$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02349f91-a222-3126-9eff-eacbb376d15c.roa File: 02349f91-a222-3126-9eff-eacbb376d15c.roa (raw, json) Hash identifier: 7yjqneX9SdF5hFL8m51r7OcdQ7JHwElEN4sECGYHyKg= Subject key identifier: D0:E0:91:A1:EC:CB:F5:49:A0:E3:28:AD:59:C6:21:AA:3F:80:E4:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F77831C4D8EFE0CFDE2021600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02349f91-a222-3126-9eff-eacbb376d15c.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 22258 IP address blocks: 76.138.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:1c:4d:8e:fe:0c:fd:e2:02:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=a5aff4af-60c8-4a49-b86f-51210b3cdf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:07:dc:83:f8:1c:9f:97:c5:eb:9e:a5:56: 96:11:59:20:dd:20:80:38:d1:b2:27:06:63:6c:22: 19:8b:74:28:e9:de:ba:89:8b:5b:26:d3:b4:8e:e6: 5b:1e:f1:ea:9e:28:1d:ad:d4:23:cb:26:84:8c:3f: 74:b2:e8:06:ee:03:ed:c3:08:e5:66:7e:a0:cc:a2: 94:0e:ff:bf:0a:89:2e:6b:c0:4c:69:eb:f2:f0:27: 10:f9:96:89:b9:b7:9d:86:49:52:9e:5d:ec:60:e5: bb:09:df:f8:57:63:8d:a1:29:5d:99:74:87:60:08: 7e:4d:cf:04:83:0f:85:36:3e:ed:b6:06:9f:24:f5: 13:67:c5:32:44:8d:24:b4:f8:ea:a4:8a:41:9f:a2: bb:3f:cb:a6:61:a5:ca:c2:45:19:2c:cd:07:ac:e0: 5d:d6:48:07:f3:d4:7e:1d:8e:84:3f:a1:85:86:dd: 9e:f7:ac:b9:9b:42:c4:0d:0e:28:b8:29:ce:b2:c3: 9b:8f:f1:14:c3:a0:15:d8:d8:41:9c:57:20:f8:f6: 84:51:da:41:e3:ec:bf:70:e9:f5:a6:03:4a:80:69: d6:19:15:59:93:bf:d6:82:af:bd:ef:f6:d3:34:36: 5a:ed:84:4a:5b:c0:8f:80:c8:a3:14:50:92:c8:91: d1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E0:91:A1:EC:CB:F5:49:A0:E3:28:AD:59:C6:21:AA:3F:80:E4:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02349f91-a222-3126-9eff-eacbb376d15c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.138.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:c9:cd:b7:18:5e:df:f9:3c:8d:76:ed:18:d2:b4:91:d8:17: 33:96:ac:15:10:c2:7b:40:3d:38:00:5b:2f:d4:66:34:81:82: c7:a8:7f:84:09:a9:0b:16:69:d9:18:d3:db:b6:42:55:c4:cf: a3:b5:d0:7c:02:27:48:c1:2b:13:19:f0:d5:37:ac:b8:2a:70: 34:29:79:5a:93:c0:b4:28:4e:e1:a7:90:87:b9:b0:cc:4f:26: 84:de:29:99:46:8a:29:53:15:3d:75:39:25:f2:d2:3a:c4:e4: e1:b1:52:21:f3:76:9c:d8:f4:1f:04:6c:71:bc:e1:64:aa:08: 16:5e:d2:2c:e1:9b:a0:4b:48:21:26:11:55:60:5e:a3:45:5c: d7:65:c6:39:b2:ed:18:63:aa:f5:bb:24:f1:a6:24:ea:c5:1e: fb:c7:3e:45:dc:c6:71:4b:2c:87:c3:61:ba:d0:64:5d:3c:d1: 1c:cf:17:eb:af:47:cb:ed:7d:e1:8f:b9:76:2f:69:1f:40:cd: 97:b2:cc:4d:14:3f:06:49:8d:24:97:18:04:01:83:e9:88:ed: 95:2b:8c:82:f9:cf:9b:0f:ab:46:4c:59:31:df:ad:9c:f9:a3: 24:c7:a0:89:0e:ad:d5:f0:3e:ba:ea:97:76:33:c6:01:2a:5c: 68:6c:8b:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gxxNjv4M/eICFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YTVhZmY0YWYtNjBjOC00YTQ5LWI4NmYtNTEyMTBiM2NkZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f0H3IP4HJ+XxeuepVaWEVkg3SCAONGyJwZj bCIZi3Qo6d66iYtbJtO0juZbHvHqnigdrdQjyyaEjD90sugG7gPtwwjlZn6gzKKU Dv+/Cokua8BMaevy8CcQ+ZaJubedhklSnl3sYOW7Cd/4V2ONoSldmXSHYAh+Tc8E gw+FNj7ttgafJPUTZ8UyRI0ktPjqpIpBn6K7P8umYaXKwkUZLM0HrOBd1kgH89R+ HY6EP6GFht2e96y5m0LEDQ4ouCnOssObj/EUw6AV2NhBnFcg+PaEUdpB4+y/cOn1 pgNKgGnWGRVZk7/Wgq+97/bTNDZa7YRKW8CPgMijFFCSyJHRlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDgkaHsy/VJoOMorVnGIao/gOS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDIzNDlmOTEtYTIyMi0z MTI2LTllZmYtZWFjYmIzNzZkMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPJzbcYXt/5PI127RjStJHYFzOWrBUQwntAPTgAWy/UZjSBgseof4QJ qQsWadkY09u2QlXEz6O10HwCJ0jBKxMZ8NU3rLgqcDQpeVqTwLQoTuGnkIe5sMxP JoTeKZlGiilTFT11OSXy0jrE5OGxUiHzdpzY9B8EbHG84WSqCBZe0izhm6BLSCEm EVVgXqNFXNdlxjmy7RhjqvW7JPGmJOrFHvvHPkXcxnFLLIfDYbrQZF080RzPF+uv R8vtfeGPuXYvaR9AzZeyzE0UPwZJjSSXGAQBg+mI7ZUrjIL5z5sPq0ZMWTHfrZz5 oyTHoIkOrdXwPrrql3YzxgEqXGhsiyE= -----END CERTIFICATE-----Generated at Tue Oct 20 12:19:46 2026 by rpki-client