$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a23066f-b03e-329b-a737-0e9f6071a868.roa File: 7a23066f-b03e-329b-a737-0e9f6071a868.roa (raw, json) Hash identifier: 3E7tnMeh4NY1Q7f63XuvcYl8KKphNZ1PSSvINehVrUE= Subject key identifier: 42:A2:E0:70:D6:3B:FC:9F:55:DC:B8:19:49:84:1A:41:E7:B5:CB:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497A1C6EE16C8E5FA39E7100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a23066f-b03e-329b-a737-0e9f6071a868.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33657 IP address blocks: 76.111.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:1c:6e:e1:6c:8e:5f:a3:9e:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=76845311-0b91-47a0-86cf-4aea9432407a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f9:c8:c4:f3:e6:96:71:88:e5:c3:55:ab:24: 62:14:50:d6:8b:f7:fe:88:4f:1d:c6:90:52:5e:be: fc:c8:4c:01:b6:8f:c4:9d:99:33:60:57:0f:fb:50: d9:08:2f:b9:71:9c:1e:bd:08:e2:b6:d1:1a:da:db: 71:c2:d1:19:ac:24:f2:9d:f2:b5:a3:b9:1e:64:16: e8:06:61:0f:8e:9a:88:2c:74:33:40:9d:7e:aa:34: 89:96:96:c8:a7:1b:6a:20:10:02:2b:26:95:68:2d: 98:b2:c5:f5:0b:a3:03:31:39:1a:a3:af:04:4e:50: fe:7f:1f:68:c3:36:b3:51:98:3b:07:72:5e:3a:c1: 36:a0:ae:fc:21:b3:d3:6d:ce:d9:9e:7b:24:ad:f7: dc:10:b2:4f:64:2a:08:1c:44:c1:b6:d4:d5:55:7d: 5e:f2:dc:84:f0:7d:5b:7c:e2:f9:87:b4:3b:0f:d1: 78:23:61:5d:bf:d0:84:17:06:7c:47:7f:ad:db:87: 93:82:ae:4a:c2:cd:ed:3e:97:31:38:93:82:14:ed: 3f:f1:ac:4a:4c:4c:00:c3:ab:48:cd:da:ea:1f:f1: 89:7d:4f:35:d1:79:0d:2a:46:60:07:49:94:1a:a8: 3a:84:ec:24:15:bf:4d:14:42:16:43:26:5a:bb:55: 76:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A2:E0:70:D6:3B:FC:9F:55:DC:B8:19:49:84:1A:41:E7:B5:CB:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a23066f-b03e-329b-a737-0e9f6071a868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.111.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:0e:cb:ca:0e:20:8a:9a:0b:b7:bb:92:12:e7:38:44:27:c3: fe:cf:4e:38:17:7e:8a:b6:27:15:25:c7:22:dc:3f:69:47:27: 96:08:f1:f0:98:3d:f0:d7:a4:f1:ae:e1:f4:ae:0e:66:d0:a3: 25:c0:7e:3e:78:55:40:2f:99:7a:62:15:72:84:46:11:71:72: 2b:75:ea:61:bb:69:7c:9f:0b:9b:c9:37:ad:c1:40:5d:36:92: b5:1b:34:c1:94:0d:e1:7d:33:1b:72:b4:4f:76:2b:c7:08:65: 31:84:8e:24:08:d0:db:6e:34:9d:23:7f:d8:72:e2:4c:69:54: f2:61:8f:f9:9a:34:9e:e2:75:5e:19:af:d9:c8:b5:56:c7:a2: 6b:45:04:e1:95:19:27:03:87:33:6e:82:5a:b5:b6:2b:c5:78: 45:02:74:61:73:2b:47:e4:da:52:62:44:c9:2a:9b:e1:b3:35: 62:1c:9d:92:99:6e:1f:8b:e1:72:87:a1:5e:f6:f5:e1:46:bd: db:87:4d:af:28:b0:65:c1:11:ae:6b:5e:7c:63:3f:5a:c6:5c: 6b:90:6b:4b:4b:3f:44:89:5d:f9:65:2e:b7:99:70:07:e6:f3: ba:97:22:b2:36:55:2d:62:b9:0e:fc:e8:2e:ac:2b:3d:26:43: 4b:16:01:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jehxu4WyOX6OecQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzY4NDUzMTEtMGI5MS00N2EwLTg2Y2YtNGFlYTk0MzI0MDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPnIxPPmlnGI5cNVqyRiFFDWi/f+iE8dxpBS Xr78yEwBto/EnZkzYFcP+1DZCC+5cZwevQjittEa2ttxwtEZrCTynfK1o7keZBbo BmEPjpqILHQzQJ1+qjSJlpbIpxtqIBACKyaVaC2YssX1C6MDMTkao68ETlD+fx9o wzazUZg7B3JeOsE2oK78IbPTbc7ZnnskrffcELJPZCoIHETBttTVVX1e8tyE8H1b fOL5h7Q7D9F4I2Fdv9CEFwZ8R3+t24eTgq5Kws3tPpcxOJOCFO0/8axKTEwAw6tI zdrqH/GJfU810XkNKkZgB0mUGqg6hOwkFb9NFEIWQyZau1V2owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKi4HDWO/yfVdy4GUmEGkHntct3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2EyMzA2NmYtYjAzZS0z MjliLWE3MzctMGU5ZjYwNzFhODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTG+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQOy8oOIIqaC7e7khLnOEQnw/7PTjgXfoq2JxUlxyLcP2lHJ5YI8fCY PfDXpPGu4fSuDmbQoyXAfj54VUAvmXpiFXKERhFxcit16mG7aXyfC5vJN63BQF02 krUbNMGUDeF9MxtytE92K8cIZTGEjiQI0NtuNJ0jf9hy4kxpVPJhj/maNJ7idV4Z r9nItVbHomtFBOGVGScDhzNuglq1tivFeEUCdGFzK0fk2lJiRMkqm+GzNWIcnZKZ bh+L4XKHoV729eFGvduHTa8osGXBEa5rXnxjP1rGXGuQa0tLP0SJXfllLreZcAfm 87qXIrI2VS1iuQ786C6sKz0mQ0sWAc8= -----END CERTIFICATE-----Generated at Fri Sep 25 20:23:13 2026 by rpki-client