$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4de9f95-ecdf-3525-bda2-28c83c2a568d.roa File: b4de9f95-ecdf-3525-bda2-28c83c2a568d.roa (raw, json) Hash identifier: nuI8rFzH/0c8hMKe4Iqj5S9Xxf+/YLrfZ/0mU577du4= Subject key identifier: F0:F0:10:CF:1C:49:02:A3:C7:6E:C6:08:69:6D:12:D0:C8:DC:D4:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4EB9AB30F1EA610A9F7BE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4de9f95-ecdf-3525-bda2-28c83c2a568d.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 76.142.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:b9:ab:30:f1:ea:61:0a:9f:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=b406f7b7-5868-4538-9c6a-0fb60cff5fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f8:11:96:a8:11:ef:e8:b3:ee:7d:c7:5d:80: 3d:8a:8a:0b:6b:40:f9:83:f5:81:f9:c1:32:b8:ce: 24:e1:d4:cb:28:5e:45:91:c5:c9:58:04:8e:51:f3: 0c:5e:d8:40:bc:17:bc:77:3e:76:3f:47:26:55:9b: 1f:3c:b6:cd:f6:d6:36:a3:23:1a:45:e9:48:2a:90: 68:00:64:df:b2:8c:31:dd:1d:38:79:d0:89:13:ee: 24:ed:44:fb:d2:ca:0f:90:a5:b4:20:d7:3d:6d:96: 2f:2c:24:31:c3:81:18:ae:32:1d:dd:21:13:1c:fe: d7:b7:e0:31:2f:26:92:ca:c5:6b:f0:54:f8:17:36: e6:68:84:5e:9e:87:d8:60:e9:1f:a4:96:18:0a:8d: 17:79:73:9a:1a:44:9b:27:1d:fe:d4:e2:8d:0a:a9: 54:b4:89:eb:0d:43:ca:6e:79:96:a3:d8:9d:ef:44: ed:9f:60:44:e2:9b:27:fa:11:0c:4f:1d:88:16:0d: b7:52:18:26:03:58:c8:bf:15:15:7e:80:b9:29:45: 73:e5:7e:a3:37:e7:48:56:0b:74:c6:83:1d:95:2a: a4:ee:fe:f2:e8:04:0a:e1:2a:d1:9a:d0:f7:9f:42: d5:62:83:74:77:7d:bc:8b:a7:fe:83:f4:82:57:c8: ed:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F0:10:CF:1C:49:02:A3:C7:6E:C6:08:69:6D:12:D0:C8:DC:D4:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4de9f95-ecdf-3525-bda2-28c83c2a568d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.142.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:46:a6:9e:4f:f0:37:d8:99:2c:63:58:e9:cd:8a:be:28:c5: 2b:da:a1:49:08:67:04:b4:44:2d:5d:91:08:4d:de:a3:b4:30: 0a:8d:d2:f6:d9:8d:9a:7a:59:88:b4:f0:57:80:fd:a4:cf:a8: 64:1c:20:6c:1a:06:f5:2a:ca:9d:b7:84:2b:8e:81:63:73:fd: fa:64:c6:5f:fb:9d:af:78:1e:74:15:a7:62:d0:80:66:7a:87: 91:18:04:ae:7c:a5:f2:b5:ec:d9:53:d3:8c:71:6f:e8:22:de: e7:40:7d:22:7a:21:91:87:7b:22:c5:82:d3:cc:3b:27:7f:d8: 5f:d9:aa:97:8c:4d:24:2d:91:bc:3e:f4:18:e6:dd:a8:fb:8d: f7:93:71:73:cd:3e:40:23:40:5a:08:69:d0:92:01:bb:71:83: b5:3f:de:3e:93:21:60:c2:50:d3:ba:ff:51:52:03:cc:28:a2: bd:3f:4c:83:82:12:f5:28:75:f1:b9:cd:6f:c4:74:fb:eb:54: 21:45:dd:39:dd:55:d9:5a:75:00:78:e5:d4:7b:b2:8e:2f:78: a3:7f:4c:3c:c2:bc:57:3b:c1:ee:dd:44:8d:20:32:e5:d2:2f: 25:52:63:48:d8:4e:ff:c4:3c:61:38:ab:d5:4f:d6:58:94:fb: 5e:f0:d7:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TrmrMPHqYQqfe+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YjQwNmY3YjctNTg2OC00NTM4LTljNmEtMGZiNjBjZmY1ZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPgRlqgR7+iz7n3HXYA9iooLa0D5g/WB+cEy uM4k4dTLKF5FkcXJWASOUfMMXthAvBe8dz52P0cmVZsfPLbN9tY2oyMaRelIKpBo AGTfsowx3R04edCJE+4k7UT70soPkKW0INc9bZYvLCQxw4EYrjId3SETHP7Xt+Ax LyaSysVr8FT4FzbmaIRenofYYOkfpJYYCo0XeXOaGkSbJx3+1OKNCqlUtInrDUPK bnmWo9id70Ttn2BE4psn+hEMTx2IFg23UhgmA1jIvxUVfoC5KUVz5X6jN+dIVgt0 xoMdlSqk7v7y6AQK4SrRmtD3n0LVYoN0d328i6f+g/SCV8jtzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDwEM8cSQKjx27GCGltEtDI3NRPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjRkZTlmOTUtZWNkZi0z NTI1LWJkYTItMjhjODNjMmE1NjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTI7kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN5Gpp5P8DfYmSxjWOnNir4oxSvaoUkIZwS0RC1dkQhN3qO0MAqN0vbZ jZp6WYi08FeA/aTPqGQcIGwaBvUqyp23hCuOgWNz/fpkxl/7na94HnQVp2LQgGZ6 h5EYBK58pfK17NlT04xxb+gi3udAfSJ6IZGHeyLFgtPMOyd/2F/ZqpeMTSQtkbw+ 9Bjm3aj7jfeTcXPNPkAjQFoIadCSAbtxg7U/3j6TIWDCUNO6/1FSA8woor0/TIOC EvUodfG5zW/EdPvrVCFF3TndVdladQB45dR7so4veKN/TDzCvFc7we7dRI0gMuXS LyVSY0jYTv/EPGE4q9VP1liU+17w12I= -----END CERTIFICATE-----Generated at Wed Oct 21 06:30:41 2026 by rpki-client