$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d7f943-06c9-3cad-9f92-ab0fc483fa71.roa File: 42d7f943-06c9-3cad-9f92-ab0fc483fa71.roa (raw, json) Hash identifier: nO04pgaVp74jKJRUafZ7fxBsidtLkD3VPS8n+mlFyow= Subject key identifier: 69:DD:90:79:88:EA:5D:36:7D:CC:EE:E0:F2:DF:E2:BC:C8:0D:66:5D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78CD136EDD66BE23D54AF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d7f943-06c9-3cad-9f92-ab0fc483fa71.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33489 IP address blocks: 96.108.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8c:d1:36:ed:d6:6b:e2:3d:54:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2c3b28c2-8afb-4501-8dbc-89a2bfa63be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:ea:58:2e:34:51:22:40:02:ec:ff:10:ed: 51:f9:19:8e:85:eb:74:a3:11:a0:39:47:17:18:fc: 01:ba:40:a0:fa:34:a5:f1:a4:e5:ea:a2:36:08:57: d4:3b:ea:4c:7d:2f:05:ed:ed:76:f1:76:c4:3e:8c: 9d:fb:74:b4:74:c1:4c:2b:5a:14:a6:ca:ea:6f:0c: 3a:eb:64:ea:21:91:a6:92:0d:1f:52:c7:85:67:39: 01:bf:f3:d5:a1:9b:89:ae:1c:c5:50:cd:bf:e8:95: d1:8c:1b:db:97:49:a8:75:0a:06:10:ef:04:fa:e4: 70:dd:cb:a0:c6:bf:67:88:df:c1:b5:f7:0f:b1:50: 11:14:cc:1f:60:75:e9:b6:87:05:bd:c2:ab:fa:cf: 1f:0f:de:6c:66:0e:57:7b:e3:a0:a2:95:e1:55:15: 25:e4:d9:05:cd:21:a6:a3:e3:ea:43:01:42:10:35: 59:c4:37:b6:66:07:88:b8:86:f1:77:33:3c:9a:e0: ce:b6:79:64:dd:e6:8a:11:a5:72:8d:54:09:c1:18: 2e:fe:74:2f:23:0b:08:0c:73:68:c3:3d:62:75:5a: 1b:c5:ea:1d:6c:12:4b:57:be:7d:b6:c8:05:7c:93: c3:23:85:bd:b1:2e:be:56:e4:39:44:ec:7a:33:60: 3a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DD:90:79:88:EA:5D:36:7D:CC:EE:E0:F2:DF:E2:BC:C8:0D:66:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d7f943-06c9-3cad-9f92-ab0fc483fa71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.108.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:20:8f:a2:a7:9d:a8:36:6a:0e:75:a9:af:2c:52:ea:3e:17: 16:47:5a:32:ee:02:7e:d9:33:ea:d7:e4:bd:83:64:6a:52:7c: 41:f4:a0:07:fa:12:c1:60:29:f9:c3:6f:d9:ad:7e:03:5b:92: bd:d6:6c:88:03:fd:1f:1b:90:50:fe:d9:e6:a3:22:5b:c5:4c: 34:af:e9:77:bf:d9:00:d5:ac:64:b0:3c:ae:69:9c:fd:de:61: 4f:91:3d:ae:15:9d:22:8a:53:59:ec:74:8c:f6:e3:a3:a5:5a: d3:6b:0d:ae:17:00:7a:44:6b:4f:73:71:24:f0:bf:50:17:e2: 21:1f:ae:92:b3:4c:6c:0d:1a:f0:5b:df:7a:89:c9:9a:92:86: 11:7c:2d:b4:d0:a4:a5:ea:68:70:f7:0e:f9:0d:05:cd:6b:70: e2:d6:10:bd:59:0f:80:63:94:1a:f8:7c:9f:55:ac:9d:36:c4: ed:b0:ff:b6:2e:0b:62:a5:61:a3:3a:d4:9b:59:00:50:9d:27: 31:f4:fa:64:9e:c6:20:06:a9:52:6f:6c:f4:bf:98:79:c6:c7: de:cc:16:76:49:58:ba:7e:6a:a2:71:e4:5b:14:7a:84:19:11: af:34:47:ec:7a:33:0d:05:d1:7e:83:13:73:8f:dd:70:02:c6: c7:f7:27:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njNE27dZr4j1Ur4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmMzYjI4YzItOGFmYi00NTAxLThkYmMtODlhMmJmYTYzYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjjqWC40USJAAuz/EO1R+RmOhet0oxGgOUcX GPwBukCg+jSl8aTl6qI2CFfUO+pMfS8F7e128XbEPoyd+3S0dMFMK1oUpsrqbww6 62TqIZGmkg0fUseFZzkBv/PVoZuJrhzFUM2/6JXRjBvbl0modQoGEO8E+uRw3cug xr9niN/BtfcPsVARFMwfYHXptocFvcKr+s8fD95sZg5Xe+OgopXhVRUl5NkFzSGm o+PqQwFCEDVZxDe2ZgeIuIbxdzM8muDOtnlk3eaKEaVyjVQJwRgu/nQvIwsIDHNo wz1idVobxeodbBJLV759tsgFfJPDI4W9sS6+VuQ5ROx6M2A6RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGndkHmI6l02fczu4PLf4rzIDWZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDJkN2Y5NDMtMDZjOS0z Y2FkLTlmOTItYWIwZmM0ODNmYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYGx1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwgj6Knnag2ag51qa8sUuo+FxZHWjLuAn7ZM+rX5L2DZGpSfEH0oAf6 EsFgKfnDb9mtfgNbkr3WbIgD/R8bkFD+2eajIlvFTDSv6Xe/2QDVrGSwPK5pnP3e YU+RPa4VnSKKU1nsdIz246OlWtNrDa4XAHpEa09zcSTwv1AX4iEfrpKzTGwNGvBb 33qJyZqShhF8LbTQpKXqaHD3DvkNBc1rcOLWEL1ZD4BjlBr4fJ9VrJ02xO2w/7Yu C2KlYaM61JtZAFCdJzH0+mSexiAGqVJvbPS/mHnGx97MFnZJWLp+aqJx5FsUeoQZ Ea80R+x6Mw0F0X6DE3OP3XACxsf3J40= -----END CERTIFICATE-----Generated at Wed Jul 29 04:55:39 2026 by rpki-client