$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d0d822a-56b4-3743-b19c-d20e96b722f7.roa File: 4d0d822a-56b4-3743-b19c-d20e96b722f7.roa (raw, json) Hash identifier: DLgYIMrpCXTkqml3hwKLBIvba+jnBFviIbErTLUdKXg= Subject key identifier: E8:8A:4B:EB:CE:DA:45:87:12:F7:CC:33:06:88:EE:61:F3:F9:BD:56 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4981F8D98FFB783596B34740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d0d822a-56b4-3743-b19c-d20e96b722f7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13367 IP address blocks: 96.88.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:f8:d9:8f:fb:78:35:96:b3:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f1a8643f-fed9-49a8-8f84-3bbd036ebfb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d4:1a:86:87:dd:b4:79:bf:0c:28:f7:bc:2a: e8:d4:44:b6:4b:8d:c7:7e:27:e5:9f:84:ab:79:35: 5e:f0:ea:49:73:81:08:21:10:2b:cb:ad:e3:d2:53: 8e:bd:63:78:88:52:8d:60:84:ee:30:b3:dd:bd:45: 34:f3:65:a4:ce:da:fb:06:55:d4:26:86:dd:4b:cf: 9b:e6:d0:20:f6:66:ae:c1:40:e9:d0:77:24:66:fe: cb:75:78:b7:4f:7e:16:9b:71:7e:50:8e:26:67:0e: e3:36:ce:5f:b4:1f:0c:ce:d7:be:c4:60:18:1b:1e: 10:13:1b:fc:2b:fd:8b:85:9b:cc:c1:e2:2e:25:b4: d7:a6:e5:f1:70:bd:67:f6:2c:ff:b0:d9:0e:01:3f: 2f:11:e6:11:c9:bb:df:db:97:24:11:a9:17:e4:76: 72:56:55:0a:fd:08:45:9a:68:eb:85:6a:31:39:59: 24:d6:8c:41:c3:98:ff:1b:6f:d4:a8:df:e3:c6:8f: 82:9a:c9:1f:e5:48:86:d0:77:f9:aa:ad:60:bb:d3: f1:20:67:77:9b:69:bf:c4:a9:37:35:f3:9d:64:40: 65:b2:c5:5f:d2:ce:f6:c8:81:94:4a:01:05:09:d5: 33:ee:c7:45:72:51:79:b2:09:30:50:4b:28:a1:f5: a9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8A:4B:EB:CE:DA:45:87:12:F7:CC:33:06:88:EE:61:F3:F9:BD:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d0d822a-56b4-3743-b19c-d20e96b722f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.88.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e9:a7:b5:4b:8d:b6:56:b2:10:69:4e:d0:4e:b3:b3:f1:d9: 06:d7:40:52:29:9a:e9:3f:9b:2d:86:e9:06:10:2f:bd:e2:76: 6f:15:df:0f:05:81:09:bd:01:04:3a:ba:68:66:92:64:79:23: 4d:03:f3:e0:4f:ef:fe:f4:5f:fd:f9:40:72:af:4d:9e:b8:f4: af:59:41:11:d9:aa:89:88:49:5d:dd:85:fa:cc:5e:9f:d0:9d: d2:6d:d2:33:71:d0:a0:11:e2:40:69:3b:fe:0b:33:6f:cb:c3: 14:b0:a3:27:bd:cf:61:80:ee:64:ad:72:33:1e:ac:1c:15:1c: 12:4c:49:1a:e3:8c:84:bd:8e:b8:ec:d2:69:98:04:89:b7:fd: 4c:d4:8c:9e:20:1f:e9:12:b6:d4:30:91:5c:9f:07:3f:ff:5c: 0a:e2:99:80:9d:69:7e:67:1f:eb:ae:b2:e3:68:fe:e0:71:37: 4d:00:19:74:bf:ee:d9:4a:64:1e:a0:3a:b8:b0:0e:62:18:2e: a6:d7:78:5e:1d:37:bc:5d:e1:de:85:16:4d:bd:a5:5a:86:0b: 2a:75:d0:31:fc:79:94:de:72:4b:ca:85:30:80:58:61:e8:4c: 16:fe:3d:eb:ac:69:42:ac:c7:42:67:8c:ae:89:0d:29:a0:84: 57:0d:43:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgfjZj/t4NZazR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjFhODY0M2YtZmVkOS00OWE4LThmODQtM2JiZDAzNmViZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdQahofdtHm/DCj3vCro1ES2S43Hfifln4Sr eTVe8OpJc4EIIRAry63j0lOOvWN4iFKNYITuMLPdvUU082Wkztr7BlXUJobdS8+b 5tAg9mauwUDp0HckZv7LdXi3T34Wm3F+UI4mZw7jNs5ftB8Mzte+xGAYGx4QExv8 K/2LhZvMweIuJbTXpuXxcL1n9iz/sNkOAT8vEeYRybvf25ckEakX5HZyVlUK/QhF mmjrhWoxOVkk1oxBw5j/G2/UqN/jxo+Cmskf5UiG0Hf5qq1gu9PxIGd3m2m/xKk3 NfOdZEBlssVf0s72yIGUSgEFCdUz7sdFclF5sgkwUEsoofWpbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiKS+vO2kWHEvfMMwaI7mHz+b1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQwZDgyMmEtNTZiNC0z NzQzLWIxOWMtZDIwZTk2YjcyMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYFgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3pp7VLjbZWshBpTtBOs7Px2QbXQFIpmuk/my2G6QYQL73idm8V3w8F gQm9AQQ6umhmkmR5I00D8+BP7/70X/35QHKvTZ649K9ZQRHZqomISV3dhfrMXp/Q ndJt0jNx0KAR4kBpO/4LM2/LwxSwoye9z2GA7mStcjMerBwVHBJMSRrjjIS9jrjs 0mmYBIm3/UzUjJ4gH+kSttQwkVyfBz//XArimYCdaX5nH+uusuNo/uBxN00AGXS/ 7tlKZB6gOriwDmIYLqbXeF4dN7xd4d6FFk29pVqGCyp10DH8eZTeckvKhTCAWGHo TBb+PeusaUKsx0JnjK6JDSmghFcNQz0= -----END CERTIFICATE-----Generated at Fri Sep 25 20:52:16 2026 by rpki-client