$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef793a6-a65d-3684-92b6-e0a28a343e78.roa File: cef793a6-a65d-3684-92b6-e0a28a343e78.roa (raw, json) Hash identifier: rzMeFgxrr6qT1K6UUpWYtB70YeZHrWTeoBR6fs9wtR4= Subject key identifier: 43:70:91:1A:CD:93:27:C3:8D:B6:12:71:7D:1C:25:74:FA:34:7F:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3BA511D3B1B5D037DC2F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef793a6-a65d-3684-92b6-e0a28a343e78.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33660 IP address blocks: 76.23.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:a5:11:d3:b1:b5:d0:37:dc:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=0d4b6b0f-9f1a-4d48-8e51-478fab00d935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:c9:f8:ac:bf:04:01:ba:9a:6d:14:c5:60: 1b:51:95:4e:0c:66:a9:1e:8b:37:af:07:de:a1:1b: 5d:fb:07:d1:97:d8:46:79:59:f1:c6:2d:9e:45:1f: 9e:95:d9:9f:74:0f:bb:59:5e:23:a0:37:6b:09:bc: 04:9a:85:e0:c9:97:b9:cc:1d:69:54:8d:19:d7:85: 23:64:44:d6:98:6f:cc:0b:62:1a:60:0b:24:08:6d: 8d:57:9b:1d:a0:de:8e:c1:d9:32:54:c0:4b:9a:91: 66:a7:b2:b4:49:02:66:ec:21:b1:b3:94:8c:68:35: ca:56:95:09:ac:b4:ae:f8:c7:42:ec:40:f0:07:4a: 8f:9f:d6:bd:33:6d:b4:14:08:c5:fc:a3:1d:75:26: 18:be:98:d3:97:74:59:b8:c8:1d:1c:2c:42:c5:82: 27:aa:59:af:f0:2d:c9:2e:81:1f:91:3c:dc:a6:6e: d3:e2:da:a7:8c:32:03:5f:a9:a0:d1:5f:f2:65:28: f3:74:8d:a0:2a:4e:ae:cf:26:36:72:21:35:be:fb: 1d:44:4e:da:c9:06:a4:5e:d8:c6:05:19:3d:1b:b6: 75:df:ad:4e:f9:53:2e:63:9f:69:47:5e:e0:22:03: cf:6e:00:31:64:19:e0:77:8d:ff:1c:78:38:5e:33: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:70:91:1A:CD:93:27:C3:8D:B6:12:71:7D:1C:25:74:FA:34:7F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef793a6-a65d-3684-92b6-e0a28a343e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.23.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ef:22:5b:42:f8:72:e7:43:60:d2:db:4f:96:95:cc:0e:78: 48:c3:5a:fd:85:39:63:cf:4a:b2:1d:18:6c:03:75:6a:27:5e: e0:a4:8b:c8:1c:8e:7c:9c:a0:1e:bd:46:8f:45:c2:4e:7b:4e: 84:91:6f:aa:92:aa:70:03:87:e6:3d:fc:cb:f8:73:7b:30:e8: 9e:e2:44:b6:64:18:02:5c:c8:fd:a8:08:fc:63:f2:63:d2:d6: 32:4a:86:3d:d4:ca:3e:ac:71:54:f4:68:d8:ff:72:03:cc:6c: 9d:ef:ec:6e:61:56:46:8b:94:ec:8c:83:d9:f7:22:36:48:2e: a3:98:5f:b2:5f:dc:c0:b3:cb:90:51:55:d5:71:60:94:5d:30: 80:5f:86:6d:4d:26:fd:b7:54:63:94:e7:43:94:43:9c:ca:67: b5:87:aa:cb:f0:05:3f:c2:c2:32:09:39:8b:e8:a5:9e:c1:aa: 29:81:ce:91:de:4f:71:86:ee:be:dd:65:51:42:20:cb:95:d4: 8d:6a:9b:8e:73:44:6a:b0:5f:a7:68:45:5b:68:d1:a8:23:06: 95:14:d7:82:33:3c:65:50:7a:e3:9b:85:9d:be:eb:14:0d:95: 47:12:f4:3f:fa:db:fc:ef:f9:62:6f:3c:dd:82:ac:64:d7:f7: e6:43:b9:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO6UR07G10DfcLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MGQ0YjZiMGYtOWYxYS00ZDQ4LThlNTEtNDc4ZmFiMDBkOTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSPJ+Ky/BAG6mm0UxWAbUZVODGapHos3rwfe oRtd+wfRl9hGeVnxxi2eRR+eldmfdA+7WV4joDdrCbwEmoXgyZe5zB1pVI0Z14Uj ZETWmG/MC2IaYAskCG2NV5sdoN6OwdkyVMBLmpFmp7K0SQJm7CGxs5SMaDXKVpUJ rLSu+MdC7EDwB0qPn9a9M220FAjF/KMddSYYvpjTl3RZuMgdHCxCxYInqlmv8C3J LoEfkTzcpm7T4tqnjDIDX6mg0V/yZSjzdI2gKk6uzyY2ciE1vvsdRE7ayQakXtjG BRk9G7Z1361O+VMuY59pR17gIgPPbgAxZBngd43/HHg4XjPv2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENwkRrNkyfDjbYScX0cJXT6NH8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2VmNzkzYTYtYTY1ZC0z Njg0LTkyYjYtZTBhMjhhMzQzZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrvIltC+HLnQ2DS20+WlcwOeEjDWv2FOWPPSrIdGGwDdWonXuCki8gc jnycoB69Ro9Fwk57ToSRb6qSqnADh+Y9/Mv4c3sw6J7iRLZkGAJcyP2oCPxj8mPS 1jJKhj3Uyj6scVT0aNj/cgPMbJ3v7G5hVkaLlOyMg9n3IjZILqOYX7Jf3MCzy5BR VdVxYJRdMIBfhm1NJv23VGOU50OUQ5zKZ7WHqsvwBT/CwjIJOYvopZ7BqimBzpHe T3GG7r7dZVFCIMuV1I1qm45zRGqwX6doRVto0agjBpUU14IzPGVQeuObhZ2+6xQN lUcS9D/62/zv+WJvPN2CrGTX9+ZDuVk= -----END CERTIFICATE-----Generated at Fri Jul 10 19:07:21 2026 by rpki-client