$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec7a0ba-9252-3060-a259-8145f43f08e8.roa File: bec7a0ba-9252-3060-a259-8145f43f08e8.roa (raw, json) Hash identifier: mLm+3kzV2CTm5bE7HBp01hoaaR42vF5svGvIaBIOUkE= Subject key identifier: D1:57:99:38:BA:1F:9A:89:26:B5:1F:72:DC:DC:0B:AA:00:1A:F6:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED86306482149942236C51340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec7a0ba-9252-3060-a259-8145f43f08e8.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33662 IP address blocks: 76.143.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:06:48:21:49:94:22:36:c5:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=0867e68a-66a8-47ee-b518-51323fb500e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a5:3d:2d:37:37:f4:fd:f3:ab:8b:6d:76:d7: 30:2d:92:0d:af:2f:fb:91:a3:53:16:ef:20:bf:e2: 80:16:d6:71:45:20:41:be:9b:62:26:ac:6d:1b:6e: eb:8d:ef:b9:34:43:cc:bf:c5:fd:1d:c8:37:70:71: b9:75:cf:41:2d:69:2e:6b:9e:5c:ed:97:89:94:0e: b3:75:f5:88:e8:8a:c0:32:0d:44:6d:c1:62:20:64: ea:4f:37:24:47:01:9e:c7:66:86:50:7e:8d:40:33: cd:fe:ae:84:49:e1:a3:e7:17:e3:80:87:6f:ea:cb: 46:32:a0:58:8d:93:50:ea:f7:19:c0:03:0e:8b:69: 98:00:ea:09:68:c6:75:a6:d7:ac:8d:53:02:6c:d8: f4:8a:b6:68:93:77:ae:dd:22:dc:45:7d:8a:39:95: 10:a4:e1:19:44:f3:ed:8d:32:4c:84:53:cf:83:d6: 93:d5:a9:aa:86:7e:5c:46:65:68:f6:44:ff:23:70: 93:69:ab:98:2e:bb:7b:04:4c:7e:07:bc:9b:46:3e: 44:b4:7b:75:0d:65:54:df:d1:a2:c8:1d:dd:82:e5: 7a:13:c7:77:59:83:03:36:2b:52:b1:83:39:ae:84: ea:d5:24:ee:d9:5d:d6:74:44:bb:3c:c2:d0:cf:8c: 03:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:57:99:38:BA:1F:9A:89:26:B5:1F:72:DC:DC:0B:AA:00:1A:F6:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec7a0ba-9252-3060-a259-8145f43f08e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.143.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:8f:9c:f4:84:63:9a:25:91:cf:36:bc:22:c4:f0:9e:b3:0d: b3:6c:1d:29:e5:86:b4:1a:91:fd:53:62:c0:b8:30:10:92:11: 74:cc:b0:55:3c:06:06:84:d2:51:ba:22:96:fa:ac:24:5e:c1: a5:d0:cb:d9:50:94:e1:36:7a:10:55:37:4b:b7:d5:a6:d6:64: 28:4b:fb:d9:c3:d0:71:04:6c:20:f2:68:b3:c9:01:96:e9:19: 79:4f:a0:18:54:55:51:7d:42:b8:dc:cc:92:f8:59:d1:23:0a: 3b:e3:a4:c4:45:56:11:16:00:fb:8f:a1:7f:38:77:74:05:67: 4e:5b:a9:4b:86:d3:43:d2:d5:93:35:5e:21:9d:cb:b5:d2:51: 05:c4:1c:4b:8b:d3:51:95:63:78:31:22:35:01:f4:e7:30:6f: d6:4f:78:11:6f:ef:88:3f:ae:af:51:27:67:b9:0a:b8:5b:b1: ac:70:3a:79:dd:99:d2:e5:3f:dd:4d:7f:b5:b4:c9:59:da:22: 76:03:81:f0:dc:7b:c1:34:f6:da:ea:76:75:a1:00:c7:e1:0c: 1f:bc:41:d0:f0:9b:12:c3:a3:17:43:23:c5:2a:06:67:83:ba: 6a:6c:0c:91:73:dc:bb:d6:2f:8d:19:ff:e1:7d:49:91:01:55: 2e:88:d5:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYwZIIUmUIjbFE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MDg2N2U2OGEtNjZhOC00N2VlLWI1MTgtNTEzMjNmYjUwMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6U9LTc39P3zq4ttdtcwLZINry/7kaNTFu8g v+KAFtZxRSBBvptiJqxtG27rje+5NEPMv8X9Hcg3cHG5dc9BLWkua55c7ZeJlA6z dfWI6IrAMg1EbcFiIGTqTzckRwGex2aGUH6NQDPN/q6ESeGj5xfjgIdv6stGMqBY jZNQ6vcZwAMOi2mYAOoJaMZ1ptesjVMCbNj0irZok3eu3SLcRX2KOZUQpOEZRPPt jTJMhFPPg9aT1amqhn5cRmVo9kT/I3CTaauYLrt7BEx+B7ybRj5EtHt1DWVU39Gi yB3dguV6E8d3WYMDNitSsYM5roTq1STu2V3WdES7PMLQz4wDiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFXmTi6H5qJJrUfctzcC6oAGvaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmVjN2EwYmEtOTI1Mi0z MDYwLWEyNTktODE0NWY0M2YwOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGPnPSEY5olkc82vCLE8J6zDbNsHSnlhrQakf1TYsC4MBCSEXTMsFU8 BgaE0lG6Ipb6rCRewaXQy9lQlOE2ehBVN0u31abWZChL+9nD0HEEbCDyaLPJAZbp GXlPoBhUVVF9QrjczJL4WdEjCjvjpMRFVhEWAPuPoX84d3QFZ05bqUuG00PS1ZM1 XiGdy7XSUQXEHEuL01GVY3gxIjUB9Ocwb9ZPeBFv74g/rq9RJ2e5CrhbsaxwOnnd mdLlP91Nf7W0yVnaInYDgfDce8E09trqdnWhAMfhDB+8QdDwmxLDoxdDI8UqBmeD umpsDJFz3LvWL40Z/+F9SZEBVS6I1Q4= -----END CERTIFICATE-----Generated at Sun Sep 27 15:45:36 2026 by rpki-client