$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cb6d4ba-6f3f-37ca-9e04-dafcfcc6b144.roa File: 3cb6d4ba-6f3f-37ca-9e04-dafcfcc6b144.roa (raw, json) Hash identifier: oKoh2hOTi1nZMSiD/nm+Ks9FgADT5lKQGop6AYnUqFA= Subject key identifier: 84:C9:60:54:56:5B:F5:26:AD:2B:5A:8E:64:AB:76:36:92:99:3D:8C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497AC4CA112B75049C90FF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cb6d4ba-6f3f-37ca-9e04-dafcfcc6b144.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7922 IP address blocks: 96.108.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:c4:ca:11:2b:75:04:9c:90:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0fd45a74-7036-4232-8538-bec6169761b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:a4:8e:3e:bd:cc:9c:71:d3:25:09:d6:b4: 7d:bf:da:c7:36:61:61:47:fe:a7:71:7e:44:e8:28: 08:56:e1:f9:75:dd:5b:73:09:6b:ee:a3:19:54:10: 4a:96:41:bd:78:ef:69:d7:ca:34:27:0a:37:70:f9: 2c:71:2f:d9:17:6c:01:1c:8f:0a:50:3d:e3:91:8d: ad:b3:39:57:5c:48:f5:c8:11:a7:63:e3:63:53:17: 63:ca:9f:fa:df:15:20:21:5e:f4:48:ae:fb:90:97: da:8b:7d:d2:e6:15:14:20:23:2e:86:e7:73:21:32: 20:6d:45:0d:e8:68:dc:87:f0:b8:bf:70:26:34:7a: 72:ea:0e:3c:d8:73:b2:3f:2e:43:58:1d:f0:74:05: 63:7a:1b:a4:19:79:4c:d9:fd:64:38:6a:1f:e7:20: 66:45:49:31:94:3c:6b:a3:3c:34:35:48:d1:c0:b2: db:07:0c:33:91:47:ed:9c:4b:74:13:aa:4f:41:a1: d9:65:6c:ab:93:13:f0:1f:ee:3e:86:41:d6:ce:0f: e6:a4:24:f1:c1:c1:f4:94:24:25:c7:ca:b1:66:c0: a4:5c:6b:9b:57:84:be:49:71:f9:47:30:b6:db:c8: de:79:3b:8e:d9:3d:78:85:aa:2e:de:e5:61:20:a1: 8c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C9:60:54:56:5B:F5:26:AD:2B:5A:8E:64:AB:76:36:92:99:3D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cb6d4ba-6f3f-37ca-9e04-dafcfcc6b144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.108.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:01:05:20:8f:cc:f3:47:2f:e4:be:88:72:c3:ed:96:a5:8c: 8b:1c:ba:3c:4b:7c:a3:27:50:f2:aa:39:6e:73:54:0b:bd:a9: ba:43:03:e7:ef:2d:d6:cb:17:b6:0a:a2:44:0c:7d:ce:fc:f9: d3:03:98:45:48:df:4d:56:45:e1:67:d7:90:de:62:9a:a5:be: da:b8:ae:6f:95:0d:1d:69:dc:35:a3:99:51:89:53:03:ea:06: fd:42:e4:bd:48:37:5b:4c:d6:fd:43:9c:57:dc:0f:e2:9e:a3: e1:b1:c6:d8:1f:f0:2e:96:82:79:2d:4d:1d:af:2d:d0:3c:7f: 8b:2c:92:6e:b0:5d:88:37:4c:d7:3b:c7:a9:fb:57:f1:80:4d: 5b:50:32:80:fa:71:f1:48:9e:db:95:0d:d5:7b:e3:de:10:ff: d5:08:1d:5c:09:22:55:72:12:1e:40:9c:12:6d:2a:f8:4b:c4: fe:60:bf:58:d1:92:ee:b6:68:1c:69:d3:59:db:e9:06:a1:68: dd:d2:32:e4:e5:6d:01:be:72:49:f6:03:b9:9b:c0:6c:d7:ab: bb:4d:f3:b8:18:81:9d:b4:94:c0:de:e9:3a:bd:38:39:50:39: 5b:29:d4:9d:43:66:91:95:e5:a7:11:97:fd:9e:1a:e3:33:d7: cc:68:3f:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JesTKESt1BJyQ/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGZkNDVhNzQtNzAzNi00MjMyLTg1MzgtYmVjNjE2OTc2MWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQikjj69zJxx0yUJ1rR9v9rHNmFhR/6ncX5E 6CgIVuH5dd1bcwlr7qMZVBBKlkG9eO9p18o0Jwo3cPkscS/ZF2wBHI8KUD3jkY2t szlXXEj1yBGnY+NjUxdjyp/63xUgIV70SK77kJfai33S5hUUICMuhudzITIgbUUN 6Gjch/C4v3AmNHpy6g482HOyPy5DWB3wdAVjehukGXlM2f1kOGof5yBmRUkxlDxr ozw0NUjRwLLbBwwzkUftnEt0E6pPQaHZZWyrkxPwH+4+hkHWzg/mpCTxwcH0lCQl x8qxZsCkXGubV4S+SXH5RzC228jeeTuO2T14haou3uVhIKGMuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITJYFRWW/UmrStajmSrdjaSmT2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NiNmQ0YmEtNmYzZi0z N2NhLTllMDQtZGFmY2ZjYzZiMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYGw2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIBBSCPzPNHL+S+iHLD7ZaljIscujxLfKMnUPKqOW5zVAu9qbpDA+fv LdbLF7YKokQMfc78+dMDmEVI301WReFn15DeYpqlvtq4rm+VDR1p3DWjmVGJUwPq Bv1C5L1IN1tM1v1DnFfcD+Keo+Gxxtgf8C6WgnktTR2vLdA8f4sskm6wXYg3TNc7 x6n7V/GATVtQMoD6cfFIntuVDdV7494Q/9UIHVwJIlVyEh5AnBJtKvhLxP5gv1jR ku62aBxp01nb6QahaN3SMuTlbQG+ckn2A7mbwGzXq7tN87gYgZ20lMDe6Tq9ODlQ OVsp1J1DZpGV5acRl/2eGuMz18xoP+k= -----END CERTIFICATE-----Generated at Sat Oct 10 10:13:37 2026 by rpki-client