$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c8f1d9-5d4f-3b72-b53b-95f89e71ab85.roa File: 42c8f1d9-5d4f-3b72-b53b-95f89e71ab85.roa (raw, json) Hash identifier: eiiNnTwwsX+C6DchvVhSR5Ruuv7aHtEdylQCE4WCXjA= Subject key identifier: 7B:53:B5:13:80:9E:28:B1:7F:54:FF:29:87:73:19:A7:CB:47:17:F9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4981F92605F8878438E88480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c8f1d9-5d4f-3b72-b53b-95f89e71ab85.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13367 IP address blocks: 96.97.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:f9:26:05:f8:87:84:38:e8:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bb0bfbc8-a9dd-41b1-beef-d29daa671f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2f:ea:74:cc:f9:30:0e:d9:43:6e:c8:ca:7c: f6:9b:e6:48:0a:c5:52:9d:b6:89:99:74:e8:22:23: 77:54:55:79:01:64:eb:a6:72:68:fb:22:34:32:42: 0b:a3:bf:f9:27:98:78:38:e6:df:04:d2:0e:fa:9b: 3d:94:af:1c:c0:79:7d:41:1d:27:2d:24:de:b1:54: af:71:6f:b4:45:21:94:80:da:4e:23:98:b5:f4:8f: 44:5b:1f:38:95:e4:1f:5d:5a:02:f0:a7:66:f8:7b: df:0b:cd:d9:70:e8:17:94:b6:7d:a9:4a:63:2f:31: 1c:e3:ba:7d:d8:87:e5:ce:df:b1:e5:f1:8a:09:31: aa:a8:42:1f:da:92:c0:62:94:1e:c9:08:49:6e:0b: 9e:79:60:47:be:58:ad:28:7b:60:51:46:bb:a4:ea: 7b:0b:80:f0:cb:c7:01:aa:ca:ce:84:c4:b1:7c:4a: 2e:90:ac:cf:21:a7:f1:14:a4:24:e2:75:e8:16:da: 98:ca:29:c2:3d:17:2f:56:49:e7:91:9d:3e:ae:ec: d1:9a:3f:a1:96:93:e9:94:b6:39:9d:e2:13:a6:81: b1:88:07:35:26:0c:58:b0:89:da:6d:1d:fb:45:3e: 89:95:4c:bd:d8:7b:d1:eb:5f:ea:99:2f:37:26:d0: 7f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:53:B5:13:80:9E:28:B1:7F:54:FF:29:87:73:19:A7:CB:47:17:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c8f1d9-5d4f-3b72-b53b-95f89e71ab85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.97.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:1c:9b:da:d4:1f:21:61:0d:2f:7c:3e:ce:26:a9:d7:39:e7: 61:95:f6:64:b8:3d:b6:c3:b1:bc:05:2d:b4:88:e5:b7:6d:68: e3:63:38:f4:1b:30:20:9b:b3:3f:55:53:53:07:ae:21:60:03: 93:e1:56:ee:d5:8b:9e:74:19:bc:41:0e:99:7f:bd:c9:76:53: 32:73:26:62:dd:b6:2b:04:76:2e:30:1b:c2:68:4d:bf:8d:a4: 1d:d7:0c:25:75:1b:75:9e:fc:52:f5:b1:02:78:d1:f2:f8:2c: 60:ef:83:4d:6c:d5:f4:78:22:ba:33:b4:2a:fe:86:1e:68:2e: ce:0c:2d:e5:44:f1:8d:9c:b7:d6:24:2c:fb:9f:e5:d2:02:6c: 80:e4:cb:d8:76:8e:57:fa:3f:00:ac:60:7f:a9:31:fe:ad:68: 22:f6:3e:7b:05:b5:7c:77:3d:2c:4c:a4:10:1b:61:88:67:93: c4:fd:6a:bc:78:42:61:87:45:a2:80:a5:5e:c5:3b:85:60:2e: 8d:9a:9f:af:11:40:4e:86:94:b4:4d:62:50:14:3b:cd:b8:b7: 2f:f6:e6:e7:5c:0f:aa:78:91:f4:c4:b1:53:5c:d6:7c:f4:c2: e8:e0:24:0d:26:59:c2:ab:11:5d:75:be:2a:f6:f1:aa:b5:e1: 95:d1:d7:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgfkmBfiHhDjohIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmIwYmZiYzgtYTlkZC00MWIxLWJlZWYtZDI5ZGFhNjcxZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC/qdMz5MA7ZQ27Iynz2m+ZICsVSnbaJmXTo IiN3VFV5AWTrpnJo+yI0MkILo7/5J5h4OObfBNIO+ps9lK8cwHl9QR0nLSTesVSv cW+0RSGUgNpOI5i19I9EWx84leQfXVoC8Kdm+HvfC83ZcOgXlLZ9qUpjLzEc47p9 2Iflzt+x5fGKCTGqqEIf2pLAYpQeyQhJbgueeWBHvlitKHtgUUa7pOp7C4Dwy8cB qsrOhMSxfEoukKzPIafxFKQk4nXoFtqYyinCPRcvVknnkZ0+ruzRmj+hlpPplLY5 neITpoGxiAc1JgxYsInabR37RT6JlUy92HvR61/qmS83JtB/HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtTtROAniixf1T/KYdzGafLRxf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDJjOGYxZDktNWQ0Zi0z YjcyLWI1M2ItOTVmODllNzFhYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYGHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkcm9rUHyFhDS98Ps4mqdc552GV9mS4PbbDsbwFLbSI5bdtaONjOPQb MCCbsz9VU1MHriFgA5PhVu7Vi550GbxBDpl/vcl2UzJzJmLdtisEdi4wG8JoTb+N pB3XDCV1G3We/FL1sQJ40fL4LGDvg01s1fR4IroztCr+hh5oLs4MLeVE8Y2ct9Yk LPuf5dICbIDky9h2jlf6PwCsYH+pMf6taCL2PnsFtXx3PSxMpBAbYYhnk8T9arx4 QmGHRaKApV7FO4VgLo2an68RQE6GlLRNYlAUO824ty/25udcD6p4kfTEsVNc1nz0 wujgJA0mWcKrEV11vir28aq14ZXR18E= -----END CERTIFICATE-----Generated at Tue Oct 20 14:27:10 2026 by rpki-client