$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8023c8b8-f08f-34a7-91fe-a658aa5f6b98.roa File: 8023c8b8-f08f-34a7-91fe-a658aa5f6b98.roa (raw, json) Hash identifier: +wYx+Ic8H6ok1MW2m/k47PeMDY5yfwtjkmIxGm7S5LE= Subject key identifier: F4:50:09:89:7D:1D:C3:F0:D1:FC:97:C1:6D:D8:03:CA:C0:7A:32:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4DCBEAD0246F62C866E680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8023c8b8-f08f-34a7-91fe-a658aa5f6b98.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 76.115.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:cb:ea:d0:24:6f:62:c8:66:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=9f29a399-325d-4aea-ae42-8021e0cf5d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b6:36:eb:1c:ea:22:d2:85:f3:79:8a:cf:65: a4:0b:e2:a4:df:8b:eb:cb:4c:2c:96:ae:f7:e7:ee: b6:6d:a1:db:e5:72:c0:0b:4e:85:83:79:48:45:dc: 21:33:af:9e:9f:d2:cd:bf:bb:56:6d:93:78:30:0f: e9:55:f1:6d:fd:2b:29:b9:ee:da:77:c3:56:61:14: f6:3b:55:62:1c:fb:55:fd:64:26:64:d2:11:44:4a: d0:7d:cf:10:03:a6:eb:2e:43:f1:ec:bb:86:73:3c: bb:fb:04:15:99:af:52:03:e6:21:eb:4c:77:44:1d: 8a:38:5d:0f:18:48:70:f5:67:56:82:f1:cc:39:e8: da:f0:00:ae:db:cb:1c:c0:8d:31:eb:f4:a3:3b:c9: 86:01:be:b9:93:94:b5:35:38:f1:45:e1:c5:6a:1f: 88:fa:ba:12:81:4b:84:7f:94:24:26:4e:57:1a:34: 91:1b:0e:0f:d9:9d:32:76:cf:28:43:d5:0f:f8:a1: 3f:fa:ba:ee:3d:d6:df:dc:aa:c0:cb:0e:61:64:df: 09:a4:73:65:e0:78:e2:35:cf:b8:0e:bc:97:e7:da: 1e:06:4b:f7:66:82:33:48:ee:84:85:ab:ab:a6:32: 0c:58:3e:f4:f9:90:97:ef:2d:bc:fc:bd:a8:09:49: 70:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:50:09:89:7D:1D:C3:F0:D1:FC:97:C1:6D:D8:03:CA:C0:7A:32:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8023c8b8-f08f-34a7-91fe-a658aa5f6b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.115.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e2:02:88:84:a2:6d:68:f1:92:00:cf:a2:d8:ba:61:1e:a4: 25:52:d9:12:28:65:1a:88:f3:3c:d6:85:aa:ae:a6:9d:3e:38: fe:c1:90:2b:c8:bb:ef:b3:69:47:d6:aa:70:7f:35:b3:79:09: a3:aa:52:30:ad:15:5c:9e:15:06:cd:10:91:16:78:04:cf:e6: 54:b1:57:7c:50:45:52:7e:f9:3f:ea:ee:96:93:df:f3:60:12: 20:19:54:c3:34:b5:5d:90:88:77:51:29:9a:fe:d7:46:8a:b8: 8b:a1:bb:41:ca:7a:7f:a4:2d:bc:1d:b9:58:e4:67:4c:a6:8f: 74:eb:0e:30:d7:64:89:84:8c:0e:cc:f1:ec:1a:af:34:1c:29: e5:23:93:fc:a7:f0:e0:01:ea:1c:66:c2:d4:b9:25:a4:8e:10: f7:b2:97:9a:07:50:c6:ae:23:3e:42:d1:a8:be:7f:28:86:ae: d5:b7:b8:fc:fc:ea:00:b8:8d:a5:6a:d4:fe:a1:f7:7d:71:ae: 3a:e9:c6:27:8d:d9:b8:b0:af:d3:bd:3e:2e:67:54:1f:27:0f: c7:7c:57:0b:d3:c3:63:1b:9c:98:46:ac:a2:96:77:b3:17:96: 13:2a:de:21:ee:3e:cd:96:90:0f:1c:3d:0b:12:ea:b2:79:56: c3:39:12:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tcvq0CRvYshm5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk OWYyOWEzOTktMzI1ZC00YWVhLWFlNDItODAyMWUwY2Y1ZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLY26xzqItKF83mKz2WkC+Kk34vry0wslq73 5+62baHb5XLAC06Fg3lIRdwhM6+en9LNv7tWbZN4MA/pVfFt/Sspue7ad8NWYRT2 O1ViHPtV/WQmZNIRRErQfc8QA6brLkPx7LuGczy7+wQVma9SA+Yh60x3RB2KOF0P GEhw9WdWgvHMOeja8ACu28scwI0x6/SjO8mGAb65k5S1NTjxReHFah+I+roSgUuE f5QkJk5XGjSRGw4P2Z0yds8oQ9UP+KE/+rruPdbf3KrAyw5hZN8JpHNl4HjiNc+4 DryX59oeBkv3ZoIzSO6EhaurpjIMWD70+ZCX7y28/L2oCUlwNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRQCYl9HcPw0fyXwW3YA8rAejLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODAyM2M4YjgtZjA4Zi0z NGE3LTkxZmUtYTY1OGFhNWY2Yjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFziAoiEom1o8ZIAz6LYumEepCVS2RIoZRqI8zzWhaqupp0+OP7BkCvI u++zaUfWqnB/NbN5CaOqUjCtFVyeFQbNEJEWeATP5lSxV3xQRVJ++T/q7paT3/Ng EiAZVMM0tV2QiHdRKZr+10aKuIuhu0HKen+kLbwduVjkZ0ymj3TrDjDXZImEjA7M 8ewarzQcKeUjk/yn8OAB6hxmwtS5JaSOEPeyl5oHUMauIz5C0ai+fyiGrtW3uPz8 6gC4jaVq1P6h931xrjrpxieN2biwr9O9Pi5nVB8nD8d8VwvTw2MbnJhGrKKWd7MX lhMq3iHuPs2WkA8cPQsS6rJ5VsM5ElA= -----END CERTIFICATE-----Generated at Tue Oct 20 20:31:17 2026 by rpki-client