$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/921242e4-b36f-3a22-8479-2aac47a44407.roa File: 921242e4-b36f-3a22-8479-2aac47a44407.roa (raw, json) Hash identifier: J1JHK6dhNdl4MruI2JJSXRkoDqROjsKCUS7pGJF9Ajg= Subject key identifier: 5B:36:50:D8:1C:7B:7C:A8:0F:4A:49:E7:37:17:0D:94:90:0A:8A:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4980BA182D31024613CBE5E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/921242e4-b36f-3a22-8479-2aac47a44407.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33489 IP address blocks: 96.83.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:ba:18:2d:31:02:46:13:cb:e5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d5bf801e-fc1b-4c13-bc44-6b98392d2a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:c2:ee:9b:2b:63:8c:73:42:3b:9c:30:5f: 50:d0:ca:cd:8d:fa:56:84:a6:e9:68:b1:60:a6:b7: 1b:f3:f7:42:5d:01:d3:00:70:f4:f1:5f:5c:ab:99: c4:c9:ca:b3:42:07:da:0c:fb:08:c3:e5:a8:a2:d6: 3b:e0:7f:bb:e6:d5:a6:e9:0b:cc:8b:f0:76:79:dd: 15:f4:53:0d:0e:24:2d:67:a2:c1:70:c2:9c:f3:39: ae:c0:e1:43:b5:48:42:55:49:bd:71:08:ac:37:ec: 34:9e:12:92:c8:70:e9:3f:e9:29:03:0f:ad:23:91: da:41:8d:d5:e1:b2:b9:b6:46:e2:24:3e:04:58:21: a4:53:77:93:8f:3c:36:ec:a4:de:22:2a:07:05:88: 43:24:24:e5:21:c2:a3:fb:14:bc:c3:1a:fe:3d:2c: df:a7:ef:b5:a7:04:c0:69:57:60:6a:40:19:0d:c5: 50:44:94:cf:8f:a7:a4:79:51:e8:2e:20:a3:c6:f7: 2a:5d:67:b2:00:f2:f6:77:62:2f:94:b2:11:1d:82: 4a:e2:4a:0c:5f:7b:1c:0a:24:2f:08:6b:2c:f5:54: b0:b6:1b:fd:e0:96:9e:02:5c:12:d0:88:79:a4:cf: d5:83:d2:76:9f:38:39:c2:db:ba:9a:d9:ff:28:af: 4c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:36:50:D8:1C:7B:7C:A8:0F:4A:49:E7:37:17:0D:94:90:0A:8A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/921242e4-b36f-3a22-8479-2aac47a44407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.83.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:8f:ff:a8:ef:43:0b:cc:80:f0:c6:01:88:78:c7:b8:f2:20: b1:50:72:24:d1:75:30:73:79:3d:1d:21:c7:92:e9:a5:99:93: 10:db:4d:ae:d1:3e:b0:d7:63:7e:be:12:fa:f9:2e:48:b9:14: 6c:25:0d:8c:00:12:90:f3:65:5a:6f:96:d6:ca:f7:f3:fd:c6: 4a:9f:22:8e:16:62:a9:66:13:ff:55:42:08:5e:92:46:b5:fb: a8:15:b2:f4:be:28:fa:30:cf:0d:92:34:cb:4e:e6:bf:0a:23: ef:bd:b0:56:25:5e:5a:a3:f0:f5:f5:13:ee:db:4c:02:53:9d: ec:29:51:3b:b9:d0:bf:e7:63:61:36:50:1e:e9:7a:7d:3c:10: c0:2d:01:4a:5a:84:ba:39:e0:eb:1f:d0:16:e5:21:8f:de:bf: b2:28:44:ea:67:59:34:c6:b4:b1:80:be:53:70:f7:f3:e4:b0: 2b:6e:42:53:c8:d9:2e:ee:d6:54:58:b7:d9:b5:f5:f1:2a:2c: 73:f5:0a:dc:ad:27:98:37:1a:0d:59:11:a2:16:b7:5e:de:1c: d5:d3:b1:79:41:b1:c4:97:86:f9:6e:70:c6:36:64:32:5a:12: 06:75:0a:d3:8b:d6:5c:f8:8a:5c:cb:9b:4c:57:da:5b:75:55: 25:2e:03:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgLoYLTECRhPL5eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDViZjgwMWUtZmMxYi00YzEzLWJjNDQtNmI5ODM5MmQyYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzXC7psrY4xzQjucMF9Q0MrNjfpWhKbpaLFg prcb8/dCXQHTAHD08V9cq5nEycqzQgfaDPsIw+WootY74H+75tWm6QvMi/B2ed0V 9FMNDiQtZ6LBcMKc8zmuwOFDtUhCVUm9cQisN+w0nhKSyHDpP+kpAw+tI5HaQY3V 4bK5tkbiJD4EWCGkU3eTjzw27KTeIioHBYhDJCTlIcKj+xS8wxr+PSzfp++1pwTA aVdgakAZDcVQRJTPj6ekeVHoLiCjxvcqXWeyAPL2d2IvlLIRHYJK4koMX3scCiQv CGss9VSwthv94JaeAlwS0Ih5pM/Vg9J2nzg5wtu6mtn/KK9M1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFs2UNgce3yoD0pJ5zcXDZSQCorFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTIxMjQyZTQtYjM2Zi0z YTIyLTg0NzktMmFhYzQ3YTQ0NDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYFOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOP/6jvQwvMgPDGAYh4x7jyILFQciTRdTBzeT0dIceS6aWZkxDbTa7R PrDXY36+Evr5Lki5FGwlDYwAEpDzZVpvltbK9/P9xkqfIo4WYqlmE/9VQghekka1 +6gVsvS+KPowzw2SNMtO5r8KI++9sFYlXlqj8PX1E+7bTAJTnewpUTu50L/nY2E2 UB7pen08EMAtAUpahLo54Osf0BblIY/ev7IoROpnWTTGtLGAvlNw9/PksCtuQlPI 2S7u1lRYt9m19fEqLHP1CtytJ5g3Gg1ZEaIWt17eHNXTsXlBscSXhvlucMY2ZDJa EgZ1CtOL1lz4ilzLm0xX2lt1VSUuA30= -----END CERTIFICATE-----Generated at Fri Sep 25 21:06:39 2026 by rpki-client