$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dec8e8f2-7513-31a0-a434-dad682ab9ae6.roa File: dec8e8f2-7513-31a0-a434-dad682ab9ae6.roa (raw, json) Hash identifier: Xahnufo5B5CD1SN6414rC7DxnA2QuFaH1voahNR955w= Subject key identifier: F4:BC:55:34:02:B8:E9:75:D7:FD:D9:D8:19:AD:61:53:7F:B7:D2:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F03A8297A2EFDDAB5FE752940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dec8e8f2-7513-31a0-a434-dad682ab9ae6.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 7725 IP address blocks: 76.97.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:29:7a:2e:fd:da:b5:fe:75:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=f5f7fa37-2944-45db-a7a5-41e4eb798b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d0:d2:6b:a7:9f:00:5e:5a:52:cd:0c:40:c7: 77:93:9d:bf:d5:7d:a7:66:c8:3b:14:fb:84:60:e3: e4:7c:9c:48:02:18:51:49:9e:40:be:e5:64:64:4d: 80:e7:47:d1:5f:34:3d:fc:62:86:a3:74:46:bd:bd: 12:d0:f8:23:c4:cd:39:c3:87:55:b7:e4:c5:41:e4: db:fb:af:7f:9c:e6:d9:c9:7a:02:5e:d1:9f:af:78: a5:5a:9f:af:33:e5:05:9b:7a:a7:94:d1:d7:b0:55: a1:63:90:e1:90:cf:43:8c:0a:fd:3e:68:0c:cd:87: 41:c3:dd:1b:b7:a8:a4:19:7d:d9:ad:ac:79:28:58: 49:7e:e5:16:0f:31:7b:70:a0:40:6c:4f:18:71:1e: b9:40:dc:f0:9c:ad:91:36:ee:f4:8e:0a:79:42:8e: 3b:31:84:59:22:68:ea:c3:75:ce:d6:d1:26:97:62: 42:dd:f2:00:2c:1f:d1:fa:dc:0e:e2:8b:f2:1e:a3: 43:f1:5c:06:92:ec:0f:b8:da:9e:43:59:22:3a:14: 72:75:3c:2d:80:ee:7d:9a:77:ed:96:d5:27:c7:a3: 8f:83:54:2e:40:d7:e0:6c:fc:bf:89:31:63:f0:f0: 60:c2:1b:f3:4c:3e:6e:fa:27:0e:79:94:d8:4e:1f: e7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BC:55:34:02:B8:E9:75:D7:FD:D9:D8:19:AD:61:53:7F:B7:D2:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dec8e8f2-7513-31a0-a434-dad682ab9ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.97.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:6b:43:4b:a4:61:77:ca:3a:f0:97:c0:17:c4:ba:32:21:86: 17:6b:65:9a:26:cb:cb:53:b9:ba:30:69:bf:54:bc:82:e7:43: d5:5a:d9:a4:7d:2f:fc:f2:46:3e:b5:4e:bf:c7:c1:d8:e0:1c: 26:fd:c7:f1:de:ac:49:04:e8:d0:54:f2:16:d5:7f:fc:53:23: b8:3e:15:ad:9a:78:39:90:5c:b7:e2:f8:65:f3:9d:73:d6:ca: 81:a1:f3:c7:c8:47:6f:10:65:2d:ef:e5:b6:87:cb:cc:9e:41: 8c:06:21:7d:63:5a:61:66:e1:8b:3b:39:3e:f1:73:7e:d6:23: e3:66:57:f1:f8:0e:bf:ba:f2:93:bd:bf:a9:4f:92:93:cd:ed: e6:11:84:be:b0:dc:bf:35:02:1b:04:dc:b8:79:bf:aa:f5:81: 93:cb:92:72:4e:4f:16:75:87:50:a3:e2:5e:25:c7:b0:bd:8d: 7f:60:27:b6:c5:6c:68:48:4f:5f:db:b5:d3:ca:2d:a1:ff:ef: 20:0f:80:09:48:60:65:4d:b1:0c:cf:d4:57:82:14:ff:42:57: 88:ba:e1:56:6a:00:c9:e1:1a:ea:c9:ce:c5:8f:9d:33:31:30: ed:f6:55:fe:33:46:95:1c:98:97:82:db:fb:9a:0e:78:0a:53: a8:7f:d4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8DqCl6Lv3atf51KUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZjVmN2ZhMzctMjk0NC00NWRiLWE3YTUtNDFlNGViNzk4YjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdDSa6efAF5aUs0MQMd3k52/1X2nZsg7FPuE YOPkfJxIAhhRSZ5AvuVkZE2A50fRXzQ9/GKGo3RGvb0S0PgjxM05w4dVt+TFQeTb +69/nObZyXoCXtGfr3ilWp+vM+UFm3qnlNHXsFWhY5DhkM9DjAr9PmgMzYdBw90b t6ikGX3Zrax5KFhJfuUWDzF7cKBAbE8YcR65QNzwnK2RNu70jgp5Qo47MYRZImjq w3XO1tEml2JC3fIALB/R+twO4ovyHqND8VwGkuwPuNqeQ1kiOhRydTwtgO59mnft ltUnx6OPg1QuQNfgbPy/iTFj8PBgwhvzTD5u+icOeZTYTh/newIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS8VTQCuOl11/3Z2BmtYVN/t9JkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGVjOGU4ZjItNzUxMy0z MWEwLWE0MzQtZGFkNjgyYWI5YWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTGFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVrQ0ukYXfKOvCXwBfEujIhhhdrZZomy8tTubowab9UvILnQ9Va2aR9 L/zyRj61Tr/HwdjgHCb9x/HerEkE6NBU8hbVf/xTI7g+Fa2aeDmQXLfi+GXznXPW yoGh88fIR28QZS3v5baHy8yeQYwGIX1jWmFm4Ys7OT7xc37WI+NmV/H4Dr+68pO9 v6lPkpPN7eYRhL6w3L81AhsE3Lh5v6r1gZPLknJOTxZ1h1Cj4l4lx7C9jX9gJ7bF bGhIT1/btdPKLaH/7yAPgAlIYGVNsQzP1FeCFP9CV4i64VZqAMnhGurJzsWPnTMx MO32Vf4zRpUcmJeC2/uaDngKU6h/1Dc= -----END CERTIFICATE-----Generated at Sat Sep 26 13:33:47 2026 by rpki-client