$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0ea8fec-cd18-37d3-9f1a-d8a663dfb243.roa File: f0ea8fec-cd18-37d3-9f1a-d8a663dfb243.roa (raw, json) Hash identifier: fU/c2wMuFwJharg7nQ1ogG1n1rL7S7/g4gnkYEf8t8Y= Subject key identifier: 47:AC:1B:93:32:9E:79:86:A6:66:C0:12:DB:26:D8:FA:D5:3A:1A:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584FB3A8413C19BAC4C99C914940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0ea8fec-cd18-37d3-9f1a-d8a663dfb243.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 33659 IP address blocks: 76.116.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a8:41:3c:19:ba:c4:c9:9c:91:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=3f0fa018-3c4c-48b9-b5f0-3b22f7191283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ce:68:50:63:b7:84:1a:d1:6f:cb:5d:0d:b3: 6a:6c:93:2c:61:98:47:81:46:06:57:eb:78:3a:bf: 55:6e:d6:7c:45:f4:79:71:1c:43:54:14:43:95:c3: bd:7e:a3:46:43:68:9f:ea:4a:82:1e:f6:e3:86:ba: df:65:75:e2:47:5b:6e:e3:c1:a4:ba:e3:80:11:bd: 10:82:a0:d6:93:40:cf:3f:3a:93:ad:09:21:2d:0a: 45:dc:7c:85:1f:c2:bd:94:17:97:dd:db:d3:b0:66: d5:46:d9:e5:bf:30:62:06:0b:6f:a6:44:20:ea:7c: 77:89:a4:33:69:a5:81:b7:7d:34:c2:cb:40:ec:b9: d0:8b:59:8f:0b:69:64:8f:48:db:6f:79:07:17:44: 2e:34:89:25:58:82:32:96:84:d9:47:39:7c:86:f7: f4:c5:23:ba:7d:cf:d8:24:4e:98:df:a2:e3:51:1e: 76:00:52:45:2e:cb:79:6e:9f:2f:d5:72:22:dc:d8: 76:40:71:b6:4f:56:47:86:a7:0d:cd:54:ce:d0:93: 13:51:e1:37:3f:f7:56:6a:01:ef:c4:79:20:7e:9e: 98:f3:d7:ca:bd:85:74:21:3f:89:37:fc:d5:7b:11: 19:45:10:00:be:74:77:81:51:da:e9:4c:ca:a1:21: 77:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AC:1B:93:32:9E:79:86:A6:66:C0:12:DB:26:D8:FA:D5:3A:1A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0ea8fec-cd18-37d3-9f1a-d8a663dfb243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.116.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:57:c8:46:86:7d:dd:e3:b9:f4:61:fc:45:00:03:93:e0:a6: 80:06:37:aa:a3:01:4c:ad:82:6b:a8:4b:2f:9f:ef:47:3e:0c: e6:5b:5f:69:45:72:cb:ab:82:85:fa:09:7f:d3:a9:11:03:24: bd:00:60:1e:3d:99:c1:4e:c9:8a:81:00:41:aa:22:79:f9:e2: 8f:bd:b2:a2:fc:ae:a0:fa:07:55:35:f4:e7:73:74:a1:96:de: 51:87:27:44:f0:0c:09:4f:a1:ad:15:b2:fc:9b:0f:4d:35:51: 2f:96:8e:1e:67:e6:20:fa:a1:6e:72:97:eb:79:64:af:fc:05: d1:0f:ef:7c:3a:4d:ae:cd:2b:40:1e:9d:3e:d3:81:15:30:c2: 98:b0:1d:83:30:92:2f:4c:14:4b:1d:ee:77:7d:6b:70:4b:d8: 6d:19:65:f2:db:19:24:fb:8d:44:e1:11:80:8f:97:b3:af:87: a9:f1:49:2b:f3:92:8b:ac:05:0b:35:3d:98:ed:78:93:c1:be: 7b:f0:60:9a:ca:e8:34:a0:f6:b3:97:a4:98:59:48:a7:d7:58: 39:aa:db:4a:ab:3e:2a:fa:c7:d2:97:44:c5:eb:60:35:6b:d9: 4a:7e:dd:48:a9:b1:0e:34:88:04:82:4c:42:c5:30:f3:b8:db: f0:5a:14:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zqEE8GbrEyZyRSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk M2YwZmEwMTgtM2M0Yy00OGI5LWI1ZjAtM2IyMmY3MTkxMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc5oUGO3hBrRb8tdDbNqbJMsYZhHgUYGV+t4 Or9VbtZ8RfR5cRxDVBRDlcO9fqNGQ2if6kqCHvbjhrrfZXXiR1tu48GkuuOAEb0Q gqDWk0DPPzqTrQkhLQpF3HyFH8K9lBeX3dvTsGbVRtnlvzBiBgtvpkQg6nx3iaQz aaWBt300wstA7LnQi1mPC2lkj0jbb3kHF0QuNIklWIIyloTZRzl8hvf0xSO6fc/Y JE6Y36LjUR52AFJFLst5bp8v1XIi3Nh2QHG2T1ZHhqcNzVTO0JMTUeE3P/dWagHv xHkgfp6Y89fKvYV0IT+JN/zVexEZRRAAvnR3gVHa6UzKoSF3SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEesG5MynnmGpmbAEtsm2PrVOhrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjBlYThmZWMtY2QxOC0z N2QzLTlmMWEtZDhhNjYzZGZiMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdXyEaGfd3jufRh/EUAA5PgpoAGN6qjAUytgmuoSy+f70c+DOZbX2lF csurgoX6CX/TqREDJL0AYB49mcFOyYqBAEGqInn54o+9sqL8rqD6B1U19OdzdKGW 3lGHJ0TwDAlPoa0VsvybD001US+Wjh5n5iD6oW5yl+t5ZK/8BdEP73w6Ta7NK0Ae nT7TgRUwwpiwHYMwki9MFEsd7nd9a3BL2G0ZZfLbGST7jUThEYCPl7Ovh6nxSSvz kousBQs1PZjteJPBvnvwYJrK6DSg9rOXpJhZSKfXWDmq20qrPir6x9KXRMXrYDVr 2Up+3UipsQ40iASCTELFMPO42/BaFO0= -----END CERTIFICATE-----Generated at Sun Nov 15 17:06:09 2026 by rpki-client