$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40d130f7-2cac-33b6-a724-ca125172097c.roa File: 40d130f7-2cac-33b6-a724-ca125172097c.roa (raw, json) Hash identifier: lwTfd1oCTRKkSCbXmJ0Fr1izlOZjPKih3KKZ+VZFWQU= Subject key identifier: 43:AC:C9:62:CC:AF:A4:AA:BA:C8:7D:FE:4D:FB:84:60:FC:DA:49:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8621CE47B306EF8D2931800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40d130f7-2cac-33b6-a724-ca125172097c.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 76.144.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:1c:e4:7b:30:6e:f8:d2:93:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=693afe4d-546c-4808-8eb5-bdadb2c1f7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:62:ac:71:bc:1b:0c:10:63:a3:aa:36:20: c1:8a:40:cb:79:74:28:97:62:9a:99:bf:b0:6b:6e: 34:57:cc:d7:8d:7e:c3:e7:9b:71:b2:b5:d5:cd:88: f7:e6:cd:95:2c:d4:50:a9:b3:34:24:b1:bc:98:f3: 22:37:db:bd:82:bb:41:54:4f:ef:c4:31:94:eb:53: cf:d6:f7:0c:af:e9:2e:d7:2a:07:08:17:3d:b1:4c: 6e:9e:58:60:84:18:3b:aa:2f:6d:f5:be:b9:10:37: b4:98:78:dc:71:5e:1f:57:bd:ac:19:76:ea:60:46: cb:2a:c3:1b:e9:d9:bc:3d:67:6b:b5:62:0c:70:19: ad:25:2e:42:55:06:b4:a2:6e:1c:58:91:4a:a4:0e: 8d:f9:00:9c:01:57:89:bc:e4:71:af:ed:d6:4f:a0: 6a:fc:c6:df:3a:e7:04:40:e9:c3:18:4d:f9:3a:e9: b4:45:30:7a:44:5a:69:83:1d:bb:fb:54:6c:87:77: 8f:ac:8e:03:e3:e4:7f:3c:4d:9f:16:c6:8b:bb:34: 1a:87:66:63:e2:c1:68:69:c4:83:4a:40:6b:c2:6a: 3f:3c:27:58:9b:d3:69:68:c9:14:cb:b3:1c:3b:63: 90:1c:cf:99:e8:a2:5c:cc:40:33:8e:c1:82:21:3c: 14:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AC:C9:62:CC:AF:A4:AA:BA:C8:7D:FE:4D:FB:84:60:FC:DA:49:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40d130f7-2cac-33b6-a724-ca125172097c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.144.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:86:1c:16:82:f6:bd:f1:0f:d0:66:77:c2:4d:38:9b:15:16: a7:40:63:d9:a8:19:72:a6:de:4b:84:9d:86:0d:b8:cd:68:74: c1:ba:94:44:7d:3c:a3:32:77:d4:ca:b7:0c:ac:ce:70:39:5e: b0:35:61:72:74:05:54:18:3a:12:8a:83:fe:80:0b:ac:ea:a1: 72:40:c2:ca:03:02:17:72:4f:e6:70:77:8e:9f:4d:c6:e8:1a: 3a:b5:81:6d:b6:77:a8:7f:f2:7c:ef:8a:ed:c4:76:5f:d5:c6: 75:c1:e0:ab:23:f3:0b:85:c4:72:5a:db:ee:0d:45:2c:10:ed: 4b:c9:4e:e3:9d:b3:e7:fc:16:b0:a0:53:c8:1f:6e:4d:f7:84: 33:65:6f:ed:74:35:42:24:64:a1:3f:82:80:ec:27:dc:7b:77: 67:d4:97:db:fa:5e:1d:56:a7:f0:d4:95:2c:7a:67:dd:c0:ed: 8d:ae:56:53:96:ac:1d:39:ad:d7:3f:a4:59:24:8b:ef:72:6a: 34:6b:2c:8f:d9:d3:7d:ca:57:3f:f1:de:0c:56:d0:76:3e:4d: 10:92:07:0e:c7:4e:f6:ef:99:af:59:9c:b3:e1:c0:50:63:56: 22:43:d3:e6:49:90:38:2c:e4:00:a6:08:04:b5:fd:d2:cd:37: fd:cf:6f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYhzkezBu+NKTGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NjkzYWZlNGQtNTQ2Yy00ODA4LThlYjUtYmRhZGIyYzFmN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG1irHG8GwwQY6OqNiDBikDLeXQol2Kamb+w a240V8zXjX7D55txsrXVzYj35s2VLNRQqbM0JLG8mPMiN9u9grtBVE/vxDGU61PP 1vcMr+ku1yoHCBc9sUxunlhghBg7qi9t9b65EDe0mHjccV4fV72sGXbqYEbLKsMb 6dm8PWdrtWIMcBmtJS5CVQa0om4cWJFKpA6N+QCcAVeJvORxr+3WT6Bq/MbfOucE QOnDGE35Oum0RTB6RFppgx27+1Rsh3ePrI4D4+R/PE2fFsaLuzQah2Zj4sFoacSD SkBrwmo/PCdYm9NpaMkUy7McO2OQHM+Z6KJczEAzjsGCITwUzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOsyWLMr6Sqush9/k37hGD82kmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBkMTMwZjctMmNhYy0z M2I2LWE3MjQtY2ExMjUxNzIwOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiGHBaC9r3xD9Bmd8JNOJsVFqdAY9moGXKm3kuEnYYNuM1odMG6lER9 PKMyd9TKtwysznA5XrA1YXJ0BVQYOhKKg/6AC6zqoXJAwsoDAhdyT+Zwd46fTcbo Gjq1gW22d6h/8nzviu3Edl/VxnXB4Ksj8wuFxHJa2+4NRSwQ7UvJTuOds+f8FrCg U8gfbk33hDNlb+10NUIkZKE/goDsJ9x7d2fUl9v6Xh1Wp/DUlSx6Z93A7Y2uVlOW rB05rdc/pFkki+9yajRrLI/Z033KVz/x3gxW0HY+TRCSBw7HTvbvma9ZnLPhwFBj ViJD0+ZJkDgs5ACmCAS1/dLNN/3Pb9o= -----END CERTIFICATE-----Generated at Sat Sep 5 10:18:07 2026 by rpki-client