$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de76f524-7b2e-4c4c-84e3-964bf4782770/99d34b1b-93c2-3e87-a906-ef5d909f8a30.roa File: 99d34b1b-93c2-3e87-a906-ef5d909f8a30.roa (raw, json) Hash identifier: M/Q4DPWu3vtHuHtgdUP/8QHcJ8lGD5rZIUI0nvxJHC0= Subject key identifier: A0:E1:D6:34:2F:5E:B6:F1:86:47:55:18:4D:49:F6:B5:7D:F9:C9:97 Certificate issuer: /CN=de76f524-7b2e-4c4c-84e3-964bf4782770 Certificate serial: 010D0C9F4328584F1E2CF690801569E7076B4C80 Authority key identifier: 05:3C:4B:52:B4:6D:5F:9B:E0:77:E0:FD:AF:14:A0:10:61:43:82:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de76f524-7b2e-4c4c-84e3-964bf4782770.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de76f524-7b2e-4c4c-84e3-964bf4782770/99d34b1b-93c2-3e87-a906-ef5d909f8a30.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 10753 IP address blocks: 167.94.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de76f524-7b2e-4c4c-84e3-964bf4782770/de76f524-7b2e-4c4c-84e3-964bf4782770.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de76f524-7b2e-4c4c-84e3-964bf4782770/de76f524-7b2e-4c4c-84e3-964bf4782770.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de76f524-7b2e-4c4c-84e3-964bf4782770.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:f6:90:80:15:69:e7:07:6b:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de76f524-7b2e-4c4c-84e3-964bf4782770 Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=874ec45c-be30-4de4-8d15-96dc2850c2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:0d:a2:bd:57:d0:8a:9c:ae:10:2c:c1:33: a0:ba:75:7c:05:fd:f6:b2:90:36:27:28:46:c8:25: 20:ca:a8:86:28:b0:b5:29:1c:67:f5:36:29:78:f7: a4:9f:ed:67:f5:63:d6:5e:9a:88:f2:fb:df:7b:01: d8:09:8c:2a:c3:f5:dd:fc:ee:c2:7b:26:86:03:07: 2a:25:ed:e0:5b:2f:dc:ba:9d:5c:ed:95:fc:f5:b0: a5:6c:92:1b:2b:21:fb:16:92:03:4c:ef:7d:63:c3: 21:ac:5f:7b:64:ee:ac:16:a3:4e:32:4b:f7:1c:c0: 23:7a:87:bd:6c:1c:6e:5c:bc:ab:e3:3d:c1:49:57: 97:b7:69:9f:cb:05:69:f9:d4:c4:a1:6f:48:fd:c3: 0b:ed:03:b6:01:4b:92:8b:84:a3:5c:b2:04:9b:ee: 8b:79:34:10:90:d5:70:bb:1a:29:e5:06:51:25:d6: 2f:8e:a0:dd:78:81:82:fc:ed:26:97:2e:fa:fa:2d: 5e:71:1a:81:c7:aa:3d:c5:63:67:97:5d:62:40:66: 3a:b4:f0:23:41:6b:ea:87:51:d4:a8:f6:42:06:aa: 4f:da:9b:f8:9a:18:56:cf:67:af:b9:e4:41:db:58: fb:68:64:40:ec:b3:47:98:10:35:6b:9a:20:1a:3b: b9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E1:D6:34:2F:5E:B6:F1:86:47:55:18:4D:49:F6:B5:7D:F9:C9:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de76f524-7b2e-4c4c-84e3-964bf4782770/99d34b1b-93c2-3e87-a906-ef5d909f8a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de76f524-7b2e-4c4c-84e3-964bf4782770/de76f524-7b2e-4c4c-84e3-964bf4782770.crl X509v3 Authority Key Identifier: keyid:05:3C:4B:52:B4:6D:5F:9B:E0:77:E0:FD:AF:14:A0:10:61:43:82:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de76f524-7b2e-4c4c-84e3-964bf4782770.cer sbgp-ipAddrBlock: critical IPv4: 167.94.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:68:c4:ba:22:87:88:de:c8:6e:f2:27:e9:bd:33:22:bb:4d: 23:21:13:2e:b4:cc:0f:0a:c1:03:52:79:be:bd:e0:7f:8b:36: 6a:58:2c:13:01:bc:99:f9:49:0e:fa:4f:84:34:6d:bc:b9:3d: a4:c8:5f:40:5e:d3:5f:ff:a7:bb:e7:06:ca:78:0d:03:3b:d1: ee:b2:24:bd:c6:0d:e9:a8:5f:d1:32:3e:e6:3f:60:61:a8:55: 1a:a1:6e:7f:6e:e1:1f:2a:27:42:63:13:09:c9:6d:d2:b9:d6: 69:3c:bd:ed:d2:7b:5c:32:a0:50:2c:36:e1:3d:87:a1:63:68: 5d:b9:bc:d7:9e:82:c4:16:d9:62:60:8d:ee:b6:34:95:a4:a3: 25:62:b6:3f:2b:b1:11:c8:b3:f5:1c:db:26:c8:bf:56:0e:53: 37:14:d9:81:99:45:bd:f6:c4:f7:ae:09:bb:b2:42:36:64:ba: fc:92:76:ea:6d:a3:13:0a:c3:1e:a0:97:e5:c2:8c:c0:c8:0f: 46:bb:8a:5a:31:88:d1:5f:3c:59:e2:47:13:ec:7b:d4:d7:a8: d2:bb:c6:64:a5:0a:76:5f:4c:55:c5:0a:0d:b6:fc:6f:93:e9: 10:84:f0:c3:ef:92:a2:aa:f3:d3:0c:42:08:e4:1c:03:da:85: df:c2:43:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPaQgBVp5wdrTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU3NmY1MjQtN2IyZS00YzRjLTg0ZTMtOTY0YmY0Nzgy NzcwMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk ODc0ZWM0NWMtYmUzMC00ZGU0LThkMTUtOTZkYzI4NTBjMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQsNor1X0IqcrhAswTOgunV8Bf32spA2JyhG yCUgyqiGKLC1KRxn9TYpePekn+1n9WPWXpqI8vvfewHYCYwqw/Xd/O7CeyaGAwcq Je3gWy/cup1c7ZX89bClbJIbKyH7FpIDTO99Y8MhrF97ZO6sFqNOMkv3HMAjeoe9 bBxuXLyr4z3BSVeXt2mfywVp+dTEoW9I/cML7QO2AUuSi4SjXLIEm+6LeTQQkNVw uxop5QZRJdYvjqDdeIGC/O0mly76+i1ecRqBx6o9xWNnl11iQGY6tPAjQWvqh1HU qPZCBqpP2pv4mhhWz2evueRB21j7aGRA7LNHmBA1a5ogGju5mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDh1jQvXrbxhkdVGE1J9rV9+cmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZTc2 ZjUyNC03YjJlLTRjNGMtODRlMy05NjRiZjQ3ODI3NzAvOTlkMzRiMWItOTNjMi0z ZTg3LWE5MDYtZWY1ZDkwOWY4YTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGU3NmY1MjQtN2IyZS00YzRjLTg0 ZTMtOTY0YmY0NzgyNzcwL2RlNzZmNTI0LTdiMmUtNGM0Yy04NGUzLTk2NGJmNDc4 Mjc3MC5jcmwwHwYDVR0jBBgwFoAUBTxLUrRtX5vgd+D9rxSgEGFDgvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZTc2ZjUyNC03YjJlLTRjNGMtODRlMy05NjRi ZjQ3ODI3NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp171MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5oxLoih4jeyG7yJ+m9MyK7TSMhEy60zA8KwQNSeb694H+LNmpYLBMB vJn5SQ76T4Q0bby5PaTIX0Be01//p7vnBsp4DQM70e6yJL3GDemoX9EyPuY/YGGo VRqhbn9u4R8qJ0JjEwnJbdK51mk8ve3Se1wyoFAsNuE9h6FjaF25vNeegsQW2WJg je62NJWkoyVitj8rsRHIs/Uc2ybIv1YOUzcU2YGZRb32xPeuCbuyQjZkuvySdupt oxMKwx6gl+XCjMDID0a7iloxiNFfPFniRxPse9TXqNK7xmSlCnZfTFXFCg22/G+T 6RCE8MPvkqKq89MMQgjkHAPahd/CQww= -----END CERTIFICATE-----Generated at Sun Sep 20 17:47:23 2026 by rpki-client