$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f523fb5a-f748-3e44-9ccc-a4cc078fa341.roa File: f523fb5a-f748-3e44-9ccc-a4cc078fa341.roa (raw, json) Hash identifier: tMOf88FSt8MxQAd3zmr3DDyfe2OSlwiwvNZ+jGeDyIw= Subject key identifier: DB:D5:19:F3:43:9C:4E:A9:74:4A:8B:4D:1C:F1:52:D5:93:FA:12:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4977B7533FAD72348C000040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f523fb5a-f748-3e44-9ccc-a4cc078fa341.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 76.122.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:b7:53:3f:ad:72:34:8c:00:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6ddf8fd5-25d3-42c3-a6a5-21d317674175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:90:38:5c:5b:66:9b:59:ac:73:83:c9:17:28: a9:32:1d:d8:7f:cd:41:aa:96:56:70:41:b5:d5:a1: 07:6e:bf:6b:b9:19:72:a7:d2:63:c4:6c:2f:bd:4e: 8f:9c:cc:54:ba:5a:b4:2a:ca:02:32:c6:c3:52:ce: b4:8d:77:b3:76:24:24:70:07:60:77:55:26:9e:1b: a3:67:9d:9d:7b:c7:66:68:b2:37:c9:4c:70:90:5c: 92:c9:c3:20:06:ea:e5:eb:71:5c:29:35:06:81:3c: d4:c7:52:98:22:8f:1a:88:e2:69:8d:bd:51:11:56: ae:17:bd:2c:c7:2b:f1:19:7f:f1:c8:0b:a6:d7:eb: 60:54:83:4b:98:07:88:f2:3c:27:8e:59:c7:8a:bd: 98:79:c1:5b:81:0f:33:a8:73:1d:e7:42:84:3f:ec: 1e:48:b8:62:1c:d2:44:80:33:66:ce:7b:d9:db:f5: f4:cb:e0:44:1c:40:73:ff:d2:d0:ac:b7:8d:82:4b: b9:3b:e1:4f:20:14:7f:cf:db:92:c1:7a:78:6d:2a: 53:93:1d:e6:fa:7e:53:f1:a8:82:27:4a:b0:dc:b8: 01:c3:2a:11:10:db:e7:ea:1c:b7:52:9d:83:da:37: 9c:66:9e:aa:90:72:67:68:8b:73:d3:ef:e2:fc:1d: b1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D5:19:F3:43:9C:4E:A9:74:4A:8B:4D:1C:F1:52:D5:93:FA:12:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f523fb5a-f748-3e44-9ccc-a4cc078fa341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.122.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:f1:d5:26:62:6b:71:8d:36:10:47:fc:ce:7e:9e:7f:ab:03: ef:c6:86:61:eb:e5:91:c0:f3:f2:57:e5:66:db:5d:47:80:31: 43:38:4c:71:ba:24:f4:f4:3c:59:12:ca:af:29:c4:d5:0d:7c: 34:89:4c:7b:91:12:61:c3:57:25:6a:3c:1a:73:bc:c5:1c:8b: 8b:0f:f2:a6:58:00:db:2d:92:0f:92:5c:24:be:94:a0:c3:19: 88:ea:20:c2:f7:b7:cf:bd:de:e8:c6:fe:d0:4d:7a:e7:83:8a: 13:81:d7:94:a7:ab:1e:6a:0e:8c:91:b0:1e:e8:82:3d:00:0b: fd:01:6e:4a:2a:48:ae:50:a4:ab:30:35:a0:4e:ad:8c:c7:70: 09:e7:df:ca:48:7e:3b:31:4d:b7:82:91:60:2c:3d:da:e5:b9: 28:81:8d:90:9d:a8:2a:a3:8e:e8:a8:24:a3:a3:c0:65:65:1b: 0a:6b:97:d5:67:09:99:e8:b2:0b:68:36:bd:48:b2:d9:5d:a1: ae:d1:dc:75:c3:a6:d6:3d:60:1e:73:74:9a:7c:80:3b:c5:8b: d5:93:ee:c0:23:6e:fa:c8:dd:1a:ee:5c:c8:e9:d1:04:7c:36: 62:7c:4b:df:9c:74:64:b1:cc:d7:a6:92:ba:50:3a:28:17:04: 06:d0:4c:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd7dTP61yNIwAAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmRkZjhmZDUtMjVkMy00MmMzLWE2YTUtMjFkMzE3Njc0MTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZA4XFtmm1msc4PJFyipMh3Yf81BqpZWcEG1 1aEHbr9ruRlyp9JjxGwvvU6PnMxUulq0KsoCMsbDUs60jXezdiQkcAdgd1Umnhuj Z52de8dmaLI3yUxwkFySycMgBurl63FcKTUGgTzUx1KYIo8aiOJpjb1REVauF70s xyvxGX/xyAum1+tgVINLmAeI8jwnjlnHir2YecFbgQ8zqHMd50KEP+weSLhiHNJE gDNmznvZ2/X0y+BEHEBz/9LQrLeNgku5O+FPIBR/z9uSwXp4bSpTkx3m+n5T8aiC J0qw3LgBwyoRENvn6hy3Up2D2jecZp6qkHJnaItz0+/i/B2xTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvVGfNDnE6pdEqLTRzxUtWT+hITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjUyM2ZiNWEtZjc0OC0z ZTQ0LTljY2MtYTRjYzA3OGZhMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7x1SZia3GNNhBH/M5+nn+rA+/GhmHr5ZHA8/JX5WbbXUeAMUM4THG6 JPT0PFkSyq8pxNUNfDSJTHuREmHDVyVqPBpzvMUci4sP8qZYANstkg+SXCS+lKDD GYjqIML3t8+93ujG/tBNeueDihOB15Snqx5qDoyRsB7ogj0AC/0BbkoqSK5QpKsw NaBOrYzHcAnn38pIfjsxTbeCkWAsPdrluSiBjZCdqCqjjuioJKOjwGVlGwprl9Vn CZnosgtoNr1Istldoa7R3HXDptY9YB5zdJp8gDvFi9WT7sAjbvrI3RruXMjp0QR8 NmJ8S9+cdGSxzNemkrpQOigXBAbQTDw= -----END CERTIFICATE-----Generated at Sat Sep 26 03:53:26 2026 by rpki-client