$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8db12c1a-3f15-378f-b915-7d3a6fd112a7.roa File: 8db12c1a-3f15-378f-b915-7d3a6fd112a7.roa (raw, json) Hash identifier: 4nf6+nHoHq4NS/keCCtq+fZ/RV0nmvk40u4zhpRIz2A= Subject key identifier: 32:81:51:6A:8B:3D:71:4A:CA:A1:0B:9B:29:2C:79:82:0E:3D:58:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4982E16948E782FDC0D9F700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8db12c1a-3f15-378f-b915-7d3a6fd112a7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33661 IP address blocks: 96.68.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:e1:69:48:e7:82:fd:c0:d9:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=da19529b-3570-4593-8aa7-4032bd61410a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:65:b3:03:d4:60:fb:36:4b:3d:36:cb:00:cf: 40:b8:41:1e:ac:cf:92:a2:50:5b:f9:71:b7:b0:19: 2f:70:b7:6b:64:02:d7:24:bb:c4:66:08:f2:83:f6: 48:7e:88:bb:90:c7:ae:e7:48:f1:72:c9:9d:2c:ab: 28:c4:b8:ec:8d:fb:9f:5d:b3:21:7a:6b:97:ae:24: b2:ee:71:62:6f:6b:fb:a2:5d:f6:8f:f4:6e:8e:36: 5f:c6:2e:05:06:b8:86:8f:4e:94:8f:db:91:43:55: 9a:2e:9f:3e:83:c3:bb:37:7c:cf:f1:c4:a6:d2:2d: 25:0f:c2:e0:c9:77:05:86:e3:13:f5:29:f6:86:a4: 37:ee:49:20:e1:53:71:6e:b7:73:75:14:65:32:90: 7a:fe:0e:eb:91:60:bb:7c:81:c4:5f:e1:ef:14:ef: 02:e8:ae:18:ba:62:44:a8:0b:fd:2b:3c:97:13:ee: 30:6d:cd:1a:87:65:30:25:96:09:b9:65:7a:f2:82: ee:78:8e:98:9c:6f:18:3d:d2:ec:1f:31:a9:88:b6: c5:94:4b:a0:7e:8e:ea:af:5a:6c:18:48:35:ee:92: 59:9e:08:03:4a:c7:b9:b1:da:da:d9:ff:f8:39:87: 3d:35:7b:3f:ef:58:d5:eb:01:9f:fc:15:71:d8:2d: 4c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:81:51:6A:8B:3D:71:4A:CA:A1:0B:9B:29:2C:79:82:0E:3D:58:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8db12c1a-3f15-378f-b915-7d3a6fd112a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.68.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:87:f2:64:77:a5:04:59:56:a4:91:d4:00:a7:85:d5:15:0c: 4b:f1:4a:ba:9a:82:e6:c7:7f:db:ec:b3:12:99:d6:74:ff:e3: 22:24:cf:e8:df:5f:1c:26:f0:9e:cf:4b:6b:9a:0e:c3:f9:b9: 21:b5:3d:2c:4c:8d:b5:67:74:7c:50:a5:bd:2f:0a:af:14:ef: 1c:68:5c:b2:96:0c:69:8a:73:67:54:10:9a:30:3d:b1:71:47: e1:01:c4:17:b5:eb:10:e7:ae:8f:41:06:e7:ec:66:a4:86:19: 2e:34:84:99:a2:43:25:bd:bf:b4:e8:b2:d4:d0:bc:f4:ab:42: d1:2b:ad:14:71:c9:84:e7:67:2f:3e:05:fa:d3:5c:32:0c:21: 94:4c:94:13:8c:8f:01:7d:4d:ca:85:0b:4e:94:19:db:c0:ba: fb:11:0f:a1:ca:e8:34:5e:6b:29:14:ba:60:47:b6:5a:1d:9e: 17:81:2e:fc:76:b2:72:7f:43:24:ae:c2:22:be:4d:a1:7c:30: 0a:98:ba:a7:80:0c:e0:82:42:a3:80:54:75:55:6b:a2:b8:9a: d5:eb:8b:4d:48:a1:c2:8f:9d:7e:e1:0f:b6:83:cc:70:f7:f7: 5d:3f:80:f9:0b:0c:39:23:c6:41:cd:94:1e:02:da:56:42:60: 6c:a2:e8:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JguFpSOeC/cDZ9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGExOTUyOWItMzU3MC00NTkzLThhYTctNDAzMmJkNjE0MTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2WzA9Rg+zZLPTbLAM9AuEEerM+SolBb+XG3 sBkvcLdrZALXJLvEZgjyg/ZIfoi7kMeu50jxcsmdLKsoxLjsjfufXbMhemuXriSy 7nFib2v7ol32j/RujjZfxi4FBriGj06Uj9uRQ1WaLp8+g8O7N3zP8cSm0i0lD8Lg yXcFhuMT9Sn2hqQ37kkg4VNxbrdzdRRlMpB6/g7rkWC7fIHEX+HvFO8C6K4YumJE qAv9KzyXE+4wbc0ah2UwJZYJuWV68oLueI6YnG8YPdLsHzGpiLbFlEugfo7qr1ps GEg17pJZnggDSse5sdra2f/4OYc9NXs/71jV6wGf/BVx2C1MVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKBUWqLPXFKyqELmykseYIOPVhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRiMTJjMWEtM2YxNS0z NzhmLWI5MTUtN2QzYTZmZDExMmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYETQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaH8mR3pQRZVqSR1ACnhdUVDEvxSrqagubHf9vssxKZ1nT/4yIkz+jf Xxwm8J7PS2uaDsP5uSG1PSxMjbVndHxQpb0vCq8U7xxoXLKWDGmKc2dUEJowPbFx R+EBxBe16xDnro9BBufsZqSGGS40hJmiQyW9v7TostTQvPSrQtErrRRxyYTnZy8+ BfrTXDIMIZRMlBOMjwF9TcqFC06UGdvAuvsRD6HK6DReaykUumBHtlodnheBLvx2 snJ/QySuwiK+TaF8MAqYuqeADOCCQqOAVHVVa6K4mtXri01IocKPnX7hD7aDzHD3 910/gPkLDDkjxkHNlB4C2lZCYGyi6PQ= -----END CERTIFICATE-----Generated at Tue Sep 29 08:30:40 2026 by rpki-client