$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/955a7074-874b-3899-a4d0-a905e802c8dc.roa File: 955a7074-874b-3899-a4d0-a905e802c8dc.roa (raw, json) Hash identifier: Gq3ani47wf2TMH7pMt+xBLZgRUgX4UdB83YgLHvLdU8= Subject key identifier: 17:04:D0:80:08:A2:CC:B3:D0:70:9E:29:0F:06:66:13:BF:AF:0A:45 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F498128533C5727851F6A1C90 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/955a7074-874b-3899-a4d0-a905e802c8dc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33662 IP address blocks: 96.119.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:28:53:3c:57:27:85:1f:6a:1c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fd31ab7a-75e0-486d-8a34-d1505aa1f3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:1a:1e:32:27:d3:08:33:36:05:18:a8:f2: 15:54:ce:02:82:ba:8b:9b:fb:2c:15:5d:75:6a:2f: 1e:ac:9d:d5:89:1d:7d:ff:66:80:64:38:5a:9a:41: 46:18:d2:88:62:f4:76:be:1d:70:65:2d:9a:69:8a: 50:ef:f1:ac:2f:3a:7c:db:fc:ea:49:e2:c1:d0:23: d9:c4:ea:b5:43:c0:8a:33:d1:27:39:36:9b:76:e6: 3c:e2:17:ac:50:c4:68:3c:79:24:f4:41:7a:c3:13: 06:f9:ff:24:c0:46:03:63:25:27:89:12:4c:9d:55: 4c:74:cc:e7:a1:8d:d5:5a:ab:2b:74:b2:e5:50:0d: e9:c2:02:d7:af:71:2a:a3:df:45:62:7e:62:25:93: 72:bf:11:c4:b9:44:15:11:d1:d2:f6:ee:81:f9:95: 8a:b9:51:f2:b3:6a:f0:97:c4:42:02:ef:13:d3:01: 29:2f:a9:ac:5c:24:04:4a:2d:7b:82:7b:92:85:b6: 48:c4:86:93:9f:d1:76:2c:3b:8d:e8:71:d1:b6:4c: 8a:e3:8a:bc:9a:a3:ee:c0:03:96:19:1d:67:c4:aa: 5c:de:93:28:b8:2a:93:aa:4c:74:e6:de:04:6d:10: 70:0f:a6:65:84:0e:87:a1:8e:9c:79:81:47:f9:5d: 66:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:04:D0:80:08:A2:CC:B3:D0:70:9E:29:0F:06:66:13:BF:AF:0A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/955a7074-874b-3899-a4d0-a905e802c8dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.119.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:2f:dc:6a:99:69:d3:ec:04:d0:59:b5:1a:a7:a6:42:7f:f2: d2:42:e3:54:5a:69:e2:18:71:bd:c8:2a:36:ed:69:99:dd:73: c0:71:32:29:05:a5:e8:d7:b9:a2:ce:25:d5:c8:06:d2:a7:b1: a0:f4:e3:e4:0f:4d:06:26:df:44:28:a0:32:dd:ad:78:23:2e: 18:00:e0:61:86:1e:d8:41:bb:4f:cc:09:63:5b:a0:75:7d:ad: e8:d9:18:4a:b1:fb:df:8e:37:01:38:3d:cd:90:5d:cd:15:7d: b3:89:53:cf:1b:4a:aa:d9:22:2a:24:0a:b7:0f:64:b8:0d:62: 29:01:2f:99:fd:44:7e:4b:7f:aa:1d:fc:49:a1:d4:51:56:c3: 34:1d:67:19:69:7c:26:d8:6a:26:49:0c:f9:54:20:b0:31:be: 7e:d1:b0:73:d9:de:75:f5:7f:90:4e:0d:5b:6c:d5:c2:b4:85: 8c:02:50:ed:4e:87:26:72:ad:df:c1:b6:0a:47:26:ef:20:5e: 53:1d:23:e9:df:86:3d:ce:b0:08:62:60:1d:b4:bb:0c:ac:27: d2:76:17:19:e9:2c:dd:41:3a:15:99:17:c4:9f:df:05:71:f4: db:3c:6b:e2:6e:f8:8d:89:6d:33:2e:85:47:c8:95:e9:c0:dd: bd:75:93:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgShTPFcnhR9qHJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQzMWFiN2EtNzVlMC00ODZkLThhMzQtZDE1MDVhYTFmM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXIaHjIn0wgzNgUYqPIVVM4CgrqLm/ssFV11 ai8erJ3ViR19/2aAZDhamkFGGNKIYvR2vh1wZS2aaYpQ7/GsLzp82/zqSeLB0CPZ xOq1Q8CKM9EnOTabduY84hesUMRoPHkk9EF6wxMG+f8kwEYDYyUniRJMnVVMdMzn oY3VWqsrdLLlUA3pwgLXr3Eqo99FYn5iJZNyvxHEuUQVEdHS9u6B+ZWKuVHys2rw l8RCAu8T0wEpL6msXCQESi17gnuShbZIxIaTn9F2LDuN6HHRtkyK44q8mqPuwAOW GR1nxKpc3pMouCqTqkx05t4EbRBwD6ZlhA6HoY6ceYFH+V1maQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcE0IAIosyz0HCeKQ8GZhO/rwpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTU1YTcwNzQtODc0Yi0z ODk5LWE0ZDAtYTkwNWU4MDJjOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYHcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIv3GqZadPsBNBZtRqnpkJ/8tJC41RaaeIYcb3IKjbtaZndc8BxMikF pejXuaLOJdXIBtKnsaD04+QPTQYm30QooDLdrXgjLhgA4GGGHthBu0/MCWNboHV9 rejZGEqx+9+ONwE4Pc2QXc0VfbOJU88bSqrZIiokCrcPZLgNYikBL5n9RH5Lf6od /Emh1FFWwzQdZxlpfCbYaiZJDPlUILAxvn7RsHPZ3nX1f5BODVts1cK0hYwCUO1O hyZyrd/BtgpHJu8gXlMdI+nfhj3OsAhiYB20uwysJ9J2FxnpLN1BOhWZF8Sf3wVx 9Ns8a+Ju+I2JbTMuhUfIlenA3b11k0w= -----END CERTIFICATE-----Generated at Sat Sep 26 13:07:32 2026 by rpki-client