$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa83b24d-21c2-3a81-9292-6d2c0f11c9e5.roa File: aa83b24d-21c2-3a81-9292-6d2c0f11c9e5.roa (raw, json) Hash identifier: T7U6u7ced4rovXvHZc3o0brjkPMG8FV1JlbjgWwL3p4= Subject key identifier: F0:C2:0F:B9:29:51:E2:30:B8:B5:F3:C7:69:EE:27:0F:F7:D9:36:A6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F00EB476D57C4CE6421C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa83b24d-21c2-3a81-9292-6d2c0f11c9e5.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 76.144.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:00:eb:47:6d:57:c4:ce:64:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=2c72a6df-caab-4af1-bf10-d01ae521976b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f1:7e:cd:a1:c0:52:82:4f:06:5f:0c:b8:9f: 0a:5f:3b:fd:51:ba:14:58:16:4d:f1:68:ad:9e:37: 00:9a:21:03:d3:cc:90:db:be:83:72:b2:77:68:ee: 13:40:ac:7b:a8:eb:0d:e3:f1:ed:8e:4c:61:b9:5a: 13:c0:7e:f8:e8:e1:77:36:08:6e:fd:6b:c3:aa:d8: 0d:06:04:64:0d:05:c4:e1:07:07:ac:8e:d3:f0:12: f9:44:bd:97:2e:e2:21:e3:73:10:2f:dc:f4:66:86: 48:48:ba:4a:08:85:d7:78:11:3d:14:bf:40:43:7b: 77:2d:dc:df:4f:51:a9:5b:82:26:d7:74:90:59:17: 42:09:80:31:79:d2:e2:38:d6:43:0f:c5:91:32:d8: a3:69:ac:bb:94:73:06:26:57:d8:f7:15:51:cd:0b: 51:69:02:27:5c:79:9f:b8:a8:a7:44:73:5f:f1:53: 99:f8:a4:6c:75:6a:8d:4d:c3:4f:e9:c3:e3:f5:b6: b7:a1:77:97:0d:7c:b9:36:36:42:76:a8:ee:52:b8: 95:3c:b0:77:0b:c2:7c:dd:88:8b:04:96:e8:80:1c: c3:83:09:9c:a5:bf:05:33:f6:7f:8b:15:79:75:f1: 61:78:90:da:14:63:2a:eb:a3:19:e4:da:66:06:d9: fc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C2:0F:B9:29:51:E2:30:B8:B5:F3:C7:69:EE:27:0F:F7:D9:36:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa83b24d-21c2-3a81-9292-6d2c0f11c9e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.144.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ad:40:a7:6c:fc:2b:1f:42:a4:e2:a1:48:33:de:a5:e0:df: 8b:e0:b1:4b:42:a2:27:09:26:28:2f:61:de:32:98:4f:6e:be: 2f:8e:05:dd:65:eb:d4:ef:59:13:e1:44:66:2d:34:92:87:66: 9d:4b:cd:86:ec:0f:67:78:76:c2:ab:c1:19:01:9c:85:f8:aa: 70:3e:ee:9f:c4:62:91:70:40:eb:ed:f2:75:0b:e8:3b:45:32: 6d:6c:40:01:5b:f5:df:2c:3f:bf:03:3f:c6:2d:3d:98:61:96: f6:95:9c:3f:7b:16:b0:d1:c3:3f:49:44:9a:f7:95:8d:6b:27: 2d:76:c0:56:f8:23:2f:f0:82:c2:37:dd:c5:ce:7d:a8:b7:de: d4:c1:2d:93:bc:61:68:89:55:fc:0b:82:91:ff:0d:52:91:e2: ec:64:25:6f:4a:46:25:37:9e:e8:82:65:e3:bc:2a:e8:17:59: 88:4b:ae:8f:a5:eb:44:b0:37:76:ae:e4:8b:05:a7:81:55:9c: 27:c0:07:dd:69:67:10:2d:cd:0a:67:4f:c8:ee:cc:a8:ab:91: d5:95:a8:28:3c:4a:54:57:1c:64:5d:f1:79:84:37:41:ce:35: 8e:15:e3:fb:cc:c9:15:0f:74:d2:37:b9:25:2d:6f:10:c2:e9: e9:67:ce:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TwDrR21XxM5kIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MmM3MmE2ZGYtY2FhYi00YWYxLWJmMTAtZDAxYWU1MjE5NzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfF+zaHAUoJPBl8MuJ8KXzv9UboUWBZN8Wit njcAmiED08yQ276DcrJ3aO4TQKx7qOsN4/HtjkxhuVoTwH746OF3Nghu/WvDqtgN BgRkDQXE4QcHrI7T8BL5RL2XLuIh43MQL9z0ZoZISLpKCIXXeBE9FL9AQ3t3Ldzf T1GpW4Im13SQWRdCCYAxedLiONZDD8WRMtijaay7lHMGJlfY9xVRzQtRaQInXHmf uKinRHNf8VOZ+KRsdWqNTcNP6cPj9ba3oXeXDXy5NjZCdqjuUriVPLB3C8J83YiL BJbogBzDgwmcpb8FM/Z/ixV5dfFheJDaFGMq66MZ5NpmBtn8BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDCD7kpUeIwuLXzx2nuJw/32TamMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE4M2IyNGQtMjFjMi0z YTgxLTkyOTItNmQyYzBmMTFjOWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKtQKds/CsfQqTioUgz3qXg34vgsUtCoicJJigvYd4ymE9uvi+OBd1l 69TvWRPhRGYtNJKHZp1LzYbsD2d4dsKrwRkBnIX4qnA+7p/EYpFwQOvt8nUL6DtF Mm1sQAFb9d8sP78DP8YtPZhhlvaVnD97FrDRwz9JRJr3lY1rJy12wFb4Iy/wgsI3 3cXOfai33tTBLZO8YWiJVfwLgpH/DVKR4uxkJW9KRiU3nuiCZeO8KugXWYhLro+l 60SwN3au5IsFp4FVnCfAB91pZxAtzQpnT8juzKirkdWVqCg8SlRXHGRd8XmEN0HO NY4V4/vMyRUPdNI3uSUtbxDC6elnznc= -----END CERTIFICATE-----Generated at Fri Oct 23 12:51:20 2026 by rpki-client