$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e3b3490-b9b3-3a45-a7ae-dbf8a0900bc0.roa File: 8e3b3490-b9b3-3a45-a7ae-dbf8a0900bc0.roa (raw, json) Hash identifier: HkrQahaHaEa8z5M1PxZqRgEH3sFg2IxgawCQ4ziC52I= Subject key identifier: 31:61:9F:37:C7:9E:37:FA:9A:B4:BC:D2:3D:DB:F5:5C:7E:8D:87:F0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862D5560504E73748226900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e3b3490-b9b3-3a45-a7ae-dbf8a0900bc0.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 76.139.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:d5:56:05:04:e7:37:48:22:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=23f3d786-abb4-46ba-971c-9ca000209408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9a:2a:3b:04:f0:cc:08:ab:6f:80:6c:b0:57: 3e:ba:0d:d9:6a:c6:cf:93:e2:ea:18:7d:c0:63:5a: 34:0e:83:ab:b5:b0:0f:83:ab:43:d2:43:62:74:1b: 59:b5:93:55:13:3d:ef:be:d0:87:1d:df:68:d2:d2: 50:5b:5a:21:a0:5d:b5:cd:93:94:c4:bf:d5:2a:0f: e8:dc:0f:f6:d5:a1:68:4f:36:c0:bb:2b:25:21:76: 82:42:b6:18:d7:b8:85:6d:1a:d8:16:1d:a1:ae:01: f5:90:93:d5:a9:1a:d8:3d:6b:4b:66:ed:35:64:9c: e7:ad:0f:33:10:e6:01:14:03:00:96:ea:e5:e3:1d: c7:3d:8b:13:2f:cb:7a:37:cb:e2:e8:03:96:21:b6: 2a:01:d2:83:45:6c:16:2b:ab:5d:08:21:09:96:7e: 08:41:8a:38:67:94:ba:48:b4:d4:68:0e:54:9d:e6: 32:34:ea:73:ab:b8:64:e2:10:a0:19:00:ca:1d:cd: 48:49:4f:c6:2d:f7:c0:b8:87:6f:e9:d0:ce:fa:10: 49:b2:89:8e:5b:bc:e3:c9:04:28:80:f9:14:ae:68: d1:d7:23:64:91:91:5b:48:41:18:a4:0f:78:b1:35: d9:42:54:ed:60:cb:b5:29:80:45:5d:2d:67:ea:41: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:61:9F:37:C7:9E:37:FA:9A:B4:BC:D2:3D:DB:F5:5C:7E:8D:87:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e3b3490-b9b3-3a45-a7ae-dbf8a0900bc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.139.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:86:f3:63:cf:c8:43:16:42:7a:f7:36:8f:7f:a6:7d:09:79: ee:96:0d:e1:06:de:69:4f:01:33:e5:90:a2:19:11:36:f5:8e: 50:59:7e:45:a9:dc:ca:40:ea:57:de:27:13:82:82:44:b7:7f: ed:d7:9c:07:67:3f:c5:94:e0:0b:c7:5b:c7:99:ba:60:67:63: a6:5e:48:32:e8:09:2a:70:92:3a:59:92:47:35:8a:c8:ad:fb: 5e:5e:6d:90:ea:be:46:3d:2d:9d:cf:31:72:46:dd:33:9d:9e: 63:bc:e8:6a:7c:21:6c:6e:99:d9:da:a9:a6:a8:9e:51:b4:32: ec:cf:06:c2:6e:e5:e7:c4:63:6d:29:4e:4d:2c:37:ee:36:18: 60:16:e2:99:31:f5:5d:ac:c2:17:bb:41:e0:46:d7:ce:d7:62: e8:b2:5b:9a:c3:82:92:c0:10:67:94:d4:65:4e:57:8a:95:06: 3a:70:2d:a1:da:69:5b:20:e5:41:53:91:2c:46:44:a7:d1:7a: 3c:b4:55:19:28:3d:21:31:8a:83:11:3b:03:db:89:f2:12:22: 09:ff:24:2c:46:ff:31:41:7b:f1:17:31:d9:bb:83:5f:b2:b9: 3b:95:77:6b:86:29:5d:88:6c:0e:67:c8:80:e5:26:df:ad:fa: f6:f8:d2:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYtVWBQTnN0giaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MjNmM2Q3ODYtYWJiNC00NmJhLTk3MWMtOWNhMDAwMjA5NDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZoqOwTwzAirb4BssFc+ug3ZasbPk+LqGH3A Y1o0DoOrtbAPg6tD0kNidBtZtZNVEz3vvtCHHd9o0tJQW1ohoF21zZOUxL/VKg/o 3A/21aFoTzbAuyslIXaCQrYY17iFbRrYFh2hrgH1kJPVqRrYPWtLZu01ZJznrQ8z EOYBFAMAlurl4x3HPYsTL8t6N8vi6AOWIbYqAdKDRWwWK6tdCCEJln4IQYo4Z5S6 SLTUaA5UneYyNOpzq7hk4hCgGQDKHc1ISU/GLffAuIdv6dDO+hBJsomOW7zjyQQo gPkUrmjR1yNkkZFbSEEYpA94sTXZQlTtYMu1KYBFXS1n6kHNUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFhnzfHnjf6mrS80j3b9Vx+jYfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGUzYjM0OTAtYjliMy0z YTQ1LWE3YWUtZGJmOGEwOTAwYmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIuWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWG82PPyEMWQnr3No9/pn0Jee6WDeEG3mlPATPlkKIZETb1jlBZfkWp 3MpA6lfeJxOCgkS3f+3XnAdnP8WU4AvHW8eZumBnY6ZeSDLoCSpwkjpZkkc1isit +15ebZDqvkY9LZ3PMXJG3TOdnmO86Gp8IWxumdnaqaaonlG0MuzPBsJu5efEY20p Tk0sN+42GGAW4pkx9V2swhe7QeBG187XYuiyW5rDgpLAEGeU1GVOV4qVBjpwLaHa aVsg5UFTkSxGRKfRejy0VRkoPSExioMROwPbifISIgn/JCxG/zFBe/EXMdm7g1+y uTuVd2uGKV2IbA5nyIDlJt+t+vb40uA= -----END CERTIFICATE-----Generated at Wed Sep 23 10:50:22 2026 by rpki-client