$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b7dec26-c575-32a8-99f1-2192e25b4bd4.roa File: 2b7dec26-c575-32a8-99f1-2192e25b4bd4.roa (raw, json) Hash identifier: tcByrFS8w3580aiugb1j8jqgZ4UBAG4uHa7BYPkxY8E= Subject key identifier: 88:81:58:65:E4:1D:63:CE:76:BF:24:53:C7:39:E9:4F:8C:01:72:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D63C1B997DFAD93A62500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b7dec26-c575-32a8-99f1-2192e25b4bd4.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 76.117.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:63:c1:b9:97:df:ad:93:a6:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=6cd99122-60b9-4259-881b-96455b9f8e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3d:0e:77:23:07:62:eb:96:68:7c:7d:07:b0: 5b:6c:ba:1e:19:04:c9:43:ad:0a:43:d8:57:b2:a2: d1:27:75:f6:0f:9f:41:f2:e4:da:30:66:dd:0a:c8: 97:0f:50:31:78:4e:61:49:aa:2d:1a:e4:00:89:57: dd:92:7d:63:fa:a0:fe:96:5a:01:5b:34:ea:66:31: 41:2c:83:c0:3e:a6:d4:fe:5d:99:91:bf:90:01:0a: e7:8a:bb:8b:88:e9:7b:11:4d:0f:d5:c1:89:99:8d: e6:8f:2b:31:c2:21:c8:70:6a:28:77:94:3c:6e:4c: 55:40:17:03:ed:b2:e4:f0:89:1d:e9:b6:7c:b0:6b: e6:18:f3:8a:47:f0:11:1f:3e:ae:aa:ea:9c:80:a2: b4:3a:f1:ed:56:ac:56:a5:62:10:aa:cb:a0:cc:4c: 51:d8:9e:07:45:ea:f7:59:41:8b:2f:41:7e:6b:bb: ab:4a:75:63:cf:8b:4f:44:7f:5b:25:f1:4d:28:d8: 53:69:95:35:35:cb:f4:24:e4:90:a8:4e:16:a2:3d: 0b:9c:4e:b9:a5:59:d6:bb:51:73:42:76:40:b5:a1: d6:27:58:e8:f7:99:81:57:18:d0:15:07:73:2c:f0: 60:9a:77:a1:be:97:3c:fe:30:4a:03:1d:f8:ba:ef: 70:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:81:58:65:E4:1D:63:CE:76:BF:24:53:C7:39:E9:4F:8C:01:72:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b7dec26-c575-32a8-99f1-2192e25b4bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.117.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ba:3d:92:e3:78:77:88:db:60:8e:3f:9d:5d:00:a4:19:1d: d2:92:5b:e1:01:14:6b:00:4b:cb:23:7e:73:2f:ad:9d:5f:7a: 2f:e2:6e:4e:45:9d:ac:ff:7c:05:4b:82:df:a6:80:9d:db:09: c4:ca:94:76:4e:01:4a:f0:b6:4b:6c:61:50:25:87:94:f4:f9: 68:c9:d0:09:fd:62:3c:99:89:ee:0a:3a:58:96:1e:d8:32:60: 48:2b:51:1a:98:81:09:4d:c3:d7:9d:10:c7:5d:3c:88:6a:2f: 2e:ad:3d:c9:81:04:8c:ef:5b:79:f5:68:b2:9b:fe:16:43:19: 76:2c:a9:b7:2c:de:dd:1b:5f:e5:3a:e2:1e:e5:7e:8b:e3:d6: a8:0a:ac:78:fc:c0:bb:7c:af:bf:2a:83:f8:f5:9e:9a:4b:1b: be:87:e2:a0:f0:1a:07:c7:59:bb:53:6d:6c:2d:99:e5:04:19: 4e:40:08:fc:73:a5:a8:5c:04:30:93:a7:f9:b9:64:96:db:bd: d1:35:35:39:56:8a:00:d9:59:ae:14:bb:7c:04:d6:2f:1e:8e: 69:5b:2a:34:59:cc:e9:60:f1:da:47:55:a8:e2:d0:70:94:de: f2:84:44:96:fa:a4:e7:35:82:0f:d7:37:49:37:d1:e7:78:57: 87:da:ee:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnWPBuZffrZOmJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NmNkOTkxMjItNjBiOS00MjU5LTg4MWItOTY0NTViOWY4ZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT0OdyMHYuuWaHx9B7BbbLoeGQTJQ60KQ9hX sqLRJ3X2D59B8uTaMGbdCsiXD1AxeE5hSaotGuQAiVfdkn1j+qD+lloBWzTqZjFB LIPAPqbU/l2Zkb+QAQrniruLiOl7EU0P1cGJmY3mjysxwiHIcGood5Q8bkxVQBcD 7bLk8Ikd6bZ8sGvmGPOKR/ARHz6uquqcgKK0OvHtVqxWpWIQqsugzExR2J4HRer3 WUGLL0F+a7urSnVjz4tPRH9bJfFNKNhTaZU1Ncv0JOSQqE4Woj0LnE65pVnWu1Fz QnZAtaHWJ1jo95mBVxjQFQdzLPBgmnehvpc8/jBKAx34uu9wIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiBWGXkHWPOdr8kU8c56U+MAXLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmI3ZGVjMjYtYzU3NS0z MmE4LTk5ZjEtMjE5MmUyNWI0YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK6PZLjeHeI22COP51dAKQZHdKSW+EBFGsAS8sjfnMvrZ1fei/ibk5F naz/fAVLgt+mgJ3bCcTKlHZOAUrwtktsYVAlh5T0+WjJ0An9YjyZie4KOliWHtgy YEgrURqYgQlNw9edEMddPIhqLy6tPcmBBIzvW3n1aLKb/hZDGXYsqbcs3t0bX+U6 4h7lfovj1qgKrHj8wLt8r78qg/j1nppLG76H4qDwGgfHWbtTbWwtmeUEGU5ACPxz pahcBDCTp/m5ZJbbvdE1NTlWigDZWa4Uu3wE1i8ejmlbKjRZzOlg8dpHVaji0HCU 3vKERJb6pOc1gg/XN0k30ed4V4fa7ps= -----END CERTIFICATE-----Generated at Sat Sep 26 09:18:36 2026 by rpki-client