$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/425b9c8f-cc57-3501-98e0-289d8021902d.roa File: 425b9c8f-cc57-3501-98e0-289d8021902d.roa (raw, json) Hash identifier: 3n2EzZZ59dOV1gGIXtIh9vXP+Jo9HXulzzwECmOjjtQ= Subject key identifier: CA:11:B4:F6:45:F2:D1:E0:AE:6D:A7:64:98:77:B9:A9:FF:25:2E:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4980D39D9B436896FAC83C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/425b9c8f-cc57-3501-98e0-289d8021902d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33650 IP address blocks: 96.108.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:d3:9d:9b:43:68:96:fa:c8:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=59d384ba-c671-409e-a369-22b0d75705f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:f1:90:24:ed:af:61:4d:58:a3:eb:50:a7: 38:ab:08:bd:31:26:48:c8:43:e9:73:72:bc:11:eb: e8:49:6c:ae:4d:87:90:2f:10:f7:e4:1c:bd:58:08: 5d:1d:82:76:19:1c:b7:39:a4:71:dd:5c:81:5b:ff: 9a:8c:47:b8:f8:b6:5b:a0:ac:c5:fc:89:23:0f:a4: ea:09:b9:fd:3b:d8:c7:f3:8d:4d:c5:e7:e7:f7:d7: 64:6b:a9:e2:6d:b6:33:79:21:e3:88:1d:72:e8:b2: ee:aa:3d:d9:25:83:9f:17:31:d7:08:eb:07:6d:93: 26:ff:d0:c0:8f:2f:66:c5:aa:45:53:0e:ac:67:d8: 04:d1:af:f0:8c:29:b8:a1:51:9c:06:68:7e:54:bc: c5:7e:14:90:b4:2c:04:41:ec:e5:ef:4a:04:a4:8d: b2:8b:89:a6:1a:2f:d2:ee:ca:2c:42:6e:a6:be:c8: ea:f8:ef:a6:a5:2a:4d:92:73:d6:f1:0e:aa:5c:a4: 9c:db:92:25:19:23:02:02:c9:99:a6:13:b9:a3:76: 12:9e:c4:c6:68:14:17:b8:2a:42:de:37:54:10:84: 5b:f6:63:8c:b3:6e:ca:50:c3:d8:4c:ae:6d:fd:77: 34:15:88:90:4a:8b:e2:08:fd:66:a0:18:2a:95:93: 2d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:11:B4:F6:45:F2:D1:E0:AE:6D:A7:64:98:77:B9:A9:FF:25:2E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/425b9c8f-cc57-3501-98e0-289d8021902d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.108.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:7a:1a:90:96:8c:a0:57:13:1a:91:1a:f1:a9:95:4f:7b:b1: b3:ce:96:c5:06:75:fd:72:de:10:67:f7:d1:bc:92:0e:ec:f2: 8a:e1:c9:5e:e5:49:d9:7c:8a:ba:0c:86:43:bf:4a:ff:00:12: ed:a2:a7:39:97:cf:5a:4f:bb:64:7c:44:54:13:c8:dd:fe:be: 36:c8:98:9f:a7:4b:e9:d6:0d:42:74:f6:b1:18:fc:73:2f:08: 64:d9:fe:43:ac:fa:e1:0f:50:55:33:8b:65:ae:b9:4c:f3:de: f2:0c:af:0b:86:d6:1a:ab:7f:2c:80:13:52:13:93:96:95:5d: 1a:57:2f:8d:6b:1c:9b:85:5f:0c:d5:7a:64:0c:78:43:57:cd: 4b:0e:6d:cd:2e:66:14:19:2f:51:44:f3:c7:e9:9a:0c:c2:30: e9:e6:43:04:ce:bc:20:52:fe:6a:98:19:c7:83:02:7d:ba:c3: 02:0b:24:77:50:c2:31:75:21:a1:b3:88:fd:51:de:b5:bf:6d: 99:bd:55:74:cd:65:28:39:4d:9f:61:7c:bc:43:38:6d:93:d7: d4:d0:c7:f4:d3:7e:ef:77:4e:3f:1e:76:ff:04:0e:e9:f7:06: ca:f6:a6:4b:51:e2:01:38:60:d0:8c:3f:b5:37:94:1e:6d:3b: 40:08:82:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgNOdm0NolvrIPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTlkMzg0YmEtYzY3MS00MDllLWEzNjktMjJiMGQ3NTcwNWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZrxkCTtr2FNWKPrUKc4qwi9MSZIyEPpc3K8 EevoSWyuTYeQLxD35By9WAhdHYJ2GRy3OaRx3VyBW/+ajEe4+LZboKzF/IkjD6Tq Cbn9O9jH841Nxefn99dka6nibbYzeSHjiB1y6LLuqj3ZJYOfFzHXCOsHbZMm/9DA jy9mxapFUw6sZ9gE0a/wjCm4oVGcBmh+VLzFfhSQtCwEQezl70oEpI2yi4mmGi/S 7sosQm6mvsjq+O+mpSpNknPW8Q6qXKSc25IlGSMCAsmZphO5o3YSnsTGaBQXuCpC 3jdUEIRb9mOMs27KUMPYTK5t/Xc0FYiQSoviCP1moBgqlZMteQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoRtPZF8tHgrm2nZJh3uan/JS4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDI1YjljOGYtY2M1Ny0z NTAxLTk4ZTAtMjg5ZDgwMjE5MDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYGzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB6GpCWjKBXExqRGvGplU97sbPOlsUGdf1y3hBn99G8kg7s8orhyV7l Sdl8iroMhkO/Sv8AEu2ipzmXz1pPu2R8RFQTyN3+vjbImJ+nS+nWDUJ09rEY/HMv CGTZ/kOs+uEPUFUzi2WuuUzz3vIMrwuG1hqrfyyAE1ITk5aVXRpXL41rHJuFXwzV emQMeENXzUsObc0uZhQZL1FE88fpmgzCMOnmQwTOvCBS/mqYGceDAn26wwILJHdQ wjF1IaGziP1R3rW/bZm9VXTNZSg5TZ9hfLxDOG2T19TQx/TTfu93Tj8edv8EDun3 Bsr2pktR4gE4YNCMP7U3lB5tO0AIgjI= -----END CERTIFICATE-----Generated at Mon Sep 28 20:17:53 2026 by rpki-client