$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cd7451c-3d48-3831-8986-8023b9e360c8.roa File: 0cd7451c-3d48-3831-8986-8023b9e360c8.roa (raw, json) Hash identifier: z5ZUX9imW94uOrsbHGcEhq6UGW4AICrEvnqw/yNXMt4= Subject key identifier: B9:F2:6C:77:6A:B4:90:F5:85:9B:86:1F:E3:5D:BA:61:14:34:44:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4FB5F74B573EBD9A594B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cd7451c-3d48-3831-8986-8023b9e360c8.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 76.122.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:b5:f7:4b:57:3e:bd:9a:59:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=96887260-ec72-4382-a291-ac8a3ed78165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:87:0a:5a:50:83:e2:2c:df:18:3d:fa:2d: 20:6f:d7:ca:20:21:d5:d4:65:8e:af:aa:af:bf:c4: e0:69:47:e6:85:28:6c:69:0a:5a:cf:a6:77:fd:7c: 40:c7:c8:7a:ca:1c:51:87:ee:f5:04:e9:38:a8:b2: 8f:90:a6:8d:9f:cb:06:7e:6b:2b:cf:4c:c6:65:81: bc:9d:8f:b9:85:ed:e3:78:c8:68:ff:71:41:bf:74: 1d:ca:e7:1b:54:20:a9:98:17:f9:51:49:8f:32:d5: fc:03:8b:71:a1:c2:d0:b8:46:5c:cb:47:48:0f:69: 46:5b:a4:9f:0b:dc:b1:d8:14:b1:63:ca:e6:ca:c1: 0d:e2:66:a0:89:0f:d7:5c:00:d8:c3:6c:5e:42:ca: 3a:2f:72:a6:f1:81:be:92:fb:54:05:1d:37:3f:6d: f8:cf:73:82:64:71:c2:ee:e7:b4:cf:3e:9d:45:99: 3f:dc:e3:5c:68:b1:f2:fe:fd:69:73:57:43:e9:db: be:aa:06:86:6c:a0:b5:bc:4a:eb:04:8e:a1:c2:84: 9f:7e:49:44:bc:0f:6a:b1:2b:ce:6b:6f:b3:a2:03: 4e:5a:36:8b:2a:b4:b3:90:f1:43:9b:fc:76:d6:da: 12:d2:a2:4e:34:38:83:95:84:03:a2:97:e5:36:a1: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F2:6C:77:6A:B4:90:F5:85:9B:86:1F:E3:5D:BA:61:14:34:44:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cd7451c-3d48-3831-8986-8023b9e360c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.122.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:2d:d1:c9:0e:4b:58:0a:7d:e1:de:7e:59:38:b3:ba:32:32: d8:07:e0:b2:ef:e9:9d:e5:81:da:8a:43:fe:0b:3c:8a:0a:ea: 51:73:58:21:d9:d8:d0:4a:71:0c:3b:92:d8:07:28:14:17:ac: 6a:74:b3:ff:20:12:3f:40:0b:25:c4:3f:c9:3a:2b:fe:26:db: c5:51:09:14:43:d9:9a:c5:92:fa:46:1e:9f:c0:9e:d4:d7:de: 8d:a5:5b:1d:0b:43:91:8b:f4:61:f2:11:be:86:b5:6e:0c:a1: c9:54:4a:f2:42:30:4a:b0:8e:54:de:a3:ad:67:41:f6:49:6a: 32:6e:ac:17:af:b4:a7:26:67:51:7b:d9:47:31:a9:9e:ca:b8: 1a:31:a9:89:d3:30:1a:dd:57:aa:17:e8:74:a0:cf:cc:40:3e: c9:05:fe:21:aa:bb:8c:2a:60:32:a2:cb:1d:5f:26:03:d6:a5: 3b:5b:c2:8a:89:01:b6:fe:fe:90:be:80:19:ce:1a:dc:7e:57: af:3f:74:89:fb:bd:aa:ea:04:90:d8:01:aa:15:33:44:b8:d7: 73:b7:66:e6:f3:e2:fe:bf:00:3e:16:a5:6c:cc:b6:93:36:0c: 67:80:29:44:db:15:0b:5e:3b:60:ef:40:ae:b8:08:4f:84:90: 36:30:54:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T7X3S1c+vZpZSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk OTY4ODcyNjAtZWM3Mi00MzgyLWEyOTEtYWM4YTNlZDc4MTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcKHClpQg+Is3xg9+i0gb9fKICHV1GWOr6qv v8TgaUfmhShsaQpaz6Z3/XxAx8h6yhxRh+71BOk4qLKPkKaNn8sGfmsrz0zGZYG8 nY+5he3jeMho/3FBv3QdyucbVCCpmBf5UUmPMtX8A4txocLQuEZcy0dID2lGW6Sf C9yx2BSxY8rmysEN4magiQ/XXADYw2xeQso6L3Km8YG+kvtUBR03P234z3OCZHHC 7ue0zz6dRZk/3ONcaLHy/v1pc1dD6du+qgaGbKC1vErrBI6hwoSffklEvA9qsSvO a2+zogNOWjaLKrSzkPFDm/x21toS0qJONDiDlYQDopflNqHTCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnybHdqtJD1hZuGH+NdumEUNERDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGNkNzQ1MWMtM2Q0OC0z ODMxLTg5ODYtODAyM2I5ZTM2MGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKst0ckOS1gKfeHeflk4s7oyMtgH4LLv6Z3lgdqKQ/4LPIoK6lFzWCHZ 2NBKcQw7ktgHKBQXrGp0s/8gEj9ACyXEP8k6K/4m28VRCRRD2ZrFkvpGHp/AntTX 3o2lWx0LQ5GL9GHyEb6GtW4MoclUSvJCMEqwjlTeo61nQfZJajJurBevtKcmZ1F7 2UcxqZ7KuBoxqYnTMBrdV6oX6HSgz8xAPskF/iGqu4wqYDKiyx1fJgPWpTtbwoqJ Abb+/pC+gBnOGtx+V68/dIn7varqBJDYAaoVM0S413O3Zubz4v6/AD4WpWzMtpM2 DGeAKUTbFQteO2DvQK64CE+EkDYwVGA= -----END CERTIFICATE-----Generated at Tue Oct 20 18:43:24 2026 by rpki-client