$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9c7a996-3eea-3bfa-9360-8cda3e8c942d.roa File: f9c7a996-3eea-3bfa-9360-8cda3e8c942d.roa (raw, json) Hash identifier: FRliAkmgjDnTTsJvHJ/f/oug+5IQtubgKV72FXFZ54I= Subject key identifier: 93:F2:ED:FE:C0:1D:0F:AF:5A:1D:83:3D:5B:8E:EF:33:9E:18:CE:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4FB7C1F1A9355BA2DBC880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9c7a996-3eea-3bfa-9360-8cda3e8c942d.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 76.20.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:b7:c1:f1:a9:35:5b:a2:db:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=1133361c-7a7a-4e14-a8de-4c2db65bc448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:63:51:46:b1:e5:f9:d4:84:80:0e:55:79: b3:87:e9:92:16:34:1a:83:e3:48:0a:c9:c0:16:74: fb:39:a5:b4:b5:48:69:3b:5a:8b:fb:57:4f:1d:c2: e6:c8:19:c3:8e:37:d2:96:90:a7:b9:1a:cd:6b:80: ba:37:c2:8d:e9:f2:9e:de:6d:b3:58:d0:62:1a:e7: aa:e9:db:89:eb:df:8c:f8:b8:1c:89:91:60:b3:57: 0a:0f:ad:21:ee:ac:2a:3a:d7:71:dc:d7:8c:2b:9c: cb:8e:cc:a1:91:da:aa:d2:7a:44:ce:1a:86:d2:22: 11:4c:b8:fd:60:39:1e:52:36:0f:fb:37:ba:cc:7b: d2:a8:b9:a2:1f:ad:3c:ec:4a:0a:44:eb:df:64:88: ac:cc:85:c2:c8:bf:f0:7e:8d:13:00:28:ce:f7:04: 43:b3:d2:b1:1f:2e:c1:67:f0:b4:24:f4:9f:34:20: e9:3e:7d:12:a6:a7:ed:b2:50:ca:a3:a7:9a:d8:a3: 74:a9:bb:1f:c8:cf:af:df:2b:b5:2c:75:e1:a6:5f: 9e:d1:fe:05:b1:47:86:51:2d:25:69:7b:e5:6e:4a: c2:3d:de:2a:6e:54:f6:09:33:68:56:65:df:14:53: fe:75:cf:2d:e0:c3:4a:c1:55:d8:5a:46:f5:f5:24: e5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F2:ED:FE:C0:1D:0F:AF:5A:1D:83:3D:5B:8E:EF:33:9E:18:CE:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9c7a996-3eea-3bfa-9360-8cda3e8c942d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.20.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:21:2a:50:8a:95:65:21:e5:d2:36:b6:0f:f9:69:50:55:82: 2a:09:af:e2:d5:fb:91:70:21:80:98:01:1d:01:c6:3b:c4:68: 7b:a5:47:ee:c1:3a:7b:01:15:0b:f1:fd:07:08:8d:b7:ae:79: d9:ec:1f:0c:c5:34:c8:95:76:51:45:cd:f2:aa:7a:a5:ec:c2: 59:3e:e1:8b:c1:de:dc:0a:e5:e7:5f:cb:81:63:4f:a0:96:ce: 5a:bc:c1:49:b2:c2:cc:85:e7:e1:0e:0b:55:89:88:bd:31:b7: 65:e9:39:be:2b:92:67:43:38:c4:c9:2f:0b:ec:8e:ba:17:14: 6c:42:08:ae:a1:94:ba:f6:07:07:7e:e7:2d:08:65:02:37:3c: 80:d8:1e:ba:54:33:f9:52:ac:c9:81:c7:e5:7a:17:94:57:25: ec:54:1d:43:a8:15:18:ad:18:ff:e2:35:ef:7d:6a:63:37:40: 3b:ea:e1:66:dc:73:7b:54:8b:ea:83:0f:c2:c7:2a:0d:ec:d9: e5:e1:80:75:84:d9:15:24:26:08:ff:b6:b1:fb:38:d6:18:fe: 62:92:20:a4:29:3d:c3:69:bf:89:00:1c:c3:55:99:b4:59:ac: e3:ea:cf:72:07:ab:01:b0:45:dc:7d:9a:3e:7f:92:f0:5a:97: 62:06:2c:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T7fB8ak1W6LbyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MTEzMzM2MWMtN2E3YS00ZTE0LWE4ZGUtNGMyZGI2NWJjNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI5jUUax5fnUhIAOVXmzh+mSFjQag+NICsnA FnT7OaW0tUhpO1qL+1dPHcLmyBnDjjfSlpCnuRrNa4C6N8KN6fKe3m2zWNBiGueq 6duJ69+M+LgciZFgs1cKD60h7qwqOtdx3NeMK5zLjsyhkdqq0npEzhqG0iIRTLj9 YDkeUjYP+ze6zHvSqLmiH6087EoKROvfZIiszIXCyL/wfo0TACjO9wRDs9KxHy7B Z/C0JPSfNCDpPn0SpqftslDKo6ea2KN0qbsfyM+v3yu1LHXhpl+e0f4FsUeGUS0l aXvlbkrCPd4qblT2CTNoVmXfFFP+dc8t4MNKwVXYWkb19STlTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPy7f7AHQ+vWh2DPVuO7zOeGM4aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjljN2E5OTYtM2VlYS0z YmZhLTkzNjAtOGNkYTNlOGM5NDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATBSOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQhKlCKlWUh5dI2tg/5aVBVgioJr+LV+5FwIYCYAR0BxjvEaHulR+7B OnsBFQvx/QcIjbeuednsHwzFNMiVdlFFzfKqeqXswlk+4YvB3twK5edfy4FjT6CW zlq8wUmywsyF5+EOC1WJiL0xt2XpOb4rkmdDOMTJLwvsjroXFGxCCK6hlLr2Bwd+ 5y0IZQI3PIDYHrpUM/lSrMmBx+V6F5RXJexUHUOoFRitGP/iNe99amM3QDvq4Wbc c3tUi+qDD8LHKg3s2eXhgHWE2RUkJgj/trH7ONYY/mKSIKQpPcNpv4kAHMNVmbRZ rOPqz3IHqwGwRdx9mj5/kvBal2IGLCk= -----END CERTIFICATE-----Generated at Sat Oct 24 13:47:11 2026 by rpki-client