$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/a2475c04-9583-30f1-b637-b065020a13be.roa File: a2475c04-9583-30f1-b637-b065020a13be.roa (raw, json) Hash identifier: +GF1+WCUYAcKZjiAu6LNh8B8DiiR8jfwLb96KPIfKjc= Subject key identifier: 90:E7:73:93:78:78:CE:FD:32:4E:DD:E2:A8:7B:43:01:DE:A7:3D:B5 Certificate issuer: /CN=12380a37-68ce-4e9c-9585-53cd09071ada Certificate serial: 010D0C9F4328584F06821DEAF1FEDB32742803C0 Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/a2475c04-9583-30f1-b637-b065020a13be.roa Signing time: Tue 01 Sep 2026 01:32:28 +0000 ROA not before: Tue 01 Sep 2026 01:32:28 +0000 ROA not after: Mon 30 Nov 2026 02:32:28 +0000 asID: 54607 IP address blocks: 76.78.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:82:1d:ea:f1:fe:db:32:74:28:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada Validity Not Before: Sep 1 01:32:28 2026 GMT Not After : Nov 30 02:32:28 2026 GMT Subject: CN=a7e691ad-314f-4f53-a05e-270c02cd8988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e2:9e:6c:bf:dd:49:24:7b:36:65:92:61:36: 08:11:ce:ce:0a:e4:7c:cd:dc:b7:75:49:83:d2:f7: fe:19:12:53:b5:85:15:60:56:85:f8:89:eb:48:13: 5a:d6:2b:4e:29:90:97:1b:0c:28:7c:7a:48:85:5c: 75:ff:aa:c1:c5:2b:26:df:fb:cb:6f:95:f6:19:71: 0b:c5:66:b5:81:d6:4e:74:b9:d7:79:da:25:84:a8: ac:7c:30:4d:d8:c6:a9:75:a7:8b:38:60:22:fb:16: 20:43:3b:e3:60:3b:17:79:ee:1e:25:6e:f2:01:0a: 6d:37:e7:2a:71:d0:77:29:96:28:dd:ae:15:09:ed: 09:1d:80:17:c1:61:48:47:cb:35:f8:cf:57:ff:27: d9:60:7b:ba:0c:31:d5:30:a7:4f:e6:ef:cc:ec:5d: 27:09:40:86:fa:e0:0d:58:9e:28:6e:11:50:b0:12: 18:6a:d5:a6:f0:66:2b:16:f1:f7:68:db:5c:c2:6a: d1:6f:df:41:bf:d3:03:1e:b5:34:cb:2f:84:eb:60: 3f:0f:64:af:a6:67:7c:02:a8:6c:39:bd:b8:47:e8: b3:94:35:d4:5c:8c:50:93:b0:97:26:b4:90:be:0e: 9d:1c:1f:f4:db:68:0f:d7:69:3a:5d:ba:0f:a2:9f: b8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E7:73:93:78:78:CE:FD:32:4E:DD:E2:A8:7B:43:01:DE:A7:3D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/a2475c04-9583-30f1-b637-b065020a13be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl X509v3 Authority Key Identifier: keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer sbgp-ipAddrBlock: critical IPv4: 76.78.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:03:32:cd:c0:58:0e:a9:e7:28:69:85:42:42:32:bb:52:3b: 1a:02:07:a9:e2:a0:f3:03:7a:8c:55:91:34:f1:b2:6c:1e:57: 9d:97:34:72:9e:ea:17:ce:02:b4:a4:13:55:6d:9e:88:cc:18: bc:dd:35:eb:8f:2c:1b:89:60:2e:14:50:11:29:d7:44:98:2b: 1d:23:4d:96:6e:93:18:ff:2f:4e:eb:80:c5:28:2a:c0:50:5b: 14:cb:10:b5:ae:4f:6a:ca:93:8a:8a:9f:c5:f0:94:36:da:56: 90:ba:be:b2:87:fc:3e:71:6e:94:c0:1b:36:34:54:82:00:fb: c5:c4:1e:57:30:98:87:bc:af:c0:ab:44:a6:9d:d0:8c:69:b1: 85:90:9a:f4:58:77:bf:e2:46:73:71:a8:1d:48:63:d5:0b:c4: 79:27:1b:e5:93:31:aa:27:f9:93:00:04:48:22:0e:40:56:2e: c3:26:e5:b2:54:b4:b2:24:d8:ab:ac:68:e5:6d:8f:f1:63:d0: 8a:39:77:00:08:53:b3:b2:66:43:70:5a:c7:30:a5:4b:43:48: e7:11:c2:de:e8:c1:ec:bf:70:f0:98:a4:26:76:4a:94:2e:83: c4:64:21:83:bc:02:1d:e5:fa:84:3b:e7:b3:47:88:cb:2b:06: 27:0b:d2:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Ggh3q8f7bMnQoA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTIzODBhMzctNjhjZS00ZTljLTk1ODUtNTNjZDA5MDcx YWRhMB4XDTI2MDkwMTAxMzIyOFoXDTI2MTEzMDAyMzIyOFowLzEtMCsGA1UEAxMk YTdlNjkxYWQtMzE0Zi00ZjUzLWEwNWUtMjcwYzAyY2Q4OTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluKebL/dSSR7NmWSYTYIEc7OCuR8zdy3dUmD 0vf+GRJTtYUVYFaF+InrSBNa1itOKZCXGwwofHpIhVx1/6rBxSsm3/vLb5X2GXEL xWa1gdZOdLnXedolhKisfDBN2MapdaeLOGAi+xYgQzvjYDsXee4eJW7yAQptN+cq cdB3KZYo3a4VCe0JHYAXwWFIR8s1+M9X/yfZYHu6DDHVMKdP5u/M7F0nCUCG+uAN WJ4obhFQsBIYatWm8GYrFvH3aNtcwmrRb99Bv9MDHrU0yy+E62A/D2Svpmd8Aqhs Ob24R+izlDXUXIxQk7CXJrSQvg6dHB/022gP12k6XboPop+4bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDnc5N4eM79Mk7d4qh7QwHepz21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4 MGEzNy02OGNlLTRlOWMtOTU4NS01M2NkMDkwNzFhZGEvYTI0NzVjMDQtOTU4My0z MGYxLWI2MzctYjA2NTAyMGExM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTIzODBhMzctNjhjZS00ZTljLTk1 ODUtNTNjZDA5MDcxYWRhLzEyMzgwYTM3LTY4Y2UtNGU5Yy05NTg1LTUzY2QwOTA3 MWFkYS5jcmwwHwYDVR0jBBgwFoAUC+v8Zzc9d2IVQpU/rmHdVlHBuaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4MGEzNy02OGNlLTRlOWMtOTU4NS01M2Nk MDkwNzFhZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATE6pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcDMs3AWA6p5yhphUJCMrtSOxoCB6nioPMDeoxVkTTxsmweV52XNHKe 6hfOArSkE1VtnojMGLzdNeuPLBuJYC4UUBEp10SYKx0jTZZukxj/L07rgMUoKsBQ WxTLELWuT2rKk4qKn8XwlDbaVpC6vrKH/D5xbpTAGzY0VIIA+8XEHlcwmIe8r8Cr RKad0IxpsYWQmvRYd7/iRnNxqB1IY9ULxHknG+WTMaon+ZMABEgiDkBWLsMm5bJU tLIk2KusaOVtj/Fj0Io5dwAIU7OyZkNwWscwpUtDSOcRwt7owey/cPCYpCZ2SpQu g8RkIYO8Ah3l+oQ757NHiMsrBicL0oc= -----END CERTIFICATE-----Generated at Mon Sep 21 10:06:43 2026 by rpki-client