$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d3b7437-2558-3797-a319-d03f81929c8f.roa File: 4d3b7437-2558-3797-a319-d03f81929c8f.roa (raw, json) Hash identifier: E5nim1KRd+qODFNC7AxoYb3CxzyTORSz4E+qPAf9Jew= Subject key identifier: DC:ED:16:AD:55:D1:C5:49:2D:08:AB:BE:A5:A1:5A:F5:DB:36:38:B4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4977BAD8C154B26A6DBB02C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d3b7437-2558-3797-a319-d03f81929c8f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 76.123.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:ba:d8:c1:54:b2:6a:6d:bb:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cf767dbb-4185-4ab8-8657-57e7e8b0d37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:9e:8a:77:29:39:1f:a6:27:dc:ed:af:b0: 29:2f:54:51:4d:e1:f2:37:98:e8:a3:f4:91:76:14: 1c:8f:6b:b5:7f:1a:65:6b:1e:38:a5:44:7e:7f:05: 54:c3:68:0e:66:e8:eb:3b:bc:b2:b7:1f:a4:a7:b2: 4a:35:23:75:05:d9:97:71:6b:d3:47:8a:a8:0e:ee: f6:1b:f2:cd:1e:51:ac:97:03:d6:3c:8f:dc:98:20: 7a:6b:54:f1:9f:0a:bf:ca:a8:85:a3:a9:65:be:f6: 99:b0:74:86:03:dc:4e:5c:cc:61:92:46:ad:99:ca: 11:ae:54:44:29:2f:aa:6b:de:c0:d9:37:69:f1:8c: 75:53:44:17:da:98:25:06:92:94:f4:bf:f5:40:8f: 36:00:c1:d5:a3:07:63:bf:39:a6:22:ce:12:db:15: c1:38:70:4e:86:47:27:c2:9e:5c:e4:6b:55:4e:c0: 12:f7:e8:38:ca:a1:06:9b:d3:f6:f8:02:9f:47:28: 3b:e7:ef:7f:d0:63:dc:b0:8b:df:a8:4f:73:a4:2d: 3c:66:0b:c3:ca:af:d4:b4:d1:d3:0f:97:46:e2:61: 0e:75:ff:5a:76:cf:af:d8:1a:9e:cc:59:8c:7d:26: bb:a4:2a:ac:5b:e7:1a:90:c0:e7:f7:82:05:32:dd: 7c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:ED:16:AD:55:D1:C5:49:2D:08:AB:BE:A5:A1:5A:F5:DB:36:38:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d3b7437-2558-3797-a319-d03f81929c8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.123.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:3b:d9:38:05:a6:cc:69:52:de:27:86:7b:79:e8:72:b4:0f: fe:c8:d3:29:06:50:46:86:34:29:f7:16:5e:c7:29:24:c1:f2: 1d:22:4a:0c:ac:be:1c:09:a4:eb:d8:50:84:5c:65:39:c0:c5: ed:b8:79:93:a8:05:c9:14:61:f8:08:bd:90:36:6b:7b:ab:90: 8d:b0:63:40:a0:cc:96:60:fa:2c:1c:d0:a3:f3:62:5a:43:42: 62:6e:22:de:a8:4f:ff:28:61:7e:e5:73:4d:cc:a3:74:84:b4: 70:bc:99:78:06:29:b0:61:8a:24:69:60:60:4a:0a:e8:bc:e4: 14:8f:28:c7:26:79:46:e2:7e:f2:ab:d1:f9:db:79:97:a6:87: 0e:00:ce:d9:6c:38:ec:04:d4:18:ca:ea:65:d1:d4:7c:aa:50: e2:e9:36:51:48:67:36:45:0a:1b:e0:e0:da:89:0a:ee:f8:99: 85:7c:7c:5a:73:cc:17:94:4c:10:73:aa:76:c1:fb:9d:56:2a: 4f:0e:6e:02:f1:98:36:2f:8d:95:83:26:95:99:04:51:23:25: 84:b2:1c:92:4b:67:4d:7c:25:90:34:90:75:64:e1:60:05:12: ea:7f:09:58:c0:54:a7:1c:0e:b8:f3:78:52:f9:22:1e:36:4a: 31:a7:9f:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd7rYwVSyam27AsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2Y3NjdkYmItNDE4NS00YWI4LTg2NTctNTdlN2U4YjBkMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnmeincpOR+mJ9ztr7ApL1RRTeHyN5joo/SR dhQcj2u1fxplax44pUR+fwVUw2gOZujrO7yytx+kp7JKNSN1BdmXcWvTR4qoDu72 G/LNHlGslwPWPI/cmCB6a1Txnwq/yqiFo6llvvaZsHSGA9xOXMxhkkatmcoRrlRE KS+qa97A2Tdp8Yx1U0QX2pglBpKU9L/1QI82AMHVowdjvzmmIs4S2xXBOHBOhkcn wp5c5GtVTsAS9+g4yqEGm9P2+AKfRyg75+9/0GPcsIvfqE9zpC08ZgvDyq/UtNHT D5dG4mEOdf9ads+v2BqezFmMfSa7pCqsW+cakMDn94IFMt18uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNztFq1V0cVJLQirvqWhWvXbNji0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQzYjc0MzctMjU1OC0z Nzk3LWEzMTktZDAzZjgxOTI5YzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTHvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI872TgFpsxpUt4nhnt56HK0D/7I0ykGUEaGNCn3Fl7HKSTB8h0iSgys vhwJpOvYUIRcZTnAxe24eZOoBckUYfgIvZA2a3urkI2wY0CgzJZg+iwc0KPzYlpD QmJuIt6oT/8oYX7lc03Mo3SEtHC8mXgGKbBhiiRpYGBKCui85BSPKMcmeUbifvKr 0fnbeZemhw4AztlsOOwE1BjK6mXR1HyqUOLpNlFIZzZFChvg4NqJCu74mYV8fFpz zBeUTBBzqnbB+51WKk8ObgLxmDYvjZWDJpWZBFEjJYSyHJJLZ018JZA0kHVk4WAF Eup/CVjAVKccDrjzeFL5Ih42SjGnnx4= -----END CERTIFICATE-----Generated at Sun Sep 27 00:01:32 2026 by rpki-client