$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a15bfd6e-6512-3462-92e6-95be63ae433a.roa File: a15bfd6e-6512-3462-92e6-95be63ae433a.roa (raw, json) Hash identifier: xpwc3hTzvgxTfB/v9G6rlJw9E3FZ8x4mWFM/FOg5vns= Subject key identifier: 11:91:0D:32:04:91:8E:56:EC:7A:46:16:86:46:C9:28:B2:B3:44:2B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F03A7E89E30095CCC7355D400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a15bfd6e-6512-3462-92e6-95be63ae433a.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 33287 IP address blocks: 96.208.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:e8:9e:30:09:5c:cc:73:55:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=6a400d8f-82b2-4bf1-bcca-79cfbbbf8dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:10:53:75:0b:3c:04:1a:bb:c1:83:db:a8: d3:a2:a3:84:9b:b3:05:09:7a:6c:41:a1:46:7d:ec: 93:ea:70:63:36:85:c8:92:22:dd:35:12:d6:43:4a: 53:93:14:62:92:60:d0:3d:2e:7e:d9:7c:9d:40:12: d8:fc:49:0e:bd:78:60:b7:ee:20:44:21:c6:32:2d: 51:28:2a:a5:4e:07:5d:6b:2f:12:80:1d:f6:8a:50: 83:26:7c:0f:21:15:30:4d:eb:fa:aa:64:c5:7b:96: 61:ff:1f:8b:a0:cd:57:3d:23:5c:ee:72:fb:51:dc: d3:c4:ac:54:1a:a5:2c:2c:2e:d0:3e:d0:ac:ff:00: 6b:07:83:63:4d:aa:8b:42:98:e3:24:19:da:e3:c8: 23:f3:c8:9d:e3:95:ae:8f:32:5c:8b:64:8e:5b:31: 66:19:ec:7e:31:4e:b3:28:3e:09:3a:84:af:e8:c1: 1c:ed:f7:f7:c6:9e:b0:78:cc:6f:18:33:28:3c:bb: 27:5b:a6:92:a6:f4:1b:25:f1:3a:e9:0b:37:b7:ce: 76:2a:9f:24:2d:54:30:ea:e0:c1:c8:99:da:fc:9e: af:e6:06:80:21:8e:f6:c2:9c:89:ad:3b:a2:18:9f: fd:69:19:46:12:b7:89:ff:19:26:64:24:a5:e7:84: 75:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:91:0D:32:04:91:8E:56:EC:7A:46:16:86:46:C9:28:B2:B3:44:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a15bfd6e-6512-3462-92e6-95be63ae433a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.208.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:05:cb:8f:34:94:33:a2:d9:50:6b:c0:d0:b8:0e:3d:bb:88: 49:2d:43:c4:8e:d1:23:32:8c:ac:0e:10:22:a1:de:1c:64:91: 97:0f:16:78:d0:58:00:24:0d:7a:44:24:f4:6d:f7:e8:99:90: e6:58:4a:a6:ce:32:93:ab:69:2d:90:a1:4e:2b:7d:f2:83:f5: 8f:05:a0:e4:a6:64:70:d8:00:15:a1:a6:d5:76:60:ad:c4:ec: 61:16:1c:d4:df:88:44:02:aa:93:e0:96:44:50:50:1b:7c:ba: e5:2f:1f:6e:e5:1d:5a:0e:1f:70:2d:14:c3:16:45:19:1a:00: c6:67:da:64:2d:f3:b9:82:50:8e:dd:38:4d:7f:9d:00:c1:75: 8a:84:c4:a4:bd:61:53:ff:d7:c1:86:57:de:79:af:aa:e6:47: b4:05:35:82:1c:f2:50:c3:a1:ee:ef:3b:04:3a:f5:72:26:a6: 30:f3:97:e0:48:7e:2f:72:13:29:86:e9:9e:12:ec:27:07:9b: 77:65:c3:7a:a7:a2:ba:f7:6c:1d:1b:f1:2e:8d:71:2e:61:f9: 94:7e:fa:64:33:26:71:6b:71:4a:ab:67:d7:58:5a:57:c1:f3: 78:8c:08:bb:4b:93:52:9d:cd:c6:ba:49:98:1c:80:91:19:5a: 6b:cc:36:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp+ieMAlczHNV1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk NmE0MDBkOGYtODJiMi00YmYxLWJjY2EtNzljZmJiYmY4ZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/AQU3ULPAQau8GD26jToqOEm7MFCXpsQaFG feyT6nBjNoXIkiLdNRLWQ0pTkxRikmDQPS5+2XydQBLY/EkOvXhgt+4gRCHGMi1R KCqlTgdday8SgB32ilCDJnwPIRUwTev6qmTFe5Zh/x+LoM1XPSNc7nL7UdzTxKxU GqUsLC7QPtCs/wBrB4NjTaqLQpjjJBna48gj88id45WujzJci2SOWzFmGex+MU6z KD4JOoSv6MEc7ff3xp6weMxvGDMoPLsnW6aSpvQbJfE66Qs3t852Kp8kLVQw6uDB yJna/J6v5gaAIY72wpyJrTuiGJ/9aRlGEreJ/xkmZCSl54R1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGRDTIEkY5W7HpGFoZGySiys0QrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTE1YmZkNmUtNjUxMi0z NDYyLTkyZTYtOTViZTYzYWU0MzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYNA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQFy480lDOi2VBrwNC4Dj27iEktQ8SO0SMyjKwOECKh3hxkkZcPFnjQ WAAkDXpEJPRt9+iZkOZYSqbOMpOraS2QoU4rffKD9Y8FoOSmZHDYABWhptV2YK3E 7GEWHNTfiEQCqpPglkRQUBt8uuUvH27lHVoOH3AtFMMWRRkaAMZn2mQt87mCUI7d OE1/nQDBdYqExKS9YVP/18GGV955r6rmR7QFNYIc8lDDoe7vOwQ69XImpjDzl+BI fi9yEymG6Z4S7CcHm3dlw3qnorr3bB0b8S6NcS5h+ZR++mQzJnFrcUqrZ9dYWlfB 83iMCLtLk1Kdzca6SZgcgJEZWmvMNo0= -----END CERTIFICATE-----Generated at Sat Sep 26 03:43:57 2026 by rpki-client