$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1898c0a2-0cb0-3563-8015-f2156e0681db.roa File: 1898c0a2-0cb0-3563-8015-f2156e0681db.roa (raw, json) Hash identifier: DWEUyJ290y/vpj7Gote6K5pdUp1q+40aH8OZvj8k9Yo= Subject key identifier: 56:96:55:40:29:66:DE:34:E5:3A:2F:0E:B9:C7:58:EB:51:C7:22:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49737010A70564C245BECD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1898c0a2-0cb0-3563-8015-f2156e0681db.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 76.150.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:70:10:a7:05:64:c2:45:be:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a2e0ae0a-1582-4a38-b0d8-84e205480207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c7:94:dd:06:a3:3f:fb:95:8c:32:8a:8c:36: a3:d0:d3:d9:cb:a7:3f:f2:84:d4:19:94:bd:47:cc: 09:cc:b9:47:22:e8:fd:39:10:e0:b6:76:ed:62:5a: c3:91:de:2a:2b:69:58:1a:85:bf:55:7e:84:22:fe: fa:c7:b7:b6:58:7b:9f:ea:7a:6f:5f:ab:29:67:a4: 32:8f:f7:84:5e:25:73:7c:a6:f1:47:28:df:de:77: 90:91:2d:c1:fc:e9:68:5d:86:bc:6e:10:98:72:2e: 49:d6:d0:24:fa:c6:c6:9f:37:3b:25:bb:54:d7:17: 26:9b:22:82:4d:fb:fe:87:c3:7c:f2:c1:73:8c:a9: bc:b8:01:62:59:8e:54:97:54:02:ab:03:13:12:71: 87:05:da:81:23:72:ae:d7:ea:26:76:19:1e:44:35: 1b:cd:1c:99:78:3d:72:a4:28:2c:22:92:f4:88:ad: ba:66:b6:80:e2:78:e5:73:1d:00:06:87:4a:d0:a7: 37:4a:3d:50:79:61:25:09:fb:06:4a:cd:ff:22:3b: 89:72:1a:45:d8:34:1d:2c:7e:db:76:bc:71:c9:94: 87:98:d3:d1:f8:5c:23:0f:1e:c4:be:c3:29:ec:f1: 5c:42:7a:f2:ae:ef:5f:ea:1d:86:f3:b9:b9:47:5d: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:96:55:40:29:66:DE:34:E5:3A:2F:0E:B9:C7:58:EB:51:C7:22:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1898c0a2-0cb0-3563-8015-f2156e0681db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.150.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:54:46:f1:6e:fa:fb:b7:b7:82:5d:86:4d:4d:de:53:49:0e: eb:f5:70:c6:01:45:3b:bd:ce:17:05:34:59:13:f0:41:af:1c: aa:61:40:f3:6b:1c:87:d2:2d:af:d9:f5:2a:f2:d9:ca:ed:7e: f4:9f:2b:94:3d:c0:e3:50:ef:9c:4f:17:99:5d:65:38:eb:1c: 6d:f0:5c:4e:71:0e:22:b9:14:b1:2f:12:17:a4:70:71:4b:d2: f0:eb:82:03:bb:fc:2f:f1:5c:e6:4d:83:dd:b9:57:df:04:da: 80:85:4b:76:e2:b3:c0:02:eb:c4:a8:a8:46:42:b4:cd:cb:58: b4:2c:2b:2d:79:33:96:aa:64:af:52:0c:5f:a0:50:e9:e1:d6: fe:e9:43:b7:8d:56:53:37:2a:e1:27:27:42:54:03:59:3e:b5: 85:17:79:54:18:57:78:0a:4e:cb:1a:22:60:84:13:1f:9e:13: 8e:4b:6d:f6:12:78:31:0c:6c:33:bc:17:1a:51:8b:7d:9b:e5: a4:fb:75:e1:2f:cb:bb:4f:8e:5f:7c:95:77:49:60:05:8a:a1: 99:04:d3:8c:0f:b2:fd:58:9a:65:4e:f9:22:f9:3d:62:83:ce: 44:fa:d3:10:67:48:64:79:06:2b:3f:58:c0:04:4e:65:b9:f8: 00:a4:10:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc3AQpwVkwkW+zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTJlMGFlMGEtMTU4Mi00YTM4LWIwZDgtODRlMjA1NDgwMjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ceU3QajP/uVjDKKjDaj0NPZy6c/8oTUGZS9 R8wJzLlHIuj9ORDgtnbtYlrDkd4qK2lYGoW/VX6EIv76x7e2WHuf6npvX6spZ6Qy j/eEXiVzfKbxRyjf3neQkS3B/OloXYa8bhCYci5J1tAk+sbGnzc7JbtU1xcmmyKC Tfv+h8N88sFzjKm8uAFiWY5Ul1QCqwMTEnGHBdqBI3Ku1+omdhkeRDUbzRyZeD1y pCgsIpL0iK26ZraA4njlcx0ABodK0Kc3Sj1QeWElCfsGSs3/IjuJchpF2DQdLH7b drxxyZSHmNPR+FwjDx7EvsMp7PFcQnryru9f6h2G87m5R12vtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaWVUApZt405TovDrnHWOtRxyIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTg5OGMwYTItMGNiMC0z NTYzLTgwMTUtZjIxNTZlMDY4MWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1URvFu+vu3t4Jdhk1N3lNJDuv1cMYBRTu9zhcFNFkT8EGvHKphQPNr HIfSLa/Z9Sry2crtfvSfK5Q9wONQ75xPF5ldZTjrHG3wXE5xDiK5FLEvEhekcHFL 0vDrggO7/C/xXOZNg925V98E2oCFS3bis8AC68SoqEZCtM3LWLQsKy15M5aqZK9S DF+gUOnh1v7pQ7eNVlM3KuEnJ0JUA1k+tYUXeVQYV3gKTssaImCEEx+eE45LbfYS eDEMbDO8FxpRi32b5aT7deEvy7tPjl98lXdJYAWKoZkE04wPsv1YmmVO+SL5PWKD zkT60xBnSGR5Bis/WMAETmW5+ACkEF0= -----END CERTIFICATE-----Generated at Sun Oct 11 07:04:47 2026 by rpki-client