$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/489e5051-9c28-34a2-938f-b94f3c26f635.roa File: 489e5051-9c28-34a2-938f-b94f3c26f635.roa (raw, json) Hash identifier: BeZNqqgkfDDB4p745XpI4wUAbWdutLKNogk6Bn/B1es= Subject key identifier: 7C:1B:14:C0:40:63:A0:12:6C:E7:20:2C:F1:D8:43:97:B8:C0:5A:FE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F06724D0B8EC6C7E17754DDC8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/489e5051-9c28-34a2-938f-b94f3c26f635.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 33656 IP address blocks: 96.109.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:4d:0b:8e:c6:c7:e1:77:54:dd:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=2d1b8609-73c1-444d-b9e7-541421aff107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:08:40:a2:ee:0b:a0:d0:15:82:a8:a6:f2:66: 52:3f:b3:6c:9c:c0:ec:e8:c0:27:79:82:95:c1:33: ab:51:e6:54:da:58:8c:e3:fa:d6:43:e6:5d:d6:00: 23:58:fa:6f:6e:ea:1a:c2:93:d1:ba:36:84:c1:ba: 2d:b7:d8:cd:17:fc:1b:b0:df:dc:b4:3c:30:b5:ca: 29:b6:96:ae:d7:d9:72:eb:43:8d:33:b1:55:0d:3e: 00:24:98:b2:1d:e3:c1:b1:84:55:f1:4f:b2:ef:d9: 91:d1:3c:5c:ea:37:39:40:d7:4b:28:13:ab:36:00: 18:5c:a7:85:50:f0:58:bd:a4:71:23:c8:a8:24:ef: a3:2e:73:cd:f4:eb:10:f8:cd:f2:d9:9f:aa:01:1e: 29:bf:b0:de:0b:c2:67:45:55:01:64:be:c9:59:cd: 9e:49:2a:55:d1:20:a6:d9:71:31:5c:7a:0f:9c:fb: ed:0c:4e:72:93:57:a9:d8:0d:ef:94:75:4b:65:aa: 16:df:03:55:d3:1b:62:e2:e6:32:19:37:0d:9c:64: 8e:ca:a0:6c:5a:30:dd:e3:12:9d:60:d0:cf:4d:40: 8e:cd:20:9f:6d:e7:de:68:c7:27:ac:82:d6:cd:fe: 03:0e:73:0e:fc:e2:7b:d9:f4:f0:47:45:e6:dc:c3: c9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1B:14:C0:40:63:A0:12:6C:E7:20:2C:F1:D8:43:97:B8:C0:5A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/489e5051-9c28-34a2-938f-b94f3c26f635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.109.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:c2:17:b2:0f:9f:5b:3e:26:c4:e7:b3:c1:ca:02:4b:65:00: 7a:0d:73:25:21:9a:13:30:6a:f3:e3:cd:6d:3c:4e:7e:86:13: 9f:b5:4c:5c:e6:ab:ba:5c:3c:1c:fd:d5:13:ff:52:a3:9c:ce: 3c:43:f7:d4:f7:85:67:f1:c0:43:fc:50:e3:56:37:c1:97:41: 3a:ac:e9:d4:d2:b5:a0:28:97:6a:c9:b2:58:a4:95:86:0c:63: 95:fc:0b:98:91:8d:ef:33:20:55:bd:bf:88:02:5f:c7:09:5b: b1:6e:d3:ab:0e:66:33:a2:13:cc:8b:5b:8d:89:81:ec:78:24: 22:ca:54:ab:44:49:29:95:15:c3:74:ca:c5:f9:d2:13:92:52: fb:94:39:d8:43:f4:f0:ce:79:74:2b:df:1e:8d:13:d9:c5:36: 90:c7:26:87:e2:96:33:f5:02:e5:5a:98:05:3d:ef:cd:33:a4: 4c:b1:0d:97:e0:af:0c:1c:f7:ce:87:aa:17:19:98:44:43:38: 95:1e:ce:2b:5e:1b:ab:af:45:7a:3c:76:77:66:19:dc:08:47: 68:bd:e4:7d:6e:87:4c:63:a3:d9:d5:35:e9:44:c7:38:9d:0f: 92:de:43:b4:84:48:cf:be:34:ab:b5:16:32:b7:1c:05:7c:ca: 66:24:41:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gck0LjsbH4XdU3cgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MmQxYjg2MDktNzNjMS00NDRkLWI5ZTctNTQxNDIxYWZmMTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwhAou4LoNAVgqim8mZSP7NsnMDs6MAneYKV wTOrUeZU2liM4/rWQ+Zd1gAjWPpvbuoawpPRujaEwbott9jNF/wbsN/ctDwwtcop tpau19ly60ONM7FVDT4AJJiyHePBsYRV8U+y79mR0Txc6jc5QNdLKBOrNgAYXKeF UPBYvaRxI8ioJO+jLnPN9OsQ+M3y2Z+qAR4pv7DeC8JnRVUBZL7JWc2eSSpV0SCm 2XExXHoPnPvtDE5yk1ep2A3vlHVLZaoW3wNV0xti4uYyGTcNnGSOyqBsWjDd4xKd YNDPTUCOzSCfbefeaMcnrILWzf4DDnMO/OJ72fTwR0Xm3MPJpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwbFMBAY6ASbOcgLPHYQ5e4wFr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDg5ZTUwNTEtOWMyOC0z NGEyLTkzOGYtYjk0ZjNjMjZmNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYG1mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/CF7IPn1s+JsTns8HKAktlAHoNcyUhmhMwavPjzW08Tn6GE5+1TFzm q7pcPBz91RP/UqOczjxD99T3hWfxwEP8UONWN8GXQTqs6dTStaAol2rJsliklYYM Y5X8C5iRje8zIFW9v4gCX8cJW7Fu06sOZjOiE8yLW42Jgex4JCLKVKtESSmVFcN0 ysX50hOSUvuUOdhD9PDOeXQr3x6NE9nFNpDHJofiljP1AuVamAU9780zpEyxDZfg rwwc986HqhcZmERDOJUeziteG6uvRXo8dndmGdwIR2i95H1uh0xjo9nVNelExzid D5LeQ7SESM++NKu1FjK3HAV8ymYkQas= -----END CERTIFICATE-----Generated at Sat Sep 5 03:24:35 2026 by rpki-client