$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/791e4b6e-3a22-3920-bcc3-c0123967e76c.roa File: 791e4b6e-3a22-3920-bcc3-c0123967e76c.roa (raw, json) Hash identifier: e9jBzjxpQY/4WahdwaBaaltbtIRg7KxskMtwSpNvYGg= Subject key identifier: D6:41:30:5B:04:7C:ED:E9:5F:6C:A6:9C:F3:1F:FF:BF:69:66:13:06 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119FAF21BB1CEEDC27CD7580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/791e4b6e-3a22-3920-bcc3-c0123967e76c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 76.157.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:af:21:bb:1c:ee:dc:27:cd:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=4a7f5722-6f6b-4a18-88f9-c8c7f22c908f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:99:cd:a9:8b:50:28:a4:a4:6b:43:9b:c4:3e: 57:0c:6d:a4:f8:94:43:5d:d9:04:d9:84:43:dd:bd: 6b:66:6f:2e:be:e9:84:10:26:67:f1:65:72:c6:15: 8c:98:fa:4e:36:25:20:9c:34:20:f7:66:31:c1:a8: 32:d3:4c:0e:be:8a:c2:7a:14:7e:c4:7d:00:77:b0: f7:d9:84:fa:c2:5c:c0:9c:9e:25:ac:43:a5:62:c6: f8:c9:37:15:07:8f:d1:17:35:b3:4d:89:c3:10:85: f8:f4:32:ab:31:fb:a6:c8:1a:0f:a8:1e:f1:ae:07: 4e:22:87:88:b1:91:03:21:22:33:16:81:ab:35:5d: 24:53:f9:da:89:a0:2a:25:b2:fc:01:35:59:f4:b2: c7:db:e8:e0:27:a5:da:93:05:08:05:62:55:2e:53: 1a:3f:ba:5d:ef:06:20:06:1d:c0:4f:61:10:35:c9: 85:c5:1a:02:c4:3b:5d:16:81:7c:1a:43:0c:45:a4: d7:d3:f4:b8:4a:90:1d:e7:f2:86:fd:4d:a1:51:73: a9:f1:90:12:73:25:3c:67:dd:f2:a3:7b:da:b0:b7: 12:7f:15:10:e0:1c:ad:0c:76:90:73:da:48:e5:d6: f6:78:94:23:9d:93:fc:26:49:ed:c9:3d:52:95:85: 80:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:41:30:5B:04:7C:ED:E9:5F:6C:A6:9C:F3:1F:FF:BF:69:66:13:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/791e4b6e-3a22-3920-bcc3-c0123967e76c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.157.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:89:3c:4a:bd:31:d8:ff:26:cf:a7:22:92:e7:77:33:d5:78: cc:32:a7:60:4f:7f:b0:29:e9:08:4d:d7:54:74:e0:e7:12:79: a3:06:82:f6:01:3a:36:96:66:43:6b:a5:e5:92:04:e0:d5:b9: 39:c5:04:78:bc:8b:4a:90:04:96:0d:56:bf:c4:4e:30:f3:8c: 27:71:2b:12:74:64:9c:6d:f2:da:21:f3:ce:2f:eb:1d:2e:e0: e3:84:4e:ad:04:a5:93:52:ce:d5:11:29:9a:61:3a:c2:66:00: 81:db:ea:a5:57:bd:61:19:c1:a5:42:a8:87:72:5d:b6:81:0e: 2e:a6:88:3e:51:ae:36:04:a2:30:c5:3f:e8:12:3d:1a:14:ee: e5:24:7a:05:81:e8:3a:72:11:d1:95:ef:54:21:af:c5:9c:f3: 38:37:91:2c:0c:d4:fe:fd:8f:21:03:10:e9:be:66:70:b1:d9: 16:de:f8:d7:15:6d:ed:24:aa:6f:2c:ef:23:25:8f:33:2f:f5: d9:56:d3:cf:5e:15:2d:12:b5:42:eb:f5:2c:7b:df:be:ad:39: e0:78:80:ee:e9:91:d7:cb:6f:91:4a:52:a4:e4:e2:51:81:85: 14:a1:5d:dc:53:ea:00:c1:15:52:7e:d1:c7:9d:d0:de:b4:5f: 13:a2:2f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rn68huxzu3CfNdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NGE3ZjU3MjItNmY2Yi00YTE4LTg4ZjktYzhjN2YyMmM5MDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJnNqYtQKKSka0ObxD5XDG2k+JRDXdkE2YRD 3b1rZm8uvumEECZn8WVyxhWMmPpONiUgnDQg92Yxwagy00wOvorCehR+xH0Ad7D3 2YT6wlzAnJ4lrEOlYsb4yTcVB4/RFzWzTYnDEIX49DKrMfumyBoPqB7xrgdOIoeI sZEDISIzFoGrNV0kU/naiaAqJbL8ATVZ9LLH2+jgJ6XakwUIBWJVLlMaP7pd7wYg Bh3AT2EQNcmFxRoCxDtdFoF8GkMMRaTX0/S4SpAd5/KG/U2hUXOp8ZAScyU8Z93y o3vasLcSfxUQ4BytDHaQc9pI5db2eJQjnZP8JkntyT1SlYWAVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZBMFsEfO3pX2ymnPMf/79pZhMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzkxZTRiNmUtM2EyMi0z OTIwLWJjYzMtYzAxMjM5NjdlNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJ0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSJPEq9Mdj/Js+nIpLndzPVeMwyp2BPf7Ap6QhN11R04OcSeaMGgvYB OjaWZkNrpeWSBODVuTnFBHi8i0qQBJYNVr/ETjDzjCdxKxJ0ZJxt8toh884v6x0u 4OOETq0EpZNSztURKZphOsJmAIHb6qVXvWEZwaVCqIdyXbaBDi6miD5RrjYEojDF P+gSPRoU7uUkegWB6DpyEdGV71Qhr8Wc8zg3kSwM1P79jyEDEOm+ZnCx2Rbe+NcV be0kqm8s7yMljzMv9dlW089eFS0StULr9Sx7376tOeB4gO7pkdfLb5FKUqTk4lGB hRShXdxT6gDBFVJ+0ced0N60XxOiLyc= -----END CERTIFICATE-----Generated at Sat Sep 5 14:23:15 2026 by rpki-client