$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4fa1a3e-adce-3659-a519-63d5486a37e7.roa File: b4fa1a3e-adce-3659-a519-63d5486a37e7.roa (raw, json) Hash identifier: Zwy2kslL136QS5EQiAFISUFLtHmNxY1x0+VT8mnMIqk= Subject key identifier: 75:AF:42:11:D0:AA:2A:5B:E1:23:BE:61:AB:E9:0E:DB:8D:89:20:A4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497873304EB96D6E32D92F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4fa1a3e-adce-3659-a519-63d5486a37e7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33490 IP address blocks: 96.108.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:73:30:4e:b9:6d:6e:32:d9:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b63270ac-ae36-4040-878f-b53b7a4bb935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:c5:8e:9a:f8:30:ed:0b:e1:6d:35:c1:d4: dc:9f:3e:9b:27:92:4d:27:fe:eb:f0:5a:28:e8:57: a2:04:b6:cf:43:8f:87:2f:de:4f:6c:7e:1f:43:53: 02:d6:1f:e4:fb:2c:68:df:c9:e9:90:56:6d:50:3e: 23:31:a3:3a:e9:63:56:9a:6d:6d:6e:af:32:1d:66: 78:1e:8b:4c:f5:01:d6:e9:68:c8:4b:88:fa:21:7f: eb:23:16:6b:31:f4:b1:f7:4c:4a:d4:dd:4e:27:59: 25:33:3d:e1:9e:96:34:7d:bb:0c:23:0a:a3:34:37: dc:3b:37:47:60:94:a5:a3:c0:c0:b8:39:79:59:10: 9d:e6:af:cb:c7:d0:74:0b:6b:86:c8:fb:69:bd:8f: 35:18:0a:14:b4:bc:7b:00:6d:85:79:64:7d:b9:68: 0e:06:4e:fb:c8:74:4c:37:fe:43:37:6f:dc:6c:5a: fe:69:cf:33:f1:3e:7a:6d:46:47:68:54:ba:a5:8b: a5:e7:b2:01:47:9f:dd:56:64:35:cb:c5:64:ef:38: ce:ff:4e:65:c2:d0:e4:8c:e8:3c:6f:c3:59:4c:e4: 08:39:3e:1c:88:c8:38:fd:0d:84:fd:77:d6:93:95: 7e:c8:b9:12:8d:85:98:34:8f:84:3a:6d:f4:f2:ea: 29:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AF:42:11:D0:AA:2A:5B:E1:23:BE:61:AB:E9:0E:DB:8D:89:20:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4fa1a3e-adce-3659-a519-63d5486a37e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.108.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:82:80:04:34:5d:13:7c:15:d0:37:06:eb:04:33:b5:dc:b1: 8c:5b:2a:ba:5f:64:4b:f2:c2:e0:3c:43:56:25:6f:e2:74:4e: b5:81:6b:70:a2:60:ed:5f:85:e9:f7:ef:ce:f4:4a:3f:fb:58: 11:cc:1d:3a:74:4b:8c:f6:a0:f7:28:3d:2a:3e:02:64:3e:dc: 1c:16:70:bd:91:ee:38:13:49:ed:66:91:c1:d1:0f:d4:c9:36: f9:7c:18:84:2a:90:62:32:ea:88:ef:f0:1c:1e:e5:fb:4a:0e: 69:9d:75:d2:bd:80:dd:b1:7e:c8:26:23:44:2f:68:93:23:aa: 23:e2:66:38:13:0c:29:df:d6:a4:93:b7:0e:c2:64:3e:ce:0f: 41:9d:58:9c:2d:a8:e8:00:d8:b4:be:c7:53:85:42:27:28:31: 3b:73:63:58:0f:1b:fc:c8:a5:a7:10:1e:f5:28:2e:65:4e:c2: 74:52:87:88:f2:93:de:50:dc:22:a0:0d:ac:d5:ee:15:4b:b4: a0:66:5b:75:6b:38:a8:33:4c:63:d0:ad:72:c2:16:f2:10:2a: 8f:4c:71:b1:f7:bd:33:2a:73:d0:5c:05:9d:02:f3:5e:5e:7f: 96:c2:ca:3d:56:0c:26:7c:9e:be:f4:33:f5:ce:66:a1:4e:e0: af:cd:da:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeHMwTrltbjLZL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjYzMjcwYWMtYWUzNi00MDQwLTg3OGYtYjUzYjdhNGJiOTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSnFjpr4MO0L4W01wdTcnz6bJ5JNJ/7r8Foo 6FeiBLbPQ4+HL95PbH4fQ1MC1h/k+yxo38npkFZtUD4jMaM66WNWmm1tbq8yHWZ4 HotM9QHW6WjIS4j6IX/rIxZrMfSx90xK1N1OJ1klMz3hnpY0fbsMIwqjNDfcOzdH YJSlo8DAuDl5WRCd5q/Lx9B0C2uGyPtpvY81GAoUtLx7AG2FeWR9uWgOBk77yHRM N/5DN2/cbFr+ac8z8T56bUZHaFS6pYul57IBR5/dVmQ1y8Vk7zjO/05lwtDkjOg8 b8NZTOQIOT4ciMg4/Q2E/XfWk5V+yLkSjYWYNI+EOm308uopXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWvQhHQqipb4SO+YavpDtuNiSCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjRmYTFhM2UtYWRjZS0z NjU5LWE1MTktNjNkNTQ4NmEzN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYGxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWCgAQ0XRN8FdA3BusEM7XcsYxbKrpfZEvywuA8Q1Ylb+J0TrWBa3Ci YO1fhen37870Sj/7WBHMHTp0S4z2oPcoPSo+AmQ+3BwWcL2R7jgTSe1mkcHRD9TJ Nvl8GIQqkGIy6ojv8Bwe5ftKDmmdddK9gN2xfsgmI0QvaJMjqiPiZjgTDCnf1qST tw7CZD7OD0GdWJwtqOgA2LS+x1OFQicoMTtzY1gPG/zIpacQHvUoLmVOwnRSh4jy k95Q3CKgDazV7hVLtKBmW3VrOKgzTGPQrXLCFvIQKo9McbH3vTMqc9BcBZ0C815e f5bCyj1WDCZ8nr70M/XOZqFO4K/N2kA= -----END CERTIFICATE-----Generated at Thu Oct 22 18:19:13 2026 by rpki-client