$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae1c82f-8113-3185-924f-d0987ca1fcdc.roa File: bae1c82f-8113-3185-924f-d0987ca1fcdc.roa (raw, json) Hash identifier: pXQO3cjMQ3Oy/2ETzePuh0O+BryKvn9ZpFjBjGCz24c= Subject key identifier: 57:C2:3F:A7:63:18:4B:C5:CA:EE:93:F9:BC:EA:81:E0:93:A8:A2:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497AD05B0674C3BA03810340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae1c82f-8113-3185-924f-d0987ca1fcdc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7922 IP address blocks: 96.115.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:d0:5b:06:74:c3:ba:03:81:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ffc4243f-1dc9-420e-a54f-e494d6834162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:6f:04:f3:39:18:ad:c1:d5:18:b8:62:81: 81:4d:bc:be:04:82:e3:0d:2e:80:29:aa:4f:db:f1: f7:8b:d9:eb:39:80:d4:51:18:c2:93:b8:30:bf:45: 5b:b4:f3:71:f1:f0:37:96:80:12:6e:bc:2d:12:ee: 16:f1:45:2c:49:44:38:c6:19:ae:0d:fc:6d:ed:f4: 8a:4a:72:42:4e:83:e8:b3:78:92:fb:5e:e8:e5:65: 08:e5:44:20:59:6a:be:b9:70:35:48:52:db:a0:ac: 01:c1:92:a5:46:fa:5b:8f:57:ab:5b:53:76:3e:a7: 72:c8:23:a2:a3:06:4c:6c:bc:25:e3:eb:73:0f:45: 25:cd:84:eb:fe:b2:c9:54:04:a8:37:5e:7e:b3:6b: 31:0a:78:35:6d:e8:30:0d:05:5b:c3:a7:14:06:ef: 39:c8:b1:53:a4:71:a9:43:b2:e8:12:bc:d3:9c:cd: 5b:8b:42:56:c5:15:4c:73:e0:e0:b3:da:8f:dc:bb: b6:7d:49:d6:b8:91:52:b0:4a:61:02:e1:c5:3e:54: 4e:5c:4d:62:e7:0b:2a:a4:81:2e:7e:00:f7:89:21: b7:7e:d9:43:91:c1:b0:34:e3:60:3d:b3:d3:0b:c7: a7:df:fb:6b:52:9e:4c:e8:c7:08:f7:69:52:bd:1a: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C2:3F:A7:63:18:4B:C5:CA:EE:93:F9:BC:EA:81:E0:93:A8:A2:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae1c82f-8113-3185-924f-d0987ca1fcdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.115.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:bf:97:2a:ca:4a:47:8b:2e:66:8c:f4:ca:8f:10:29:60:59: f1:41:5b:36:9d:42:63:e5:45:2c:34:c0:c7:91:a6:d5:41:19: 92:d5:d4:f4:46:d4:80:8a:45:ca:3d:4b:e0:d4:a5:2f:ab:19: 0e:7a:74:cb:03:eb:50:f8:e4:55:e4:aa:40:0e:0b:11:a7:20: 67:59:c8:fb:1b:47:b9:f7:e7:66:cc:1d:a1:0a:a3:9d:de:7e: 39:ae:df:a5:99:51:0e:38:d6:aa:eb:a9:9a:a9:73:d9:65:6d: d7:d7:c5:af:ab:1b:72:4d:8e:45:c6:c7:9b:c3:26:47:ab:4b: 9b:4b:35:f3:d2:13:ab:86:fe:b3:db:f9:40:08:b1:d5:38:c6: b0:75:f8:07:26:60:74:23:95:8f:f4:b9:f2:43:5d:c7:7b:18: ae:c6:60:ce:2e:54:bc:04:a9:cc:4f:21:26:75:25:e1:9d:41: bd:72:a9:d5:45:9b:5c:f8:6c:54:f6:8d:32:06:20:e1:19:f9: ef:b9:aa:d1:80:6c:a2:b3:6a:80:60:4a:76:31:4e:bd:e2:56: dd:4f:ac:dc:e4:4a:1a:05:ca:09:2f:2f:b3:39:81:a2:98:42: 11:4c:24:1d:51:fe:03:29:a7:10:ef:1c:39:a0:79:72:2e:70: 59:75:76:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JetBbBnTDugOBA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmZjNDI0M2YtMWRjOS00MjBlLWE1NGYtZTQ5NGQ2ODM0MTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjJvBPM5GK3B1Ri4YoGBTby+BILjDS6AKapP 2/H3i9nrOYDUURjCk7gwv0VbtPNx8fA3loASbrwtEu4W8UUsSUQ4xhmuDfxt7fSK SnJCToPos3iS+17o5WUI5UQgWWq+uXA1SFLboKwBwZKlRvpbj1erW1N2PqdyyCOi owZMbLwl4+tzD0UlzYTr/rLJVASoN15+s2sxCng1begwDQVbw6cUBu85yLFTpHGp Q7LoErzTnM1bi0JWxRVMc+Dgs9qP3Lu2fUnWuJFSsEphAuHFPlROXE1i5wsqpIEu fgD3iSG3ftlDkcGwNONgPbPTC8en3/trUp5M6McI92lSvRrWtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfCP6djGEvFyu6T+bzqgeCTqKKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFlMWM4MmYtODExMy0z MTg1LTkyNGYtZDA5ODdjYTFmY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYHPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq/lyrKSkeLLmaM9MqPEClgWfFBWzadQmPlRSw0wMeRptVBGZLV1PRG 1ICKRco9S+DUpS+rGQ56dMsD61D45FXkqkAOCxGnIGdZyPsbR7n352bMHaEKo53e fjmu36WZUQ441qrrqZqpc9llbdfXxa+rG3JNjkXGx5vDJkerS5tLNfPSE6uG/rPb +UAIsdU4xrB1+AcmYHQjlY/0ufJDXcd7GK7GYM4uVLwEqcxPISZ1JeGdQb1yqdVF m1z4bFT2jTIGIOEZ+e+5qtGAbKKzaoBgSnYxTr3iVt1PrNzkShoFygkvL7M5gaKY QhFMJB1R/gMppxDvHDmgeXIucFl1dqY= -----END CERTIFICATE-----Generated at Sun Sep 27 09:57:31 2026 by rpki-client