:fb:bb:f4:04:12:0f:2c:e9: e2:ca:d5:e6:5f:c3:da:11:a3:1b:75:80:fa:66:5c:7c:88:99: 3e:35:3a:b1:63:65:f6:2d:70:7f:f3:c2:a8:f5:ef:d7:8b:ca: 85:79:7b:03:e4:8c:3e:dc:9b:60:05:a8:6f:10:a2:d5:e4:25: 49:3c:f0:dd:ba:2f:3e:4e:c0:87:72:2b:94:1e:4d:22:4e:a5: fc:5a:15:4d:10:2b:ae:68:19:e0:cc:9d:d7:5c:be:c5:1f:5f: f2:5f:04:de:6b:bc:43:9f:74:06:78:9b:9e:9b:ad:d4:83:0e: 3f:71:ce:5e:03:5a:66:32:0a:4c:0d:6f:da:d5:2f:d4:22:96: 1b:43:1c:db:63:dd:80:43:a9:59:c5:55:f2:de:88:6a:51:36: 15:ac:85:ea:2e:83:87:4a:33:ae:8f:e6:51:1f:b1:df:02:76: a7:ac:74:a2:e9:2b:74:96:75:57:6e:0f:b0:67:8d:16:64:06: 93:e8:5e:ff:c1:26:19:09:9d:07:93:f5:92:dc:95:aa:b7:6a: d8:b7:e0:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUoBZ0O1pxXQHDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk OGE0ZDQwNWEtMTI4OS00NWU3LWFiNDQtMzQ5MGQ0NDkzMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhIuh15XBaSA1IydbwT7W7H4tug3E9tqSgbk 4UokILgJGEcPZZcsiWpm8P//TpwtAsfTbKXVFTMuhOa9usnMcoc6VtwTjaPsbxUI OdR+RlFsmy7b7h3L22U6lepuJwsD8WQLe0d4Rv9qMqnTEOlqp1okUL1JKxpbIYVm bgo3GeYCtIlPKf1WquIoqhNUvHDDx5kLEOEsazpk55NAB5qPSlXaqAct82LU9GY6 JoWsieX4+V+1+emD/hI066bluvH4BJORrt3i7IUbwdTibXwmKFxV0KdMXHT2tjSL eKhz+JIHL3swt8Zu1PCEQndxmsxDejumHM7aEx+xYAgGA2Ve5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHSKBu293DRJv12G97itzH/hudVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvM2RmZmM0NDMtNDRlMy0z OGE0LWI3YzEtZDg4NmEzMzM5OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaIuNYzPgg0xXJH9qRFg/ogGYbE1tl69OS3y2kfUGP7sMHUFndkOcQW H9jsdGT7u/QEEg8s6eLK1eZfw9oRoxt1gPpmXHyImT41OrFjZfYtcH/zwqj179eL yoV5ewPkjD7cm2AFqG8QotXkJUk88N26Lz5OwIdyK5QeTSJOpfxaFU0QK65oGeDM nddcvsUfX/JfBN5rvEOfdAZ4m56brdSDDj9xzl4DWmYyCkwNb9rVL9QilhtDHNtj 3YBDqVnFVfLeiGpRNhWsheoug4dKM66P5lEfsd8CdqesdKLpK3SWdVduD7BnjRZk BpPoXv/BJhkJnQeT9ZLclaq3ati34LM= -----END CERTIFICATE-----Generated at Sat Oct 10 14:43:14 2026 by rpki-client