$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/33df3dfd-cd1d-3aa6-a5f2-17d4ae61b2c5.roa File: 33df3dfd-cd1d-3aa6-a5f2-17d4ae61b2c5.roa (raw, json) Hash identifier: 7AL5IhjDPCYl7l4e3nFCTFyQdnmrf/v730XHvOTWQAQ= Subject key identifier: BF:45:5B:12:28:83:A6:8C:A9:1E:22:2E:BB:0F:91:C6:2A:D3:40:8C Certificate issuer: /CN=12380a37-68ce-4e9c-9585-53cd09071ada Certificate serial: 010D0C9F4328584F0681BF31AB683C9DB8B7E920 Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/33df3dfd-cd1d-3aa6-a5f2-17d4ae61b2c5.roa Signing time: Tue 01 Sep 2026 01:31:43 +0000 ROA not before: Tue 01 Sep 2026 01:31:43 +0000 ROA not after: Mon 30 Nov 2026 02:31:43 +0000 asID: 54607 IP address blocks: 76.78.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:81:bf:31:ab:68:3c:9d:b8:b7:e9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada Validity Not Before: Sep 1 01:31:43 2026 GMT Not After : Nov 30 02:31:43 2026 GMT Subject: CN=89be8b3d-783d-46bf-b749-9637183ef4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:35:11:85:f3:53:46:8e:dc:43:d5:7a:2c:fe: c9:51:b6:e7:bb:96:72:66:5e:e4:ed:08:32:6f:e4: b5:bb:94:3f:e5:9c:4c:90:bb:19:05:8b:c9:67:51: 91:10:1b:86:aa:40:b1:a7:4b:0e:60:2e:e6:ad:43: 2b:3a:d4:45:a7:62:07:9c:ea:b7:91:21:07:4d:b1: 5e:ac:3a:dc:52:be:e6:4a:ac:d6:bc:91:c7:0e:99: 13:a8:08:64:f4:10:8a:1b:bd:d2:91:a0:54:27:53: 8b:2f:fb:ab:ee:35:77:81:76:e0:10:63:ce:94:1d: db:b5:51:1b:64:3c:82:ed:23:91:ba:43:97:01:5f: 80:ee:fa:ce:97:11:ab:18:44:75:cf:4f:45:26:f5: 3e:b3:97:82:91:7f:00:86:05:33:28:b9:23:84:f2: a3:08:65:e0:64:c9:30:53:a8:93:05:26:22:bf:4c: de:b1:83:07:9e:2f:81:47:b7:32:00:aa:80:73:73: 04:18:16:85:ed:9a:d2:72:f1:6a:bd:b3:8c:f0:02: 8f:3b:89:be:9e:2f:4a:75:b6:91:dd:be:6d:3b:2c: 1e:79:1b:fe:33:c6:f9:b0:7d:be:51:96:98:05:6d: 84:8f:d1:1a:46:25:57:71:1b:f2:82:86:b3:24:c6: c1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:45:5B:12:28:83:A6:8C:A9:1E:22:2E:BB:0F:91:C6:2A:D3:40:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/33df3dfd-cd1d-3aa6-a5f2-17d4ae61b2c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl X509v3 Authority Key Identifier: keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer sbgp-ipAddrBlock: critical IPv4: 76.78.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:97:bd:c3:02:50:f5:d1:c1:a7:3a:64:87:c1:d8:2a:be:24: f7:7c:39:60:02:ef:d0:da:4e:b5:6a:b1:10:73:12:93:d0:99: 8b:bb:12:3b:46:bf:5e:ea:df:ed:97:9e:d2:73:8f:a2:1e:0c: 01:bd:9b:23:f7:c1:bc:8b:94:2c:a8:60:61:b5:bc:f9:c7:d2: 5d:8a:c1:22:75:6b:91:b0:d5:c9:32:ce:33:c8:e8:cd:f9:9b: b2:cd:80:20:33:4a:14:67:a9:d2:9b:21:5b:0c:33:a8:f3:a7: ea:aa:15:07:34:22:8c:79:a8:a4:48:11:9f:62:82:41:e8:e3: ad:1e:f4:a9:2b:c2:a0:e0:4c:5a:1a:a6:22:4a:ba:af:87:a8: bb:0e:54:91:1b:32:2b:8d:8f:4e:94:74:86:4a:e7:fc:68:25: df:1f:30:9c:eb:52:f0:61:b5:71:34:2f:86:59:7e:6d:5c:37: f5:c8:f4:ab:b5:49:3b:c6:3f:9c:30:03:e7:c6:a2:08:82:8c: 88:1f:cc:8a:49:b5:ed:94:dc:dc:40:98:04:db:58:12:b3:37: 0e:f1:21:79:08:16:e2:d0:5e:c5:1c:80:02:f3:3b:64:7b:15: 62:1b:98:01:b0:68:95:02:e7:a6:8d:f3:40:7f:6e:77:0f:7c: 9d:3e:9d:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Ggb8xq2g8nbi36SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTIzODBhMzctNjhjZS00ZTljLTk1ODUtNTNjZDA5MDcx YWRhMB4XDTI2MDkwMTAxMzE0M1oXDTI2MTEzMDAyMzE0M1owLzEtMCsGA1UEAxMk ODliZThiM2QtNzgzZC00NmJmLWI3NDktOTYzNzE4M2VmNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DURhfNTRo7cQ9V6LP7JUbbnu5ZyZl7k7Qgy b+S1u5Q/5ZxMkLsZBYvJZ1GREBuGqkCxp0sOYC7mrUMrOtRFp2IHnOq3kSEHTbFe rDrcUr7mSqzWvJHHDpkTqAhk9BCKG73SkaBUJ1OLL/ur7jV3gXbgEGPOlB3btVEb ZDyC7SORukOXAV+A7vrOlxGrGER1z09FJvU+s5eCkX8AhgUzKLkjhPKjCGXgZMkw U6iTBSYiv0zesYMHni+BR7cyAKqAc3MEGBaF7ZrScvFqvbOM8AKPO4m+ni9KdbaR 3b5tOyweeRv+M8b5sH2+UZaYBW2Ej9EaRiVXcRvygoazJMbBwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9FWxIog6aMqR4iLrsPkcYq00CMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4 MGEzNy02OGNlLTRlOWMtOTU4NS01M2NkMDkwNzFhZGEvMzNkZjNkZmQtY2QxZC0z YWE2LWE1ZjItMTdkNGFlNjFiMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTIzODBhMzctNjhjZS00ZTljLTk1 ODUtNTNjZDA5MDcxYWRhLzEyMzgwYTM3LTY4Y2UtNGU5Yy05NTg1LTUzY2QwOTA3 MWFkYS5jcmwwHwYDVR0jBBgwFoAUC+v8Zzc9d2IVQpU/rmHdVlHBuaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4MGEzNy02OGNlLTRlOWMtOTU4NS01M2Nk MDkwNzFhZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATE68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeXvcMCUPXRwac6ZIfB2Cq+JPd8OWAC79DaTrVqsRBzEpPQmYu7EjtG v17q3+2XntJzj6IeDAG9myP3wbyLlCyoYGG1vPnH0l2KwSJ1a5Gw1ckyzjPI6M35 m7LNgCAzShRnqdKbIVsMM6jzp+qqFQc0Iox5qKRIEZ9igkHo460e9KkrwqDgTFoa piJKuq+HqLsOVJEbMiuNj06UdIZK5/xoJd8fMJzrUvBhtXE0L4ZZfm1cN/XI9Ku1 STvGP5wwA+fGogiCjIgfzIpJte2U3NxAmATbWBKzNw7xIXkIFuLQXsUcgALzO2R7 FWIbmAGwaJUC56aN80B/bncPfJ0+nQc= -----END CERTIFICATE-----Generated at Mon Sep 21 05:43:18 2026 by rpki-client