$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/3ae3f695-4b7a-301f-bd7d-eee4c95757de.roa File: 3ae3f695-4b7a-301f-bd7d-eee4c95757de.roa (raw, json) Hash identifier: piZnVg1Jm0IYF/CKDsXm2GAER4IC+/tk/l9cwp3g+ZQ= Subject key identifier: 07:E2:D4:3C:D9:F3:1A:EE:8E:2E:58:16:64:58:45:5F:E3:4D:37:65 Certificate issuer: /CN=6afd62dd-ec3c-44d7-93fe-81efca4b3dfe Certificate serial: 010D0C9F4328584F3E47C85C4EBA616D66A5C1C0 Authority key identifier: 5D:F2:5D:CA:E7:BA:C5:90:FD:1C:E8:E4:17:1E:55:E7:02:6E:E2:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/3ae3f695-4b7a-301f-bd7d-eee4c95757de.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 397809 IP address blocks: 72.10.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:c8:5c:4e:ba:61:6d:66:a5:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6afd62dd-ec3c-44d7-93fe-81efca4b3dfe Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=c088c1bc-dc57-4ab4-8332-0cb19441c345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5c:bc:f6:03:b6:63:18:d8:a9:d5:57:d0:b7: 58:fb:89:53:83:ca:67:01:d3:26:dc:59:88:3a:b9: 29:ef:19:56:aa:54:ef:f0:70:22:95:e8:12:d4:3d: 77:e6:b1:00:57:ec:84:f4:6b:ac:da:46:8e:8f:e0: ff:8f:9e:66:34:7f:72:4f:3b:ea:e8:05:cd:1a:fc: 16:c4:f0:c1:fc:ad:b4:ce:d3:d2:ac:31:be:a3:ad: 19:e9:a2:03:22:ef:64:d4:0a:88:c8:c9:48:88:89: f0:1b:2a:c6:0c:e7:80:6d:bb:57:ab:02:d7:ca:0e: 83:e4:12:50:23:4d:df:b9:37:7b:06:84:c9:96:30: d2:c8:67:74:c2:a1:ae:65:20:65:02:44:55:79:f7: 82:65:bf:03:8b:69:8b:e8:da:e0:d1:2b:f4:85:a3: 00:0c:11:e7:de:74:89:98:97:86:29:6b:98:76:5e: 5d:59:d1:42:5d:ae:a8:ec:ef:a9:68:9d:e7:ec:53: be:4c:94:ad:d3:cb:1e:d4:30:26:a3:a7:f3:37:dd: b3:2d:3c:c1:dc:33:7f:47:8b:dc:0c:90:09:17:31: 17:fe:2b:cb:5c:c8:3c:80:f9:64:f9:04:bf:dd:fe: 15:cb:97:7e:1a:16:8b:34:d7:64:09:40:22:07:9f: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E2:D4:3C:D9:F3:1A:EE:8E:2E:58:16:64:58:45:5F:E3:4D:37:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/3ae3f695-4b7a-301f-bd7d-eee4c95757de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.crl X509v3 Authority Key Identifier: keyid:5D:F2:5D:CA:E7:BA:C5:90:FD:1C:E8:E4:17:1E:55:E7:02:6E:E2:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.cer sbgp-ipAddrBlock: critical IPv4: 72.10.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:3e:5d:18:91:06:fc:b7:e0:50:17:09:da:71:d6:af:78:15: 13:6f:94:7d:46:e6:ab:64:2c:72:b8:4f:60:0e:e8:86:d7:24: a9:b8:23:5e:74:70:0d:3f:1e:33:40:fd:cb:2b:82:04:56:52: 7d:3e:08:09:9b:8a:96:5b:51:de:05:18:a1:28:d0:ab:a7:bf: cb:ac:3b:e7:62:19:3e:36:19:a9:1d:e8:19:a2:0b:9c:67:36: 56:d3:38:52:1b:78:ae:ad:ec:e4:28:88:cb:a0:5c:f9:b0:ea: 89:e1:c1:5e:74:f0:59:ca:1b:d9:1e:4a:cc:d6:ba:74:de:5b: f5:06:3f:4f:2c:4b:bd:c2:c7:1d:5b:8c:88:67:79:33:13:bd: 45:7b:fc:42:0a:2d:48:ba:12:6c:01:11:fc:2d:62:f1:9c:00: e1:25:6d:68:5c:dc:fc:41:5d:dd:b9:ac:b8:50:0b:af:4d:61: e5:df:45:b8:6c:77:7d:15:d9:2c:eb:86:21:ad:53:86:61:5e: 6a:aa:69:69:7b:d2:c6:0e:3e:06:a0:ef:4b:42:f5:bf:8f:58: 3e:98:88:d7:df:21:00:bb:74:33:b8:6c:8b:df:00:71:7a:9b: ac:0d:0e:42:22:eb:54:69:a6:a3:ba:e4:c2:d7:d9:13:4c:e6: de:86:d7:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R8hcTrphbWalwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFmZDYyZGQtZWMzYy00NGQ3LTkzZmUtODFlZmNhNGIz ZGZlMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YzA4OGMxYmMtZGM1Ny00YWI0LTgzMzItMGNiMTk0NDFjMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVy89gO2YxjYqdVX0LdY+4lTg8pnAdMm3FmI Orkp7xlWqlTv8HAilegS1D135rEAV+yE9Gus2kaOj+D/j55mNH9yTzvq6AXNGvwW xPDB/K20ztPSrDG+o60Z6aIDIu9k1AqIyMlIiInwGyrGDOeAbbtXqwLXyg6D5BJQ I03fuTd7BoTJljDSyGd0wqGuZSBlAkRVefeCZb8Di2mL6Nrg0Sv0haMADBHn3nSJ mJeGKWuYdl5dWdFCXa6o7O+paJ3n7FO+TJSt08se1DAmo6fzN92zLTzB3DN/R4vc DJAJFzEX/ivLXMg8gPlk+QS/3f4Vy5d+GhaLNNdkCUAiB5+stwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfi1DzZ8xruji5YFmRYRV/jTTdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82YWZk NjJkZC1lYzNjLTQ0ZDctOTNmZS04MWVmY2E0YjNkZmUvM2FlM2Y2OTUtNGI3YS0z MDFmLWJkN2QtZWVlNGM5NTc1N2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmFmZDYyZGQtZWMzYy00NGQ3LTkz ZmUtODFlZmNhNGIzZGZlLzZhZmQ2MmRkLWVjM2MtNDRkNy05M2ZlLTgxZWZjYTRi M2RmZS5jcmwwHwYDVR0jBBgwFoAUXfJdyue6xZD9HOjkFx5V5wJu4qwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82YWZkNjJkZC1lYzNjLTQ0ZDctOTNmZS04MWVm Y2E0YjNkZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAq+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU+XRiRBvy34FAXCdpx1q94FRNvlH1G5qtkLHK4T2AO6IbXJKm4I150 cA0/HjNA/csrggRWUn0+CAmbipZbUd4FGKEo0Kunv8usO+diGT42Gakd6BmiC5xn NlbTOFIbeK6t7OQoiMugXPmw6onhwV508FnKG9keSszWunTeW/UGP08sS73Cxx1b jIhneTMTvUV7/EIKLUi6EmwBEfwtYvGcAOElbWhc3PxBXd25rLhQC69NYeXfRbhs d30V2SzrhiGtU4ZhXmqqaWl70sYOPgag70tC9b+PWD6YiNffIQC7dDO4bIvfAHF6 m6wNDkIi61RppqO65MLX2RNM5t6G1w0= -----END CERTIFICATE-----Generated at Sat Sep 26 07:17:54 2026 by rpki-client