$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20c5dcb5-f749-3dc2-9de9-a71aa3920732.roa File: 20c5dcb5-f749-3dc2-9de9-a71aa3920732.roa (raw, json) Hash identifier: QWnfWixeRadPHra5t1W+56RZ3tykn5i+qhYwWCUGUr4= Subject key identifier: 95:21:AD:CA:C0:E8:93:EE:B7:0D:B1:EB:A4:8B:E4:F7:13:3E:F7:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862898EEEC5FACFF4A3FB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20c5dcb5-f749-3dc2-9de9-a71aa3920732.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7015 IP address blocks: 75.69.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:89:8e:ee:c5:fa:cf:f4:a3:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=d4ed425e-f4d9-4a64-a344-f04b1404d41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:fd:29:fd:49:d1:97:bd:4e:e2:5f:63:52: 01:47:0f:26:16:b0:c1:f6:c9:e3:3f:01:62:7a:2d: fa:de:d7:44:9d:5c:5c:68:5a:f3:06:bb:b6:07:1a: 70:77:23:5f:ba:de:4a:8b:86:32:40:c7:d4:60:36: 53:1f:5a:4a:c3:7d:00:5c:31:52:f9:f1:58:cf:99: 94:ee:29:54:e5:53:a7:d5:cf:93:62:e9:94:4e:d9: 46:42:dc:4c:ba:e7:d7:ff:93:7d:cd:19:76:0a:6e: 4e:0c:a6:26:7f:f8:19:5e:26:a0:1d:f2:85:73:47: 7e:04:39:7d:0a:78:2a:53:2d:f3:f9:b2:f1:62:e2: 05:1e:5e:ad:fe:a9:e0:00:fa:2a:9b:11:8b:5d:36: fc:ab:88:90:c0:ea:df:dd:84:41:96:cd:19:9e:01: 83:66:7d:d5:a8:7d:eb:75:eb:41:78:fc:7d:68:d4: 86:4d:57:8b:42:b8:26:99:23:af:fa:d3:40:ce:7f: 31:cf:82:62:0e:9c:c8:76:f9:46:c5:31:6d:d0:e6: 66:66:69:ee:db:ed:2b:1c:7b:66:f4:8f:52:ba:44: df:f3:04:87:39:45:75:a0:ae:9b:86:b1:f7:4a:c8: 76:08:90:a0:d3:27:d0:97:11:22:ea:6b:3d:95:f0: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:21:AD:CA:C0:E8:93:EE:B7:0D:B1:EB:A4:8B:E4:F7:13:3E:F7:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20c5dcb5-f749-3dc2-9de9-a71aa3920732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 75.69.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:76:f8:89:4e:12:f5:f8:ee:fc:eb:ce:d5:bd:cc:15:0d:02: 07:6d:12:0d:00:55:de:f6:30:e5:f9:e0:ff:f6:45:d2:66:63: 86:17:c9:9c:15:70:39:73:ac:5b:74:8b:17:38:89:be:d0:f8: 71:34:b4:90:b5:b2:a9:f3:2d:ba:4a:85:5d:cd:d7:d4:10:93: 6b:e6:95:48:6f:4c:06:de:18:f2:50:de:6e:28:1d:26:2a:c3: 4b:93:cc:56:af:10:95:c1:42:60:7b:8d:67:60:5a:76:c5:19: 61:69:19:62:84:06:d0:3f:36:3c:cb:b7:72:22:2c:9c:04:34: 6c:ea:14:6b:a9:9f:f4:9f:fe:14:21:32:89:79:87:ee:97:27: b4:30:8f:31:54:de:ec:bb:fa:77:ae:d2:5b:56:80:92:68:95: f9:15:ab:4b:46:5d:28:55:31:a8:be:84:a0:cc:51:7e:d2:15: ca:87:02:c8:7d:7a:1e:e9:88:aa:e6:ca:2d:13:ad:b5:4f:08: aa:27:db:d9:07:5c:6e:33:36:27:16:22:31:7d:a9:22:6c:f5: 90:9d:76:96:41:51:0a:41:24:f1:22:59:6a:a9:2d:ef:1c:c6: 74:ac:2a:9c:86:9a:e5:12:ad:e9:8c:2f:86:e6:6b:2b:11:7c: c3:24:c3:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYomO7sX6z/Sj+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZDRlZDQyNWUtZjRkOS00YTY0LWEzNDQtZjA0YjE0MDRkNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGb9Kf1J0Ze9TuJfY1IBRw8mFrDB9snjPwFi ei363tdEnVxcaFrzBru2BxpwdyNfut5Ki4YyQMfUYDZTH1pKw30AXDFS+fFYz5mU 7ilU5VOn1c+TYumUTtlGQtxMuufX/5N9zRl2Cm5ODKYmf/gZXiagHfKFc0d+BDl9 CngqUy3z+bLxYuIFHl6t/qngAPoqmxGLXTb8q4iQwOrf3YRBls0ZngGDZn3VqH3r detBePx9aNSGTVeLQrgmmSOv+tNAzn8xz4JiDpzIdvlGxTFt0OZmZmnu2+0rHHtm 9I9SukTf8wSHOUV1oK6bhrH3Ssh2CJCg0yfQlxEi6ms9lfDitQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUhrcrA6JPutw2x66SL5PcTPvcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBjNWRjYjUtZjc0OS0z ZGMyLTlkZTktYTcxYWEzOTIwNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS0WYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV2+IlOEvX47vzrztW9zBUNAgdtEg0AVd72MOX54P/2RdJmY4YXyZwV cDlzrFt0ixc4ib7Q+HE0tJC1sqnzLbpKhV3N19QQk2vmlUhvTAbeGPJQ3m4oHSYq w0uTzFavEJXBQmB7jWdgWnbFGWFpGWKEBtA/NjzLt3IiLJwENGzqFGupn/Sf/hQh Mol5h+6XJ7QwjzFU3uy7+neu0ltWgJJolfkVq0tGXShVMai+hKDMUX7SFcqHAsh9 eh7piKrmyi0TrbVPCKon29kHXG4zNicWIjF9qSJs9ZCddpZBUQpBJPEiWWqpLe8c xnSsKpyGmuUSremML4bmaysRfMMkw/g= -----END CERTIFICATE-----Generated at Mon Sep 14 16:55:03 2026 by rpki-client