$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04a13e39-bb21-3bd6-afcc-ebfa850183f6.roa File: 04a13e39-bb21-3bd6-afcc-ebfa850183f6.roa (raw, json) Hash identifier: b3HpAheyHLFL5CXx9nBjd9RJV0qgViv5uj87RYWLwfg= Subject key identifier: C8:40:43:7A:99:B2:42:30:26:56:9E:41:23:34:6D:F3:92:3E:F8:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4FB4B20CEBF64A63297280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04a13e39-bb21-3bd6-afcc-ebfa850183f6.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 76.112.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:b4:b2:0c:eb:f6:4a:63:29:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=c7f9da6d-e89d-44eb-9509-f803352ba4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:73:2a:56:e7:80:c8:82:f4:0c:56:59:6a:0a: 19:19:20:5a:51:85:8a:fb:09:bf:6f:bf:0b:62:d0: 30:61:f4:73:f6:cb:c8:64:6f:be:d7:06:6a:c5:96: 03:b4:de:39:55:ca:1d:7d:d4:4b:e7:06:f1:d4:eb: 7b:6d:88:b9:18:7b:1b:7a:63:d6:bb:35:8e:69:1f: 14:ef:ca:20:48:c9:a9:e5:aa:77:b6:4d:21:b0:48: 9f:e3:c7:61:4f:34:91:b6:70:89:24:1f:c9:ae:7c: 58:46:2d:f2:d0:78:90:ee:31:ae:45:31:0e:5d:56: e1:2e:79:0a:c7:24:a7:a6:78:c7:f9:a7:38:6f:3c: ad:03:17:19:23:26:c3:18:d2:b4:37:0e:59:20:0b: b0:7a:8d:63:7a:11:ff:72:ca:19:bc:96:ce:be:f3: 6f:f5:7f:11:58:40:52:e2:34:b5:5e:44:fa:ec:aa: 32:55:c7:78:3f:70:b6:98:e1:bb:dc:dd:b7:88:3a: bd:30:50:f0:bf:dd:5b:3a:c6:0b:fa:67:97:1f:5a: b9:29:d4:4e:25:8c:30:5e:e1:75:b6:cd:a5:79:90: cd:2d:10:7b:ff:7b:f8:29:1a:83:0d:45:94:e1:07: 54:9a:3c:7b:54:22:a0:51:c7:d9:35:aa:a8:25:c7: ca:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:40:43:7A:99:B2:42:30:26:56:9E:41:23:34:6D:F3:92:3E:F8:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04a13e39-bb21-3bd6-afcc-ebfa850183f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.112.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ce:d0:66:02:c1:f5:df:c8:de:40:ed:59:ee:6b:92:1e:6e: 6e:ad:08:a8:0c:bd:2f:69:80:33:1d:e0:5e:92:01:70:d6:b6: a4:a9:b8:93:fc:68:1f:23:e8:d7:ac:18:4a:c5:19:57:f5:08: f1:b8:16:40:d8:3e:ee:50:b8:9e:b1:40:dd:f7:23:2b:f7:89: 91:63:4e:90:7a:7c:86:ee:27:b9:f7:8d:80:7c:34:2a:2f:34: 7f:e4:ec:b6:8b:49:bc:fa:11:9b:45:08:5c:1a:21:c4:ed:15: a5:4c:6f:e3:a6:18:9d:e7:39:33:9b:ab:d1:fa:bb:4a:d1:1d: fd:05:55:75:b4:47:bf:07:e9:cc:90:a3:18:3c:c0:ca:a0:ea: 38:4a:a9:d3:78:c0:07:52:4e:6d:80:25:7e:55:20:1b:12:29: 93:44:cc:33:63:3e:6f:1c:68:05:0e:94:e3:ef:2a:52:31:07: e6:f5:77:b9:cd:1f:bf:c6:00:dd:8e:3e:1f:1d:60:f0:1c:cd: 2f:a7:4e:df:58:6e:79:f0:57:a6:4d:37:18:64:0e:b7:01:af: 2b:4e:e3:4c:c9:14:6a:90:7c:fc:db:e3:28:0f:f6:55:9f:94: 73:b5:de:29:08:c4:5f:2d:99:f7:90:24:e7:91:7e:7d:6b:47: 76:a9:b1:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T7SyDOv2SmMpcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YzdmOWRhNmQtZTg5ZC00NGViLTk1MDktZjgwMzM1MmJhNGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXMqVueAyIL0DFZZagoZGSBaUYWK+wm/b78L YtAwYfRz9svIZG++1wZqxZYDtN45VcodfdRL5wbx1Ot7bYi5GHsbemPWuzWOaR8U 78ogSMmp5ap3tk0hsEif48dhTzSRtnCJJB/JrnxYRi3y0HiQ7jGuRTEOXVbhLnkK xySnpnjH+ac4bzytAxcZIybDGNK0Nw5ZIAuweo1jehH/csoZvJbOvvNv9X8RWEBS 4jS1XkT67KoyVcd4P3C2mOG73N23iDq9MFDwv91bOsYL+meXH1q5KdROJYwwXuF1 ts2leZDNLRB7/3v4KRqDDUWU4QdUmjx7VCKgUcfZNaqoJcfK6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhAQ3qZskIwJlaeQSM0bfOSPviCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDRhMTNlMzktYmIyMS0z YmQ2LWFmY2MtZWJmYTg1MDE4M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjO0GYCwfXfyN5A7Vnua5Iebm6tCKgMvS9pgDMd4F6SAXDWtqSpuJP8 aB8j6NesGErFGVf1CPG4FkDYPu5QuJ6xQN33Iyv3iZFjTpB6fIbuJ7n3jYB8NCov NH/k7LaLSbz6EZtFCFwaIcTtFaVMb+OmGJ3nOTObq9H6u0rRHf0FVXW0R78H6cyQ oxg8wMqg6jhKqdN4wAdSTm2AJX5VIBsSKZNEzDNjPm8caAUOlOPvKlIxB+b1d7nN H7/GAN2OPh8dYPAczS+nTt9YbnnwV6ZNNxhkDrcBrytO40zJFGqQfPzb4ygP9lWf lHO13ikIxF8tmfeQJOeRfn1rR3apsTk= -----END CERTIFICATE-----Generated at Tue Oct 20 06:13:43 2026 by rpki-client