$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb88388e-0bb7-3009-b6be-b859872e4105.roa File: cb88388e-0bb7-3009-b6be-b859872e4105.roa (raw, json) Hash identifier: 7ZlrxlsOyXYZBvSCaSSeAnDiKHfShy5NNxuY4BPN6IY= Subject key identifier: A0:14:E4:9C:F0:9B:49:01:78:47:D7:CA:01:60:D2:2F:C2:00:25:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EF1EFA9F9FF7AFAC50F70 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb88388e-0bb7-3009-b6be-b859872e4105.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 76.124.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:f1:ef:a9:f9:ff:7a:fa:c5:0f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=7de50d96-2b92-400a-8024-7f51ca0aa3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:44:c6:c3:2c:a3:c6:4c:dd:4a:38:3f:33:6c: fe:85:e3:3f:a7:b8:bc:e7:38:3c:16:98:32:88:82: b6:c5:2b:c8:d5:21:00:16:9c:3f:fd:c1:e1:74:79: a9:db:ff:d9:2b:e4:26:61:92:1e:ff:c5:86:d9:1c: 08:dc:1c:19:e8:2a:c1:fc:db:18:95:2f:48:89:90: a6:16:e1:35:04:f8:87:e6:06:ad:b3:00:a6:10:44: 59:a2:50:44:fc:1e:d7:3f:45:59:18:40:5c:ed:45: 99:79:29:ce:eb:84:59:51:f6:03:d5:8c:1a:4d:be: 5f:43:1c:1c:88:46:78:96:f0:53:41:4c:86:81:2d: 37:72:40:f8:e4:69:a4:1d:fc:e1:21:48:05:3b:c0: 35:e4:0f:ba:ae:72:e1:31:fc:3f:21:1b:cd:45:63: 43:21:f3:3f:38:ab:db:27:29:1d:b8:58:ff:ab:94: 63:5c:4b:49:db:51:8a:6e:c0:26:6b:f9:6b:68:73: ca:c3:af:6f:89:76:28:5d:87:1d:c1:cd:11:a6:46: c4:95:da:2a:5f:b3:55:28:e0:6d:e5:0f:73:e5:f7: 24:22:ed:d6:06:66:4d:dc:64:98:e6:86:f6:49:c9: 3a:5a:e2:95:13:03:78:91:87:5a:cf:ea:7d:ec:55: 70:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:14:E4:9C:F0:9B:49:01:78:47:D7:CA:01:60:D2:2F:C2:00:25:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb88388e-0bb7-3009-b6be-b859872e4105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.124.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:79:dd:97:cb:dd:67:2b:01:0b:c0:fe:48:cf:c3:f2:ef:46: 75:58:a5:fb:24:e0:6b:07:dd:95:02:44:bc:77:a9:bf:b9:2c: a1:41:1d:17:87:17:4b:d5:59:80:32:25:31:53:5e:16:2b:55: 85:fc:9c:58:3e:97:fc:f2:28:98:2c:39:9f:b1:a2:e5:74:06: dd:7f:1a:82:30:79:23:9c:38:9c:55:f1:e2:2d:73:9e:5e:cd: 0d:34:74:d4:08:48:6b:78:b3:12:ea:b8:9e:04:ed:6c:77:24: 83:be:c6:02:d3:e6:59:ea:6d:7b:ed:a9:80:dc:9c:2d:50:24: 03:ed:41:bc:1d:cc:d8:48:b2:3d:f1:ad:fe:55:d2:5e:49:a4: ea:8e:66:b3:df:4f:66:1f:63:e8:92:df:19:6a:49:bd:47:fc: 46:0e:36:de:78:7f:f1:e7:f3:ee:4a:52:4b:e4:d8:e5:4e:34: 86:43:b2:de:50:4a:df:9f:d9:0e:4d:a2:7a:3d:35:6f:2e:29: 7e:f8:26:fa:ff:7a:f3:79:c7:a7:87:54:5f:95:79:2c:33:04: 52:34:4c:4e:ff:81:0c:f3:2f:6c:8d:3b:0a:75:f7:e2:6b:56: 4b:b1:61:d8:d5:2b:a5:18:14:e1:e9:74:fb:4e:62:74:90:56: d0:7b:30:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnvHvqfn/evrFD3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk N2RlNTBkOTYtMmI5Mi00MDBhLTgwMjQtN2Y1MWNhMGFhM2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUTGwyyjxkzdSjg/M2z+heM/p7i85zg8Fpgy iIK2xSvI1SEAFpw//cHhdHmp2//ZK+QmYZIe/8WG2RwI3BwZ6CrB/NsYlS9IiZCm FuE1BPiH5gatswCmEERZolBE/B7XP0VZGEBc7UWZeSnO64RZUfYD1YwaTb5fQxwc iEZ4lvBTQUyGgS03ckD45GmkHfzhIUgFO8A15A+6rnLhMfw/IRvNRWNDIfM/OKvb JykduFj/q5RjXEtJ21GKbsAma/lraHPKw69viXYoXYcdwc0RpkbEldoqX7NVKOBt 5Q9z5fckIu3WBmZN3GSY5ob2Sck6WuKVEwN4kYdaz+p97FVwvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAU5Jzwm0kBeEfXygFg0i/CACVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I4ODM4OGUtMGJiNy0z MDA5LWI2YmUtYjg1OTg3MmU0MTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV53ZfL3WcrAQvA/kjPw/LvRnVYpfsk4GsH3ZUCRLx3qb+5LKFBHReH F0vVWYAyJTFTXhYrVYX8nFg+l/zyKJgsOZ+xouV0Bt1/GoIweSOcOJxV8eItc55e zQ00dNQISGt4sxLquJ4E7Wx3JIO+xgLT5lnqbXvtqYDcnC1QJAPtQbwdzNhIsj3x rf5V0l5JpOqOZrPfT2YfY+iS3xlqSb1H/EYONt54f/Hn8+5KUkvk2OVONIZDst5Q St+f2Q5Nono9NW8uKX74Jvr/evN5x6eHVF+VeSwzBFI0TE7/gQzzL2yNOwp19+Jr VkuxYdjVK6UYFOHpdPtOYnSQVtB7MKI= -----END CERTIFICATE-----Generated at Fri Sep 25 21:38:18 2026 by rpki-client