$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b9aea98-d5df-3494-9b07-2c5af950e2c1.roa File: 6b9aea98-d5df-3494-9b07-2c5af950e2c1.roa (raw, json) Hash identifier: AUEfQFZVriRTUA83ubcfO0XM87lzybw9+/ZMpbt0MIc= Subject key identifier: 21:29:A1:98:8D:A9:9A:CF:B6:1A:F9:DF:06:12:45:5A:79:EC:4C:9C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4980C4F6C78281BC7110BCA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b9aea98-d5df-3494-9b07-2c5af950e2c1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33490 IP address blocks: 96.85.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:c4:f6:c7:82:81:bc:71:10:bc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b3959a58-82d4-4d27-a440-14c88fbb1d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:36:71:d5:4c:15:b3:a8:62:a2:b9:a7:0f:b5: 5b:c4:ee:cb:86:52:1e:91:c0:85:8f:d9:c5:bd:bf: 49:f6:aa:e6:1d:aa:4a:a4:3b:11:02:32:77:c1:ec: 27:43:76:52:ca:a7:88:05:17:ea:97:4e:0c:47:89: b9:db:2d:6c:7b:57:b7:fe:4d:1c:23:bc:aa:57:5c: fb:9b:d8:3f:95:65:58:c2:a1:9b:88:94:d6:3c:e9: 18:a7:3e:33:22:33:5b:2e:67:83:9c:59:4d:5d:b5: ee:8f:2f:d3:5a:f5:7e:34:69:52:29:d8:9b:16:b6: a1:a6:76:ce:6b:7f:85:8e:ea:13:24:75:e5:13:6e: 30:2e:8a:67:bc:c6:52:e9:9c:51:e5:ee:ec:58:e6: 31:18:a5:ec:07:fd:ff:64:ed:6f:46:b5:41:2e:9f: 24:64:93:96:7a:40:5a:f0:a4:06:9d:d4:cf:95:8a: ec:46:83:74:52:fe:63:57:61:b0:7c:09:39:d6:ea: 58:cd:96:10:09:79:ce:de:4b:60:09:ba:36:23:42: 26:06:82:e3:21:38:50:fd:54:d7:cb:ba:92:9c:aa: 46:a6:4f:9b:c4:ac:be:af:1d:23:47:19:57:f9:c2: 3e:e8:8d:85:96:4f:a2:54:1b:db:81:af:da:7a:d7: 9e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:29:A1:98:8D:A9:9A:CF:B6:1A:F9:DF:06:12:45:5A:79:EC:4C:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b9aea98-d5df-3494-9b07-2c5af950e2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.85.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:48:a8:27:b1:1e:80:70:52:fb:c5:d3:be:3e:48:c4:44:ca: cb:8f:5e:ff:c0:e1:9e:f0:c2:ab:81:90:df:c3:9c:81:5e:09: 1a:8f:a0:8f:1e:e0:d6:23:ee:fa:5a:58:07:d5:b2:78:a7:48: 24:52:69:b8:b1:ad:d0:b9:f7:e0:9f:d1:dc:8f:b2:25:8c:07: 17:28:66:f7:18:3b:56:9d:a2:18:44:20:25:20:bc:9f:04:34: 34:92:4f:2d:8d:0d:33:1a:d9:5f:0c:cf:b1:36:52:8c:3e:9e: a2:e5:62:a9:31:0f:7b:7a:af:d2:4f:cb:9a:51:2e:9a:d6:59: ff:98:ad:b9:77:08:ce:93:f0:e2:a7:71:d2:ba:ea:52:85:ba: 05:c0:77:ae:fc:b1:0f:f9:9a:1c:2a:9a:c3:2f:9e:57:42:a1: c6:34:27:40:78:f6:ba:bf:16:af:f8:01:72:ff:f5:99:43:3e: 35:3e:0d:26:8d:f0:aa:4e:26:97:8d:8a:71:0d:27:b1:9f:e0: 4b:7e:aa:15:8d:83:2d:fc:30:67:da:b4:cb:8f:cb:60:cf:23: 74:45:72:de:50:4d:d5:b8:75:14:a3:fd:48:1f:6c:4f:1a:0c: ce:b0:1e:5c:70:1a:a7:a8:3a:19:aa:eb:07:b9:e0:4e:fd:fd: 17:72:b7:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgMT2x4KBvHEQvKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjM5NTlhNTgtODJkNC00ZDI3LWE0NDAtMTRjODhmYmIxZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijZx1UwVs6hiormnD7VbxO7LhlIekcCFj9nF vb9J9qrmHapKpDsRAjJ3wewnQ3ZSyqeIBRfql04MR4m52y1se1e3/k0cI7yqV1z7 m9g/lWVYwqGbiJTWPOkYpz4zIjNbLmeDnFlNXbXujy/TWvV+NGlSKdibFrahpnbO a3+FjuoTJHXlE24wLopnvMZS6ZxR5e7sWOYxGKXsB/3/ZO1vRrVBLp8kZJOWekBa 8KQGndTPlYrsRoN0Uv5jV2GwfAk51upYzZYQCXnO3ktgCbo2I0ImBoLjIThQ/VTX y7qSnKpGpk+bxKy+rx0jRxlX+cI+6I2Flk+iVBvbga/aeteeAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEpoZiNqZrPthr53wYSRVp57EycMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmI5YWVhOTgtZDVkZi0z NDk0LTliMDctMmM1YWY5NTBlMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYFWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRIqCexHoBwUvvF074+SMREysuPXv/A4Z7wwquBkN/DnIFeCRqPoI8e 4NYj7vpaWAfVsninSCRSabixrdC59+Cf0dyPsiWMBxcoZvcYO1adohhEICUgvJ8E NDSSTy2NDTMa2V8Mz7E2Uow+nqLlYqkxD3t6r9JPy5pRLprWWf+Yrbl3CM6T8OKn cdK66lKFugXAd678sQ/5mhwqmsMvnldCocY0J0B49rq/Fq/4AXL/9ZlDPjU+DSaN 8KpOJpeNinENJ7Gf4Et+qhWNgy38MGfatMuPy2DPI3RFct5QTdW4dRSj/UgfbE8a DM6wHlxwGqeoOhmq6we54E79/Rdyt+8= -----END CERTIFICATE-----Generated at Sat Sep 26 16:36:06 2026 by rpki-client