$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5f7290e-db87-3cf6-a021-ee05081e408b.roa File: a5f7290e-db87-3cf6-a021-ee05081e408b.roa (raw, json) Hash identifier: axR+Xx8dB4j8PaDmY/zrlN/r3p7WgNguXpmu0lduIQU= Subject key identifier: FD:6D:0E:9E:2C:6B:B0:12:2B:C4:7C:EA:52:9A:4F:7F:05:D1:76:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A0EDC4BE1D1D8F115F8180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5f7290e-db87-3cf6-a021-ee05081e408b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 76.133.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a0:ed:c4:be:1d:1d:8f:11:5f:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=827c7fa7-6b95-4f79-b653-1332430b6e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:88:4e:8c:6d:49:de:35:63:c9:5f:25:80:45: f8:25:42:ff:f2:a9:e4:67:dc:d4:a2:b5:63:3b:b8: d1:80:86:93:f4:4d:dc:f6:16:f5:59:1c:11:63:c1: 74:b6:2e:ad:65:7b:12:a2:a3:d9:e8:4c:e9:1b:f0: b4:bb:41:27:17:7c:58:b2:f6:f9:50:25:a4:1a:a4: f5:2f:b6:39:e5:fd:3c:be:ee:f7:ed:76:2d:bf:3e: 40:f9:9f:7e:de:11:a9:c7:0f:1b:fc:5f:4a:17:e9: 28:97:a1:d5:a1:99:51:73:0d:01:c0:36:1f:a8:86: a6:a2:d0:1c:e2:4d:af:b2:71:ac:ce:5e:7d:f4:ad: 67:a4:b9:c9:22:94:7f:0f:a8:6b:14:f7:ba:c3:43: c8:b7:13:9e:f1:1f:3f:48:50:96:5e:94:21:a6:05: 52:b2:4a:26:00:ec:ff:02:83:47:ca:80:a4:31:3f: bd:f7:a2:a4:0c:41:64:86:8e:0a:02:19:ae:85:1b: c9:0a:10:48:d1:a3:c8:97:5b:ce:15:28:fc:51:62: 5a:75:fe:2c:f7:55:b0:7d:93:68:40:c8:5f:e8:38: 3a:14:0d:3b:4f:b0:88:a6:bb:3c:51:f4:d1:21:3f: bb:69:5b:eb:c9:1d:c5:ab:4d:7a:93:83:c5:e0:36: b2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6D:0E:9E:2C:6B:B0:12:2B:C4:7C:EA:52:9A:4F:7F:05:D1:76:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5f7290e-db87-3cf6-a021-ee05081e408b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ad:e4:1d:54:26:36:ff:a1:d6:00:10:fc:11:41:aa:a1:55: 2c:54:b8:bb:ae:76:ec:0a:50:dc:ff:8a:90:42:09:b2:86:2d: f3:9a:5d:c9:81:80:65:bb:18:1d:6a:26:c9:6f:df:b5:19:22: f7:ea:82:17:91:ab:e4:80:5f:d9:b6:25:0a:4c:91:b5:a4:15: 1a:1d:6a:51:8f:a9:4d:38:6f:dd:82:ab:b7:31:b6:85:ff:21: 23:db:8b:e1:e9:b9:4f:71:16:98:89:35:58:67:37:ac:3c:6f: 65:70:59:90:52:eb:c0:fd:7c:4e:25:3e:a9:1b:87:0f:93:90: 09:80:53:bc:63:7a:b3:1d:3a:5c:65:60:90:aa:7d:49:bb:98: 4d:1e:11:73:9b:96:56:95:f7:dc:11:16:5a:9b:ae:93:4b:3b: 23:69:8a:a1:63:50:99:6a:08:a6:b6:63:4a:05:9b:cd:25:fb: 08:78:61:bd:9c:ef:25:c9:ba:2c:21:3a:3c:91:04:1d:70:81: 42:9e:a2:95:9c:1f:0d:49:a7:2f:9f:d5:41:35:c9:ae:9d:60: 2f:1e:c7:db:28:2e:16:f3:b0:d6:55:18:69:da:19:37:04:ca: b0:f7:9e:40:b9:81:ac:49:12:ce:8a:31:39:50:b0:2a:67:02: b1:ba:22:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoO3Evh0djxFfgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ODI3YzdmYTctNmI5NS00Zjc5LWI2NTMtMTMzMjQzMGI2ZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4hOjG1J3jVjyV8lgEX4JUL/8qnkZ9zUorVj O7jRgIaT9E3c9hb1WRwRY8F0ti6tZXsSoqPZ6EzpG/C0u0EnF3xYsvb5UCWkGqT1 L7Y55f08vu737XYtvz5A+Z9+3hGpxw8b/F9KF+kol6HVoZlRcw0BwDYfqIamotAc 4k2vsnGszl599K1npLnJIpR/D6hrFPe6w0PItxOe8R8/SFCWXpQhpgVSskomAOz/ AoNHyoCkMT+996KkDEFkho4KAhmuhRvJChBI0aPIl1vOFSj8UWJadf4s91WwfZNo QMhf6Dg6FA07T7CIprs8UfTRIT+7aVvryR3Fq016k4PF4DayJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1tDp4sa7ASK8R86lKaT38F0Xa2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTVmNzI5MGUtZGI4Ny0z Y2Y2LWEwMjEtZWUwNTA4MWU0MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSt5B1UJjb/odYAEPwRQaqhVSxUuLuuduwKUNz/ipBCCbKGLfOaXcmB gGW7GB1qJslv37UZIvfqgheRq+SAX9m2JQpMkbWkFRodalGPqU04b92Cq7cxtoX/ ISPbi+HpuU9xFpiJNVhnN6w8b2VwWZBS68D9fE4lPqkbhw+TkAmAU7xjerMdOlxl YJCqfUm7mE0eEXObllaV99wRFlqbrpNLOyNpiqFjUJlqCKa2Y0oFm80l+wh4Yb2c 7yXJuiwhOjyRBB1wgUKeopWcHw1Jpy+f1UE1ya6dYC8ex9soLhbzsNZVGGnaGTcE yrD3nkC5gaxJEs6KMTlQsCpnArG6IiY= -----END CERTIFICATE-----Generated at Wed Sep 23 23:31:55 2026 by rpki-client