$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ce92898-ba68-3d38-a4a9-bf729cc81908.roa File: 2ce92898-ba68-3d38-a4a9-bf729cc81908.roa (raw, json) Hash identifier: /Ugzew1oH+YgOofPt+wxzR9N5JsMMm6xToaFmUmgJKo= Subject key identifier: 28:3B:56:D4:CA:3A:76:05:8D:A5:E5:23:26:A6:5E:96:2D:ED:78:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E41E79D59939A4E86C680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ce92898-ba68-3d38-a4a9-bf729cc81908.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7015 IP address blocks: 76.127.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:41:e7:9d:59:93:9a:4e:86:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=46fe8e63-6c56-4d58-9063-675415a98c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:65:16:fa:c5:a3:8d:7f:52:94:15:59:fb:9d: a7:3e:c6:5b:90:0d:6a:f4:33:5d:9d:cb:fb:40:6d: 91:08:f9:7b:89:69:47:aa:95:3c:2a:e7:c2:ce:b3: 44:74:e9:72:e6:47:00:40:1e:85:8d:e4:ed:0a:a9: 76:49:41:d0:a9:be:c8:94:de:c1:a3:8f:06:24:c1: 49:85:25:d4:3c:60:c2:f3:4a:74:28:f4:6a:78:fd: 1e:09:05:63:12:95:56:60:0f:48:cd:06:c4:60:5d: 8b:a2:03:44:94:a5:31:98:b9:91:7f:77:90:a6:87: db:09:96:4c:f8:86:9d:ed:e4:9d:a2:10:bc:ef:19: 9e:6c:89:db:95:d1:f9:da:68:98:cc:d0:64:c9:68: b1:a8:4f:d6:34:c2:f3:b9:f6:85:de:18:39:01:64: f2:da:b3:4c:fa:1b:da:1a:d2:55:a7:88:3f:b9:d4: 1d:8c:f6:9b:52:69:3a:43:aa:7c:bb:87:2a:72:a0: e9:d4:a7:5c:c2:65:e9:e1:ea:45:1f:7f:5a:c0:f6: a6:ee:9d:25:1f:f1:9b:80:a8:ec:47:c9:72:85:27: 20:e2:44:40:ff:e1:a2:13:36:05:aa:01:47:c2:bf: d1:46:74:1c:35:63:31:f4:f1:5c:a3:c3:6f:4f:32: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3B:56:D4:CA:3A:76:05:8D:A5:E5:23:26:A6:5E:96:2D:ED:78:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ce92898-ba68-3d38-a4a9-bf729cc81908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.127.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:87:9b:85:39:8c:38:b3:b1:f1:c5:59:75:ae:5d:2f:fd:b4: 2e:c8:ba:e9:ca:f3:b7:6a:a5:38:bc:7c:66:f0:03:07:90:5c: e2:59:28:b8:6d:9b:3d:22:c5:27:c0:51:4e:ab:99:5e:64:fe: d6:9e:24:9d:2c:de:d0:c1:36:57:c1:c2:2c:56:79:be:ca:f4: 72:ad:6e:3b:78:75:13:46:ec:72:d7:28:a6:13:41:7a:93:b6: ee:e0:2d:8e:4f:c5:3f:eb:bb:0f:d4:89:ed:e8:ca:f8:3d:05: 71:a9:fe:e3:59:08:ad:13:64:ef:2b:1b:69:d8:0b:d3:ac:1a: 45:61:47:a3:1a:10:0d:d6:30:b6:4c:00:19:a3:ba:fc:14:4a: 8e:45:ec:ce:37:f3:7e:c3:68:06:31:1a:e5:6e:34:66:f0:bf: 00:f3:cb:b1:f3:ae:6e:39:17:ca:92:cd:99:05:d2:a5:43:46: 99:92:51:e5:05:3b:6c:6d:3d:21:65:76:01:81:ee:88:f7:a3: a2:44:d1:10:3e:e3:c5:1e:2a:d1:8c:e7:23:9e:00:44:56:82: 88:1c:7f:84:81:ca:8a:d6:5b:7f:d6:6d:58:ed:36:fd:ed:a6: a1:06:dd:64:8d:73:81:bf:2f:5f:9c:85:f2:c3:ef:46:b6:71: a3:90:62:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TkHnnVmTmk6GxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NDZmZThlNjMtNmM1Ni00ZDU4LTkwNjMtNjc1NDE1YTk4YzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGUW+sWjjX9SlBVZ+52nPsZbkA1q9DNdncv7 QG2RCPl7iWlHqpU8KufCzrNEdOly5kcAQB6FjeTtCql2SUHQqb7IlN7Bo48GJMFJ hSXUPGDC80p0KPRqeP0eCQVjEpVWYA9IzQbEYF2LogNElKUxmLmRf3eQpofbCZZM +Iad7eSdohC87xmebInbldH52miYzNBkyWixqE/WNMLzufaF3hg5AWTy2rNM+hva GtJVp4g/udQdjPabUmk6Q6p8u4cqcqDp1KdcwmXp4epFH39awPam7p0lH/GbgKjs R8lyhScg4kRA/+GiEzYFqgFHwr/RRnQcNWMx9PFco8NvTzKn5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCg7VtTKOnYFjaXlIyamXpYt7Xg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmNlOTI4OTgtYmE2OC0z ZDM4LWE0YTktYmY3MjljYzgxOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTH+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKHm4U5jDizsfHFWXWuXS/9tC7IuunK87dqpTi8fGbwAweQXOJZKLht mz0ixSfAUU6rmV5k/taeJJ0s3tDBNlfBwixWeb7K9HKtbjt4dRNG7HLXKKYTQXqT tu7gLY5PxT/ruw/Uie3oyvg9BXGp/uNZCK0TZO8rG2nYC9OsGkVhR6MaEA3WMLZM ABmjuvwUSo5F7M43837DaAYxGuVuNGbwvwDzy7Hzrm45F8qSzZkF0qVDRpmSUeUF O2xtPSFldgGB7oj3o6JE0RA+48UeKtGM5yOeAERWgogcf4SByorWW3/WbVjtNv3t pqEG3WSNc4G/L1+chfLD70a2caOQYoU= -----END CERTIFICATE-----Generated at Wed Nov 4 17:02:13 2026 by rpki-client