$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c40bb2b-096b-33b0-a1fe-8393d4760149.roa File: 5c40bb2b-096b-33b0-a1fe-8393d4760149.roa (raw, json) Hash identifier: Bi9etcD9TPIIb+ruSa5MDlCPc5UPEPbZwYQbOwPASsc= Subject key identifier: 40:68:21:C5:57:AA:E5:CE:5B:BF:4B:76:82:FC:1C:D7:7D:FE:C7:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119F9E02424849310D709A30 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c40bb2b-096b-33b0-a1fe-8393d4760149.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 76.141.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:9e:02:42:48:49:31:0d:70:9a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=653f4c88-bc54-4048-aa19-12f74a9cc90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6a:2c:23:9d:b3:97:15:f6:4a:59:47:a2:a4: 40:42:2b:92:ef:78:2f:5f:c4:37:da:78:1e:27:0e: 8b:7a:0f:57:77:30:2e:87:8c:e2:3e:00:63:63:59: 9b:48:08:a0:4a:57:0d:ef:9c:0d:76:f0:28:80:7b: d6:a9:94:8c:9e:78:1e:b8:93:3b:5c:38:6c:d7:7c: d1:88:bf:f2:f9:ab:af:ab:ff:d3:9a:be:d6:3b:44: 8f:a1:6b:0e:37:eb:9e:06:6b:09:87:9e:80:e0:fc: 70:25:29:66:77:d8:e3:e3:21:e7:19:7a:65:50:2e: 80:88:4a:5b:f0:78:26:67:5e:60:43:e1:0e:bf:3f: 2a:9b:8e:06:74:db:42:7f:4f:13:63:8a:15:2c:3b: 0a:e6:c6:e6:e2:13:d5:e4:47:3e:b7:50:bb:5b:09: 7d:45:f5:76:d7:f2:3a:19:18:72:61:b6:19:d2:b6: fc:7c:49:45:43:9d:ac:21:a5:db:ef:43:ee:6f:62: f1:8c:39:ef:0f:49:da:38:26:70:38:ef:2b:db:98: 97:54:17:a9:27:c2:70:ca:83:bd:87:73:0d:43:5e: 1f:f9:36:ac:36:93:84:2d:39:29:51:b9:8c:e4:ba: 2f:b8:ab:e6:74:12:09:9d:3d:a1:5d:82:84:f4:03: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:68:21:C5:57:AA:E5:CE:5B:BF:4B:76:82:FC:1C:D7:7D:FE:C7:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c40bb2b-096b-33b0-a1fe-8393d4760149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.141.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:56:0b:6d:72:16:9c:e3:28:23:67:be:f2:30:94:ae:d5:9b: 5d:f0:a5:c6:68:d4:30:d0:ca:da:f5:82:c2:b2:54:33:62:d5: e8:5c:c9:1c:5c:65:40:43:4d:ae:06:72:ab:8a:40:ea:9a:f8: ce:31:13:f4:52:04:f6:47:1a:b3:e6:69:3d:08:67:62:f5:35: 27:aa:97:ca:7d:9f:71:bb:2b:06:88:db:60:4a:cd:11:0e:89: 65:24:b2:56:59:0f:55:31:c2:73:9a:ab:32:00:76:c3:d6:36: 98:b6:62:3b:75:2f:07:7b:81:56:2c:32:e1:e7:62:13:8c:44: 8e:01:6a:3b:70:cc:65:81:ae:99:24:2b:d8:64:e8:af:6e:ab: 38:fe:86:31:56:6f:5a:cd:2a:b6:aa:71:c4:a3:1f:69:0a:e3: b1:3d:2e:e2:7f:e4:03:53:fb:7d:7a:0f:d8:2d:16:a8:50:18: 75:36:de:39:6e:0a:a8:6d:b8:7f:8a:10:e4:90:c3:94:58:d0: 7e:d1:f2:ad:5a:13:bc:3c:e3:37:ab:40:bb:97:c9:95:81:a8: 9e:08:19:e2:26:42:50:ed:bc:02:0a:14:da:3c:d3:ae:8f:f5: 57:9d:53:67:aa:a6:ed:f1:43:7b:20:b6:dc:67:ea:45:78:e6: 70:91:a2:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rn54CQkhJMQ1wmjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NjUzZjRjODgtYmM1NC00MDQ4LWFhMTktMTJmNzRhOWNjOTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWosI52zlxX2SllHoqRAQiuS73gvX8Q32nge Jw6Leg9XdzAuh4ziPgBjY1mbSAigSlcN75wNdvAogHvWqZSMnngeuJM7XDhs13zR iL/y+auvq//Tmr7WO0SPoWsON+ueBmsJh56A4PxwJSlmd9jj4yHnGXplUC6AiEpb 8HgmZ15gQ+EOvz8qm44GdNtCf08TY4oVLDsK5sbm4hPV5Ec+t1C7Wwl9RfV21/I6 GRhyYbYZ0rb8fElFQ52sIaXb70Pub2LxjDnvD0naOCZwOO8r25iXVBepJ8JwyoO9 h3MNQ14f+TasNpOELTkpUbmM5LovuKvmdBIJnT2hXYKE9AOWfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBoIcVXquXOW79LdoL8HNd9/sfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWM0MGJiMmItMDk2Yi0z M2IwLWExZmUtODM5M2Q0NzYwMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANFWC21yFpzjKCNnvvIwlK7Vm13wpcZo1DDQytr1gsKyVDNi1ehcyRxc ZUBDTa4GcquKQOqa+M4xE/RSBPZHGrPmaT0IZ2L1NSeql8p9n3G7KwaI22BKzREO iWUkslZZD1UxwnOaqzIAdsPWNpi2Yjt1Lwd7gVYsMuHnYhOMRI4BajtwzGWBrpkk K9hk6K9uqzj+hjFWb1rNKraqccSjH2kK47E9LuJ/5ANT+316D9gtFqhQGHU23jlu CqhtuH+KEOSQw5RY0H7R8q1aE7w84zerQLuXyZWBqJ4IGeImQlDtvAIKFNo8066P 9VedU2eqpu3xQ3sgttxn6kV45nCRopk= -----END CERTIFICATE-----Generated at Sat Sep 5 15:21:15 2026 by rpki-client