$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/caff857a-9343-3174-b0b9-d709c3f9f706.roa File: caff857a-9343-3174-b0b9-d709c3f9f706.roa (raw, json) Hash identifier: ZA44d+BOqeikTGe58MsNhVfyOt/bkBV9haTzMlOAeII= Subject key identifier: FD:3A:8C:1D:9D:C9:AA:C2:E3:06:7F:21:EC:7A:A1:BE:3B:75:CE:01 Certificate issuer: /CN=12380a37-68ce-4e9c-9585-53cd09071ada Certificate serial: 010D0C9F4328584F0682E4EBFBEACE1D2AA21740 Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/caff857a-9343-3174-b0b9-d709c3f9f706.roa Signing time: Tue 01 Sep 2026 01:34:02 +0000 ROA not before: Tue 01 Sep 2026 01:34:02 +0000 ROA not after: Mon 30 Nov 2026 02:34:02 +0000 asID: 54607 IP address blocks: 76.78.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:82:e4:eb:fb:ea:ce:1d:2a:a2:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada Validity Not Before: Sep 1 01:34:02 2026 GMT Not After : Nov 30 02:34:02 2026 GMT Subject: CN=f571e25b-c2ba-4828-9ce0-5258d63aabe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:a1:2b:25:0b:98:af:f9:93:28:8a:1d:c5: e7:ca:52:e5:b2:83:d3:49:1a:eb:a2:51:3f:70:dc: 6f:c2:f8:40:29:a1:83:4c:bd:6b:0d:4f:ee:f1:0f: dc:53:6a:c0:53:be:d1:97:59:73:fe:54:02:98:09: 77:5f:93:0f:ae:43:85:b6:62:83:ac:4b:e5:ac:31: f0:0c:34:82:c2:dc:3a:c8:83:7a:b6:41:5b:1b:ef: 45:6f:92:12:03:8f:af:b4:9a:20:50:8c:70:75:80: f5:04:6f:c9:90:d2:a7:36:4d:ee:88:d6:8b:a2:46: a2:f0:27:3b:04:9f:32:94:7a:af:0c:bd:d4:ae:13: 94:09:fa:1d:6f:32:32:b1:03:5b:28:86:ce:91:14: f2:27:f8:58:9e:64:b5:7d:89:5c:9f:73:98:23:fb: 23:48:d8:f4:bb:c3:98:76:1f:72:4d:7d:10:03:68: ba:2e:d2:cb:ee:c8:03:92:09:0e:80:e8:ab:a7:1b: 06:63:8a:a0:8a:3a:20:a6:42:a3:23:79:7a:16:35: 08:2b:35:51:11:21:78:e9:39:8c:a5:c7:68:f5:fa: 47:49:b2:37:e1:ea:bb:07:3f:34:48:2b:68:c8:49: 58:8e:39:e7:03:5e:be:f6:0b:20:8f:0a:90:c1:27: f7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3A:8C:1D:9D:C9:AA:C2:E3:06:7F:21:EC:7A:A1:BE:3B:75:CE:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/caff857a-9343-3174-b0b9-d709c3f9f706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl X509v3 Authority Key Identifier: keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer sbgp-ipAddrBlock: critical IPv4: 76.78.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a4:e0:f0:91:37:b4:0d:31:ae:4a:6e:83:a0:7c:f0:54:e0: 23:6d:b0:b5:ac:58:15:48:2c:92:d5:65:b4:bb:5d:ee:0a:f8: 86:48:68:4a:27:0f:e8:26:0c:d0:4d:7a:16:1e:01:a6:01:18: db:45:69:70:13:4e:08:71:77:48:02:98:63:b0:e3:d1:54:b8: 5e:29:24:2a:25:27:94:11:3f:a9:b7:32:79:48:b6:4b:61:3c: 8e:72:af:75:7f:56:bc:a4:39:b7:d4:29:96:9a:73:88:09:1d: e7:c0:ff:0b:fb:66:34:c3:10:bb:a1:de:f8:38:90:2a:65:48: 98:61:80:95:f1:32:52:e6:a8:a7:07:8b:01:5b:ad:a1:98:88: 48:7b:ce:e9:2b:46:9e:98:f1:ee:40:bd:3c:1c:34:1a:ee:62: e2:df:3a:a9:57:43:ec:66:8a:c2:b9:e8:bc:aa:3d:86:fb:b1: 5a:80:a3:b2:90:b0:6e:29:ea:c5:11:a5:19:4b:7f:d6:64:32: c4:60:e6:d4:aa:31:07:cb:a1:a6:da:a9:69:f8:8d:ee:80:bf: ce:f7:8a:dc:f9:8b:c9:76:70:ec:c5:ab:c4:09:fe:3d:e3:ab: 9c:e9:53:af:2e:d3:38:6f:7b:d8:a4:b4:a9:25:5f:ef:b3:64: 71:5a:e4:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GguTr++rOHSqiF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTIzODBhMzctNjhjZS00ZTljLTk1ODUtNTNjZDA5MDcx YWRhMB4XDTI2MDkwMTAxMzQwMloXDTI2MTEzMDAyMzQwMlowLzEtMCsGA1UEAxMk ZjU3MWUyNWItYzJiYS00ODI4LTljZTAtNTI1OGQ2M2FhYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvOhKyULmK/5kyiKHcXnylLlsoPTSRrrolE/ cNxvwvhAKaGDTL1rDU/u8Q/cU2rAU77Rl1lz/lQCmAl3X5MPrkOFtmKDrEvlrDHw DDSCwtw6yIN6tkFbG+9Fb5ISA4+vtJogUIxwdYD1BG/JkNKnNk3uiNaLokai8Cc7 BJ8ylHqvDL3UrhOUCfodbzIysQNbKIbOkRTyJ/hYnmS1fYlcn3OYI/sjSNj0u8OY dh9yTX0QA2i6LtLL7sgDkgkOgOirpxsGY4qgijogpkKjI3l6FjUIKzVRESF46TmM pcdo9fpHSbI34eq7Bz80SCtoyElYjjnnA16+9gsgjwqQwSf3nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP06jB2dyarC4wZ/Iex6ob47dc4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4 MGEzNy02OGNlLTRlOWMtOTU4NS01M2NkMDkwNzFhZGEvY2FmZjg1N2EtOTM0My0z MTc0LWIwYjktZDcwOWMzZjlmNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTIzODBhMzctNjhjZS00ZTljLTk1 ODUtNTNjZDA5MDcxYWRhLzEyMzgwYTM3LTY4Y2UtNGU5Yy05NTg1LTUzY2QwOTA3 MWFkYS5jcmwwHwYDVR0jBBgwFoAUC+v8Zzc9d2IVQpU/rmHdVlHBuaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4MGEzNy02OGNlLTRlOWMtOTU4NS01M2Nk MDkwNzFhZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATE6ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+k4PCRN7QNMa5KboOgfPBU4CNtsLWsWBVILJLVZbS7Xe4K+IZIaEon D+gmDNBNehYeAaYBGNtFaXATTghxd0gCmGOw49FUuF4pJColJ5QRP6m3MnlItkth PI5yr3V/VrykObfUKZaac4gJHefA/wv7ZjTDELuh3vg4kCplSJhhgJXxMlLmqKcH iwFbraGYiEh7zukrRp6Y8e5AvTwcNBruYuLfOqlXQ+xmisK56LyqPYb7sVqAo7KQ sG4p6sURpRlLf9ZkMsRg5tSqMQfLoabaqWn4je6Av873itz5i8l2cOzFq8QJ/j3j q5zpU68u0zhve9iktKklX++zZHFa5Gc= -----END CERTIFICATE-----Generated at Mon Sep 21 10:51:52 2026 by rpki-client