$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b3a9b93-0585-31a1-8a7c-47c9d541e334.roa File: 3b3a9b93-0585-31a1-8a7c-47c9d541e334.roa (raw, json) Hash identifier: j5Xgzmn1jwBVS+WQtjXZzNYOkj9ufMMY/8iapYrNivM= Subject key identifier: 8A:A3:C6:C4:11:B5:AD:5E:82:32:88:8B:F1:D1:11:58:15:A1:02:6E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED4321A73E31A2700394E7E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b3a9b93-0585-31a1-8a7c-47c9d541e334.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 22258 IP address blocks: 76.123.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:1a:73:e3:1a:27:00:39:4e:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=2914be59-83b0-4734-bf57-edec1cb9448a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:97:b4:87:b8:6f:04:2f:bd:7b:60:ca:32:5a: a6:9e:34:af:6b:58:a5:37:ad:bd:7c:cb:21:aa:90: 48:dc:9b:e4:91:9e:cb:70:9b:09:6a:8b:3d:9b:95: 6c:bc:ba:fb:2a:03:b9:91:a2:72:c3:e0:1f:d9:f7: 22:12:27:4b:99:6d:62:39:c2:1e:cc:14:82:a0:8d: 0b:66:91:e0:7b:d0:d9:85:36:cf:c3:78:31:62:19: ab:42:2b:05:1d:3b:73:1b:36:60:21:d8:41:36:30: f8:87:7b:43:73:46:b8:92:48:3f:fe:90:5f:41:5e: da:c0:3f:01:33:27:c0:33:d6:92:a8:f0:52:6d:36: 3f:8a:1e:ba:d8:9a:38:ea:70:66:e1:b7:8c:af:ff: 58:65:96:ab:33:13:c8:ac:2b:52:4f:3f:82:dd:f8: cf:36:12:26:47:fd:f7:95:2a:f8:6d:30:9b:58:1f: 98:d9:37:e3:21:ac:14:0f:f3:ea:a5:4b:89:d2:c2: f7:00:1c:c3:9f:f0:41:1c:e1:7a:6f:e3:4d:b3:c3: db:83:6f:0f:ad:5c:25:eb:89:3a:5e:75:37:93:a4: 60:2e:0b:fd:06:08:e5:10:02:a1:77:fb:b8:bc:ac: 13:1c:2a:6d:a8:9d:39:4b:31:56:31:0b:a2:aa:5b: ca:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A3:C6:C4:11:B5:AD:5E:82:32:88:8B:F1:D1:11:58:15:A1:02:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b3a9b93-0585-31a1-8a7c-47c9d541e334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.123.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:81:e7:c6:41:2e:d6:60:a9:2a:75:9f:5b:a8:8f:ce:34:41: eb:e3:2d:4c:77:40:7d:26:31:40:d5:5b:4f:a6:7d:56:a0:12: 5e:49:72:4f:49:6a:dd:e2:d2:a6:60:1f:32:a2:4a:4f:b7:bc: 13:5f:6f:ed:9c:b1:62:3e:a4:33:2a:e4:3e:21:19:26:28:fd: 8d:ff:da:30:cc:14:4a:b1:41:ba:22:26:ef:27:7e:e2:ca:f8: 31:34:34:41:e7:a3:4c:ad:40:d0:09:2e:d9:f4:71:e8:52:c4: 2f:fd:65:a4:2d:82:58:ca:3f:1b:a2:e9:0c:31:9d:ad:2a:e1: 49:f1:13:89:f6:f4:ea:6f:f8:43:22:30:2f:0c:27:3f:56:70: eb:92:06:48:62:11:8c:57:68:46:de:04:2d:a9:05:10:9b:58: de:5a:ff:20:b5:93:e9:58:b4:c8:3d:32:90:e0:fd:0b:a2:ee: 7c:e1:9a:f3:35:2d:b6:d7:9f:3f:8b:1e:3d:b6:37:d1:eb:dd: 6c:3a:cd:71:0c:73:2e:5a:cd:22:e7:33:01:a7:5e:46:79:17: 1b:78:b0:8d:69:52:aa:51:90:6d:be:38:34:c9:8c:aa:64:f9: 9d:e3:25:90:96:99:6e:7f:8d:23:17:2f:77:22:26:ae:0e:03: 22:39:d9:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMhpz4xonADlOfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk MjkxNGJlNTktODNiMC00NzM0LWJmNTctZWRlYzFjYjk0NDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5e0h7hvBC+9e2DKMlqmnjSva1ilN629fMsh qpBI3JvkkZ7LcJsJaos9m5VsvLr7KgO5kaJyw+Af2fciEidLmW1iOcIezBSCoI0L ZpHge9DZhTbPw3gxYhmrQisFHTtzGzZgIdhBNjD4h3tDc0a4kkg//pBfQV7awD8B MyfAM9aSqPBSbTY/ih662Jo46nBm4beMr/9YZZarMxPIrCtSTz+C3fjPNhImR/33 lSr4bTCbWB+Y2TfjIawUD/PqpUuJ0sL3ABzDn/BBHOF6b+NNs8Pbg28PrVwl64k6 XnU3k6RgLgv9BgjlEAKhd/u4vKwTHCptqJ05SzFWMQuiqlvKBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqjxsQRta1egjKIi/HREVgVoQJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2IzYTliOTMtMDU4NS0z MWExLThhN2MtNDdjOWQ1NDFlMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATHuKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiB58ZBLtZgqSp1n1uoj840QevjLUx3QH0mMUDVW0+mfVagEl5Jck9J at3i0qZgHzKiSk+3vBNfb+2csWI+pDMq5D4hGSYo/Y3/2jDMFEqxQboiJu8nfuLK +DE0NEHno0ytQNAJLtn0cehSxC/9ZaQtgljKPxui6Qwxna0q4UnxE4n29Opv+EMi MC8MJz9WcOuSBkhiEYxXaEbeBC2pBRCbWN5a/yC1k+lYtMg9MpDg/Qui7nzhmvM1 LbbXnz+LHj22N9Hr3Ww6zXEMcy5azSLnMwGnXkZ5Fxt4sI1pUqpRkG2+ODTJjKpk +Z3jJZCWmW5/jSMXL3ciJq4OAyI52TA= -----END CERTIFICATE-----Generated at Sat Sep 5 11:13:12 2026 by rpki-client