$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22e5aa53-128e-33cc-af7e-3c329907d17f.roa File: 22e5aa53-128e-33cc-af7e-3c329907d17f.roa (raw, json) Hash identifier: XmVyXoGLGbmcPZR+9dHBFyV/joY4TQO8hjYO2ClOqnc= Subject key identifier: F0:66:2F:FD:C8:18:11:F1:C1:7B:87:59:41:68:5B:FC:C7:71:D3:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F498001E4721A2A808B3F7700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22e5aa53-128e-33cc-af7e-3c329907d17f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 76.22.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:01:e4:72:1a:2a:80:8b:3f:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=87ef8072-9a69-4d0d-bc1a-b1380595d20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:e6:85:56:40:05:50:4d:c9:3b:9b:89:a9: 09:86:38:22:e2:e8:01:e2:ac:bd:8d:60:c9:9c:ee: 72:3c:48:94:43:43:0c:d9:24:a4:82:13:70:d5:8c: 78:c0:f2:87:08:14:a4:b6:70:24:4b:0f:b8:3f:17: 80:7e:52:72:52:ab:b9:3c:ec:0c:8d:36:35:d3:87: e7:b1:4a:a4:00:e5:bc:3e:7e:a4:0b:1f:a0:42:fb: 87:c8:7f:39:fe:42:1d:02:bf:4f:32:c5:ad:51:82: e5:99:f9:12:40:2f:71:ff:17:fa:53:65:cb:6b:8a: e8:f8:76:bd:73:00:db:21:b0:14:42:9e:66:d9:c4: cd:e1:bf:d5:47:58:21:1a:17:a7:f9:8b:cb:ce:14: 7a:b4:6d:cc:81:92:c7:8d:fe:09:7c:b7:3a:94:fa: 06:a6:5f:4f:f9:de:a4:af:42:4b:51:93:fe:05:a3: fd:94:16:fd:d4:60:85:19:1f:b4:af:d9:80:fa:3d: f3:2b:d4:33:bd:4d:a4:c5:b2:9e:fd:e0:be:f1:ed: 4c:0d:29:7b:f9:10:ed:cc:fb:68:80:e2:e0:45:3e: 77:2c:5d:d0:c5:9e:4d:b7:ea:bb:c5:61:4c:6b:28: 3c:93:0d:6b:e7:56:be:01:b6:9a:16:2c:b8:38:68: a0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:66:2F:FD:C8:18:11:F1:C1:7B:87:59:41:68:5B:FC:C7:71:D3:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22e5aa53-128e-33cc-af7e-3c329907d17f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.22.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:0a:bb:49:19:a9:fa:8a:13:fb:96:07:73:52:03:36:6f:e9: e1:30:c8:70:0f:23:fb:3b:e1:41:50:bc:cf:53:05:15:4d:42: e8:9d:a0:fd:47:8e:56:46:52:b0:75:3d:83:35:1e:35:70:1a: 1e:19:c6:44:d0:3c:92:53:84:47:aa:ba:66:cd:ec:e3:3a:a3: 76:4c:84:81:9a:71:51:85:ec:bf:2d:c6:92:07:3c:f8:3a:be: 7c:87:9a:1d:ce:ed:46:19:d8:43:b5:5a:6e:8f:82:ba:a0:ec: a5:3d:ce:ce:0b:17:79:0f:b4:eb:77:3b:85:36:b8:56:9b:42: 27:fa:c8:df:43:6f:ad:3a:4f:fd:d9:69:e2:22:49:12:a5:8f: 59:c9:9e:a9:43:04:ce:e8:70:f0:c1:4b:00:4b:af:99:f5:23: b2:fb:1c:b2:3a:3f:37:c9:04:14:41:b0:00:c7:b5:30:d2:1a: 33:24:0a:87:c6:da:c5:66:da:2d:00:65:3d:14:c8:66:0a:34: 33:eb:8e:eb:56:39:da:6b:0b:43:06:a4:18:89:83:41:8c:9a: 5d:34:f0:4c:70:78:24:ce:f0:46:1d:95:4a:c5:7a:e4:f9:2e: 43:af:08:0f:32:a9:de:ca:21:d6:5c:ea:0b:c4:72:54:df:f1: 70:db:2c:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgAHkchoqgIs/dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODdlZjgwNzItOWE2OS00ZDBkLWJjMWEtYjEzODA1OTVkMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHXmhVZABVBNyTubiakJhjgi4ugB4qy9jWDJ nO5yPEiUQ0MM2SSkghNw1Yx4wPKHCBSktnAkSw+4PxeAflJyUqu5POwMjTY104fn sUqkAOW8Pn6kCx+gQvuHyH85/kIdAr9PMsWtUYLlmfkSQC9x/xf6U2XLa4ro+Ha9 cwDbIbAUQp5m2cTN4b/VR1ghGhen+YvLzhR6tG3MgZLHjf4JfLc6lPoGpl9P+d6k r0JLUZP+BaP9lBb91GCFGR+0r9mA+j3zK9QzvU2kxbKe/eC+8e1MDSl7+RDtzPto gOLgRT53LF3QxZ5Nt+q7xWFMayg8kw1r51a+AbaaFiy4OGigJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBmL/3IGBHxwXuHWUFoW/zHcdPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjJlNWFhNTMtMTI4ZS0z M2NjLWFmN2UtM2MzMjk5MDdkMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4Ku0kZqfqKE/uWB3NSAzZv6eEwyHAPI/s74UFQvM9TBRVNQuidoP1H jlZGUrB1PYM1HjVwGh4ZxkTQPJJThEequmbN7OM6o3ZMhIGacVGF7L8txpIHPPg6 vnyHmh3O7UYZ2EO1Wm6Pgrqg7KU9zs4LF3kPtOt3O4U2uFabQif6yN9Db606T/3Z aeIiSRKlj1nJnqlDBM7ocPDBSwBLr5n1I7L7HLI6PzfJBBRBsADHtTDSGjMkCofG 2sVm2i0AZT0UyGYKNDPrjutWOdprC0MGpBiJg0GMml008ExweCTO8EYdlUrFeuT5 LkOvCA8yqd7KIdZc6gvEclTf8XDbLGo= -----END CERTIFICATE-----Generated at Fri Sep 25 16:19:11 2026 by rpki-client