$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ecc7265-a157-3156-8dc4-50b5d51a1c4a.roa File: 7ecc7265-a157-3156-8dc4-50b5d51a1c4a.roa (raw, json) Hash identifier: 33lqAtyCU6iHcj5w09vpmrIbDWTXObcEJHTsZjg3K84= Subject key identifier: 43:0D:E2:F3:7A:65:9C:8A:A6:EE:05:58:85:84:BC:E8:DA:27:48:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4FEC786B3D0BDA42CBC1E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ecc7265-a157-3156-8dc4-50b5d51a1c4a.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 76.31.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:ec:78:6b:3d:0b:da:42:cb:c1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=7e3a7bf5-21dc-4e14-b820-1fa557b8af98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:de:b9:66:24:f0:fb:94:ee:5d:eb:53:a4: 66:3e:4e:2f:43:52:fd:de:03:c3:f3:8d:38:fd:29: e4:f3:d8:31:b3:f2:e2:ce:c3:39:d4:9c:9d:d0:93: 97:cd:6d:4b:26:1e:01:fd:df:e9:4e:ad:5d:b0:a8: 86:d8:88:b6:f8:1d:f8:b3:47:e6:6c:a6:f5:0b:62: 42:18:cf:6c:b0:94:1f:68:62:47:f6:f4:0c:77:2a: bc:77:75:c0:16:47:ef:bd:76:3a:11:eb:8f:8e:6b: b2:df:7a:ab:90:fc:e3:19:c7:af:4e:95:eb:8a:6e: 8f:0a:ef:fa:5b:66:a4:86:2f:a2:68:53:f9:fb:ff: d1:4a:8f:9b:26:dc:79:ab:ca:2e:4b:ce:d4:d5:d5: 46:39:ee:2a:78:7c:52:7f:cd:46:5a:a6:64:49:a9: 3d:96:0c:69:af:f2:d2:d6:9e:17:d4:05:94:3f:ce: e7:0c:53:0e:5c:38:ac:ff:f0:c1:3d:33:3b:30:2a: 6f:d6:ce:34:87:57:a6:61:be:5a:bb:87:6a:48:39: 62:e1:94:40:90:cb:73:f0:27:5b:20:59:d3:f9:bd: 13:c5:d0:81:91:83:43:2e:38:94:eb:fb:29:4d:0b: 0f:db:e7:3e:8a:20:b6:b8:61:dc:cd:7e:a5:0f:fb: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0D:E2:F3:7A:65:9C:8A:A6:EE:05:58:85:84:BC:E8:DA:27:48:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ecc7265-a157-3156-8dc4-50b5d51a1c4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.31.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:7b:59:74:8a:41:2e:5a:e2:f6:ab:e7:41:0b:7c:59:86:ad: f4:6a:2d:fd:07:4a:30:47:43:e3:1f:d1:ea:ef:07:47:3b:77: b4:19:fa:a8:3a:59:35:99:50:49:24:cc:16:5d:54:c0:1f:ba: a2:3a:d0:7d:aa:29:90:e4:2c:67:6c:a8:32:78:89:06:12:44: f7:e1:d2:15:fb:a2:29:26:ef:05:ec:b2:a2:19:c1:4b:b2:fa: 73:f9:37:88:55:25:2d:b1:90:27:27:9d:81:72:74:0e:64:5b: ef:3b:72:a6:b4:b4:22:08:b7:1d:a6:99:c4:dc:58:a2:1b:9e: 3f:4a:6e:40:23:5d:ec:27:4e:d9:fb:d8:fa:20:b6:27:57:fc: f3:a0:af:39:3f:b9:84:22:be:30:e1:eb:16:b2:73:7e:99:6d: 99:25:fb:02:1d:0e:4b:5b:19:b8:f8:6d:0b:71:7f:33:d4:bd: b6:11:c4:46:34:01:d6:01:da:90:a9:6e:cc:b3:85:05:a5:4c: ec:67:43:3e:c7:ea:0f:15:7e:93:ee:7f:85:a5:f4:77:4b:28: 23:65:56:7d:9c:83:c1:6d:c1:69:85:06:d8:7d:df:81:ed:9a: 6a:82:9f:7d:82:e9:f6:83:37:58:bd:c8:24:73:98:16:37:72: 54:2e:4c:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T+x4az0L2kLLweAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk N2UzYTdiZjUtMjFkYy00ZTE0LWI4MjAtMWZhNTU3YjhhZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxjeuWYk8PuU7l3rU6RmPk4vQ1L93gPD8404 /Snk89gxs/LizsM51Jyd0JOXzW1LJh4B/d/pTq1dsKiG2Ii2+B34s0fmbKb1C2JC GM9ssJQfaGJH9vQMdyq8d3XAFkfvvXY6EeuPjmuy33qrkPzjGcevTpXrim6PCu/6 W2akhi+iaFP5+//RSo+bJtx5q8ouS87U1dVGOe4qeHxSf81GWqZkSak9lgxpr/LS 1p4X1AWUP87nDFMOXDis//DBPTM7MCpv1s40h1emYb5au4dqSDli4ZRAkMtz8Cdb IFnT+b0TxdCBkYNDLjiU6/spTQsP2+c+iiC2uGHczX6lD/s47wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMN4vN6ZZyKpu4FWIWEvOjaJ0glMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2VjYzcyNjUtYTE1Ny0z MTU2LThkYzQtNTBiNWQ1MWExYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTB/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ17WXSKQS5a4var50ELfFmGrfRqLf0HSjBHQ+Mf0ervB0c7d7QZ+qg6 WTWZUEkkzBZdVMAfuqI60H2qKZDkLGdsqDJ4iQYSRPfh0hX7oikm7wXssqIZwUuy +nP5N4hVJS2xkCcnnYFydA5kW+87cqa0tCIItx2mmcTcWKIbnj9KbkAjXewnTtn7 2PogtidX/POgrzk/uYQivjDh6xayc36ZbZkl+wIdDktbGbj4bQtxfzPUvbYRxEY0 AdYB2pCpbsyzhQWlTOxnQz7H6g8VfpPuf4Wl9HdLKCNlVn2cg8FtwWmFBth934Ht mmqCn32C6faDN1i9yCRzmBY3clQuTDQ= -----END CERTIFICATE-----Generated at Sat Oct 24 11:38:58 2026 by rpki-client