$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f4e2974-ab2e-34bd-8b0c-c78c1141175c.roa File: 8f4e2974-ab2e-34bd-8b0c-c78c1141175c.roa (raw, json) Hash identifier: ZXt7k+x41VsqpHuqtuM1+wfbgSTsRex1kMPPXKG7g34= Subject key identifier: AF:DA:DB:51:35:C4:F3:81:D0:20:0D:97:7A:3C:20:DD:CA:5B:50:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F067249E57F0596CB4129CA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f4e2974-ab2e-34bd-8b0c-c78c1141175c.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 22909 IP address blocks: 76.159.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:49:e5:7f:05:96:cb:41:29:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=22cdc6c9-9553-422a-bfd2-c774f3720271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:b0:37:c1:e6:e9:6a:5a:b7:a8:d4:ce:4c: d0:08:b3:ac:7a:58:c6:c3:5c:67:1d:32:67:51:02: a4:d3:8f:39:c5:58:dc:cd:11:7b:a4:d9:58:de:52: 4e:55:bc:ee:dd:8d:a2:63:1a:75:d0:01:dc:fb:71: 4a:12:d3:f2:ea:60:a0:6c:6e:36:a6:96:59:67:04: 16:64:a0:f0:0c:9f:9b:17:12:20:0b:30:d4:38:d6: d2:0e:23:d5:29:63:6d:68:57:43:06:36:2b:99:e3: a5:6e:f5:61:ec:d0:66:b9:0e:5d:a0:ea:16:39:fe: 5c:cb:77:25:48:df:44:95:3e:5d:5c:df:4b:5d:91: d0:aa:8d:9f:c1:23:a9:3e:79:b9:a0:88:21:74:a9: fb:36:a8:b1:12:58:96:01:61:bb:ab:89:88:76:0d: 87:88:fc:35:d8:05:70:14:d4:31:bd:2c:94:94:1a: 35:f0:ff:75:cd:67:77:65:e4:64:55:bb:72:c9:cd: ef:04:14:03:d1:34:af:6d:51:57:57:99:16:a7:2d: 6d:41:6b:b3:f8:fe:80:d9:29:86:c0:5f:79:dc:67: 21:35:df:8b:3b:0b:31:75:78:5d:17:a8:9c:7b:63: b5:e3:06:4a:c5:1e:07:39:a4:c7:38:9c:60:04:33: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DA:DB:51:35:C4:F3:81:D0:20:0D:97:7A:3C:20:DD:CA:5B:50:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f4e2974-ab2e-34bd-8b0c-c78c1141175c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.159.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d3:97:7e:a7:90:c6:0e:d6:00:31:4a:89:48:d6:c8:f7:fe: 65:3c:c1:8d:26:ce:41:2f:5d:02:b8:67:61:b6:13:aa:a9:e8: 97:0a:4d:0e:1c:0c:a4:53:0c:67:77:60:4a:e9:97:e5:db:c2: cc:70:29:5a:9f:13:0f:e4:b1:81:01:8c:16:b5:aa:f5:d0:bf: 17:26:5e:fa:6d:fc:c9:b2:3d:f2:7c:89:f8:c2:7c:fc:03:85: c7:2e:b2:df:1f:4b:31:ec:fc:bc:f3:fb:85:d0:c0:ab:24:f4: c0:a1:b7:38:46:eb:d5:69:e5:11:08:00:98:43:69:76:d8:ea: 16:74:ac:7a:a1:c3:2b:05:d4:06:3c:f0:36:20:73:0f:8c:e5: bb:00:19:5b:9c:ec:31:10:25:c8:4b:82:c6:0f:ee:21:4b:c2: c0:ff:88:fb:05:8d:fd:28:a2:f1:49:86:29:6b:c0:6e:2a:b4: a2:3b:0e:79:aa:22:cb:aa:2b:35:c0:0e:c3:13:cb:d5:31:86: 69:c0:1d:90:db:9d:e5:a6:ad:cb:a5:10:c3:22:84:26:5f:a6: 80:c4:0c:23:41:fc:1d:ff:fb:a1:93:4c:06:09:0f:23:56:51: 88:db:66:00:37:e4:96:36:8e:e2:3f:3e:89:ce:40:64:1c:0f: 90:4b:e3:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcknlfwWWy0EpygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MjJjZGM2YzktOTU1My00MjJhLWJmZDItYzc3NGYzNzIwMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut+wN8Hm6Wpat6jUzkzQCLOseljGw1xnHTJn UQKk0485xVjczRF7pNlY3lJOVbzu3Y2iYxp10AHc+3FKEtPy6mCgbG42ppZZZwQW ZKDwDJ+bFxIgCzDUONbSDiPVKWNtaFdDBjYrmeOlbvVh7NBmuQ5doOoWOf5cy3cl SN9ElT5dXN9LXZHQqo2fwSOpPnm5oIghdKn7NqixEliWAWG7q4mIdg2HiPw12AVw FNQxvSyUlBo18P91zWd3ZeRkVbtyyc3vBBQD0TSvbVFXV5kWpy1tQWuz+P6A2SmG wF953GchNd+LOwsxdXhdF6ice2O14wZKxR4HOaTHOJxgBDPTNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/a21E1xPOB0CANl3o8IN3KW1BzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGY0ZTI5NzQtYWIyZS0z NGJkLThiMGMtYzc4YzExNDExNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGTJ9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErTl36nkMYO1gAxSolI1sj3/mU8wY0mzkEvXQK4Z2G2E6qp6JcKTQ4c DKRTDGd3YErpl+XbwsxwKVqfEw/ksYEBjBa1qvXQvxcmXvpt/MmyPfJ8ifjCfPwD hccust8fSzHs/Lzz+4XQwKsk9MChtzhG69Vp5REIAJhDaXbY6hZ0rHqhwysF1AY8 8DYgcw+M5bsAGVuc7DEQJchLgsYP7iFLwsD/iPsFjf0oovFJhilrwG4qtKI7Dnmq IsuqKzXADsMTy9UxhmnAHZDbneWmrculEMMihCZfpoDEDCNB/B3/+6GTTAYJDyNW UYjbZgA35JY2juI/PonOQGQcD5BL41M= -----END CERTIFICATE-----Generated at Thu Sep 24 08:59:22 2026 by rpki-client