$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29bdca5a-944c-32dd-a813-2d62cac179c0.roa File: 29bdca5a-944c-32dd-a813-2d62cac179c0.roa (raw, json) Hash identifier: 1s2lSx5xyG0mmXNbu9eSspi77gmhRG1IVH8wfzmb/mM= Subject key identifier: 44:2F:E6:3B:77:B5:B8:C2:00:0C:49:8E:65:78:E9:DF:5E:6E:A2:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E8C330067D97082DF0F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29bdca5a-944c-32dd-a813-2d62cac179c0.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33660 IP address blocks: 76.149.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:8c:33:00:67:d9:70:82:df:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=776ef798-3c41-4ec1-b5a6-ca76c6fdfef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1c:fe:b1:b5:05:b6:1d:bb:39:4a:7f:02:75: b0:c8:4b:e6:c4:f6:47:fa:73:f0:f4:32:37:27:ca: d9:7e:20:b3:5d:7e:c7:38:60:df:d4:5a:d8:fc:13: 58:37:e3:53:cf:e2:0d:7f:0a:b4:43:30:12:d8:7a: 7f:2f:bb:fd:b4:bf:87:16:a7:29:26:a2:e5:40:db: 12:cb:ff:27:bd:5f:17:fe:85:85:3d:82:9f:2f:8b: ca:e9:6a:69:eb:7f:58:22:c5:9f:40:76:88:9a:68: 02:f8:a1:1f:58:da:d0:99:8b:d4:a1:8b:cd:e5:b7: 89:11:ea:90:43:2e:f1:b8:06:7c:a4:58:f5:93:bc: f1:f8:2c:55:31:13:45:95:aa:16:1d:ef:84:c3:64: 7c:55:e3:a5:7c:39:48:4d:94:dd:d7:b9:7c:63:f4: 6c:e1:2c:99:bd:de:ec:4c:46:00:d0:52:54:3c:f0: 31:0a:ec:c7:d9:b9:16:7f:23:87:d6:1f:7a:cc:3a: b6:57:92:26:df:a0:95:f7:87:f6:98:8c:17:0d:07: 7d:55:dd:d3:a8:3a:81:e5:f4:1d:06:5a:d7:b1:43: 8f:83:58:4a:04:1c:66:73:8b:1f:02:50:a7:50:eb: d9:f5:c7:a8:60:23:19:9b:f7:55:22:6a:03:56:e1: 73:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2F:E6:3B:77:B5:B8:C2:00:0C:49:8E:65:78:E9:DF:5E:6E:A2:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29bdca5a-944c-32dd-a813-2d62cac179c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.149.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:cb:af:08:28:dc:c7:d8:39:cd:64:e0:20:c1:f2:76:20:94: 4e:d4:35:e0:37:17:e4:b7:d7:4a:02:f1:d9:9b:bd:bc:72:4a: fe:66:57:39:84:8c:19:dd:78:91:9b:8b:cb:5a:5b:d2:ed:b5: f3:8f:0e:78:2f:c1:b0:1c:5b:bc:de:ed:20:12:bc:b1:72:74: 3d:f5:b4:1d:ae:d8:8e:18:c6:bc:ac:63:1d:19:76:6a:d2:f6: e8:44:b8:07:a3:33:dd:51:5d:3e:a6:f8:32:99:d7:a8:fd:3f: 20:f1:4b:56:b9:d5:36:06:68:a3:d7:76:cf:27:92:7e:d1:a2: 00:ee:05:2a:3e:15:14:c6:76:2b:e0:be:52:4c:ca:d6:e1:30: 00:1e:5a:7f:9c:35:fa:1d:7e:37:8d:de:6e:bc:b8:a2:73:7c: 2d:1b:55:79:59:37:00:0f:bb:cf:f3:ea:28:ee:30:26:77:82: 91:88:19:2b:1e:26:f5:f6:05:80:9f:11:35:a6:7e:52:45:fa: 3e:89:ef:ab:61:a6:86:79:bf:ff:5c:6d:c1:7d:94:26:24:8d: 67:fc:cb:17:49:fe:43:5a:cb:8e:ac:4b:ca:c2:c1:a5:8b:d0: a5:8e:7d:79:62:38:30:11:9e:ae:f7:5b:bd:ce:bf:20:75:ee: cb:80:0a:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnowzAGfZcILfDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzc2ZWY3OTgtM2M0MS00ZWMxLWI1YTYtY2E3NmM2ZmRmZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBz+sbUFth27OUp/AnWwyEvmxPZH+nPw9DI3 J8rZfiCzXX7HOGDf1FrY/BNYN+NTz+INfwq0QzAS2Hp/L7v9tL+HFqcpJqLlQNsS y/8nvV8X/oWFPYKfL4vK6Wpp639YIsWfQHaImmgC+KEfWNrQmYvUoYvN5beJEeqQ Qy7xuAZ8pFj1k7zx+CxVMRNFlaoWHe+Ew2R8VeOlfDlITZTd17l8Y/Rs4SyZvd7s TEYA0FJUPPAxCuzH2bkWfyOH1h96zDq2V5Im36CV94f2mIwXDQd9Vd3TqDqB5fQd BlrXsUOPg1hKBBxmc4sfAlCnUOvZ9ceoYCMZm/dVImoDVuFzyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQv5jt3tbjCAAxJjmV46d9ebqLdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjliZGNhNWEtOTQ0Yy0z MmRkLWE4MTMtMmQ2MmNhYzE3OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrLrwgo3MfYOc1k4CDB8nYglE7UNeA3F+S310oC8dmbvbxySv5mVzmE jBndeJGbi8taW9LttfOPDngvwbAcW7ze7SASvLFydD31tB2u2I4YxrysYx0ZdmrS 9uhEuAejM91RXT6m+DKZ16j9PyDxS1a51TYGaKPXds8nkn7RogDuBSo+FRTGdivg vlJMytbhMAAeWn+cNfodfjeN3m68uKJzfC0bVXlZNwAPu8/z6ijuMCZ3gpGIGSse JvX2BYCfETWmflJF+j6J76thpoZ5v/9cbcF9lCYkjWf8yxdJ/kNay46sS8rCwaWL 0KWOfXliODARnq73W73OvyB17suACls= -----END CERTIFICATE-----Generated at Fri Sep 25 17:10:33 2026 by rpki-client