$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/328d70d0-a932-3a46-ada0-7b17111522f7.roa File: 328d70d0-a932-3a46-ada0-7b17111522f7.roa (raw, json) Hash identifier: BHLPAN5OdR6Mp+C1mwWKgOR9EkVADeA+50ofZlXFJV0= Subject key identifier: 88:32:AD:90:9B:30:B1:31:9F:B9:4A:E0:75:23:00:1A:33:F8:A6:A9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119FAD5605B6F5E4EF69BE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/328d70d0-a932-3a46-ada0-7b17111522f7.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 76.157.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:ad:56:05:b6:f5:e4:ef:69:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c824cd0a-fcea-46c5-8d38-f3ae28d957ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:94:58:b1:f4:ee:24:b6:02:34:e1:de:cb:e6: 1d:1f:2b:54:32:70:e6:ab:f5:20:34:98:4c:bc:85: ca:12:a1:ed:d3:4c:c9:1e:2d:be:e1:42:d0:ee:1c: b8:8e:b9:14:f9:cc:e7:e0:8d:83:b9:87:4f:89:05: 4e:f6:57:fc:5b:7f:ae:e4:c7:7e:94:8a:b8:ee:f1: 82:1f:99:c3:9a:42:2a:80:ac:f1:39:52:bd:cb:32: 21:a4:9c:df:72:e6:9f:f1:f4:0c:c1:44:c2:6e:22: 57:bd:cb:24:77:6c:cd:f7:30:e2:de:37:ed:5f:66: 75:fe:28:70:db:cd:81:38:75:5d:23:89:e6:5e:08: c2:45:fd:77:bb:d8:b0:82:0e:04:5c:51:31:d2:93: db:45:1f:f7:f2:1b:68:b1:dd:d2:9e:f1:12:3a:c2: ce:21:36:a5:1d:36:96:cc:e0:40:61:0c:60:f9:1a: 4f:fd:fd:89:7c:5e:e2:c7:03:a8:41:96:ec:a5:84: 05:3e:4b:ff:93:55:cd:00:f5:00:49:03:46:ce:3f: 50:e6:17:f2:0f:b0:be:4e:5b:37:be:f1:59:19:70: 57:31:82:16:39:66:b0:79:4e:da:13:9b:dc:e2:5d: 94:5e:f0:b2:c6:ec:2f:a0:5a:77:82:64:eb:7c:4e: 67:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:32:AD:90:9B:30:B1:31:9F:B9:4A:E0:75:23:00:1A:33:F8:A6:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/328d70d0-a932-3a46-ada0-7b17111522f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.157.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:01:70:1a:ed:66:68:05:fd:15:49:9a:ef:91:8a:41:69:c0: bd:ad:6e:71:65:54:8d:58:c7:7a:8a:65:40:38:49:52:bc:59: 40:2e:03:f3:44:63:98:92:40:e9:e3:2d:3b:58:a7:f5:7e:71: b5:7a:0f:74:9f:a2:15:b7:fd:3e:4b:8a:b1:b6:32:f3:1f:9f: fd:5e:ff:ba:7d:73:77:94:e2:39:11:6b:9e:af:eb:74:4b:fe: 6c:80:1c:50:f9:89:35:70:04:12:9a:e3:de:e6:d5:0c:5b:17: a9:fb:cd:0e:84:32:e6:dc:34:08:83:84:7a:a5:96:10:ad:56: c8:15:df:eb:74:1d:dc:ee:3f:fc:a5:60:a2:15:46:87:5b:44: 10:91:5e:e5:c8:3b:76:1d:06:d1:98:9a:b7:1f:d2:f3:57:bd: e0:ca:df:e2:f9:f5:a6:07:25:7d:9d:6c:fa:1f:c2:51:6f:0d: bf:b8:46:a9:ce:51:7c:0e:e9:c0:31:cc:23:ab:0f:f5:4a:9b: 0b:e8:a6:19:5c:ed:b2:21:a3:6c:5b:c6:65:96:1e:a3:ff:08: a4:ca:c7:b5:25:b2:06:65:b4:ca:da:80:c0:8b:86:fe:06:38: 68:6a:ec:4a:84:77:9b:c4:f6:a7:31:0b:c7:09:5c:9a:5d:6e: 76:ef:4b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rn61WBbb15O9pvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzgyNGNkMGEtZmNlYS00NmM1LThkMzgtZjNhZTI4ZDk1N2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZRYsfTuJLYCNOHey+YdHytUMnDmq/UgNJhM vIXKEqHt00zJHi2+4ULQ7hy4jrkU+czn4I2DuYdPiQVO9lf8W3+u5Md+lIq47vGC H5nDmkIqgKzxOVK9yzIhpJzfcuaf8fQMwUTCbiJXvcskd2zN9zDi3jftX2Z1/ihw 282BOHVdI4nmXgjCRf13u9iwgg4EXFEx0pPbRR/38htosd3SnvESOsLOITalHTaW zOBAYQxg+RpP/f2JfF7ixwOoQZbspYQFPkv/k1XNAPUASQNGzj9Q5hfyD7C+Tls3 vvFZGXBXMYIWOWaweU7aE5vc4l2UXvCyxuwvoFp3gmTrfE5nEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgyrZCbMLExn7lK4HUjABoz+KapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI4ZDcwZDAtYTkzMi0z YTQ2LWFkYTAtN2IxNzExMTUyMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJ3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEBcBrtZmgF/RVJmu+RikFpwL2tbnFlVI1Yx3qKZUA4SVK8WUAuA/NE Y5iSQOnjLTtYp/V+cbV6D3SfohW3/T5LirG2MvMfn/1e/7p9c3eU4jkRa56v63RL /myAHFD5iTVwBBKa497m1QxbF6n7zQ6EMubcNAiDhHqllhCtVsgV3+t0HdzuP/yl YKIVRodbRBCRXuXIO3YdBtGYmrcf0vNXveDK3+L59aYHJX2dbPofwlFvDb+4RqnO UXwO6cAxzCOrD/VKmwvophlc7bIho2xbxmWWHqP/CKTKx7UlsgZltMragMCLhv4G OGhq7EqEd5vE9qcxC8cJXJpdbnbvS6M= -----END CERTIFICATE-----Generated at Sat Sep 5 12:03:51 2026 by rpki-client