$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5b22f93-daf0-353e-aff4-4960f64d8075.roa File: a5b22f93-daf0-353e-aff4-4960f64d8075.roa (raw, json) Hash identifier: HD4P5irE0abQuGSzc7lZEqymxTNc0AvwOPBKmWrTsJc= Subject key identifier: E2:17:92:24:0D:F6:A6:1D:0E:56:D6:04:A5:CF:D3:04:C3:FC:FF:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4982F4B686B7B47FCAF14B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5b22f93-daf0-353e-aff4-4960f64d8075.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7922 IP address blocks: 96.115.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:f4:b6:86:b7:b4:7f:ca:f1:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=203bc13b-fccf-4947-afd7-edb73c993c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:2a:5a:64:ba:fb:fd:86:df:6f:f6:d7:06: a7:6d:5b:31:24:c4:e9:f7:fc:35:0b:49:6a:61:03: 01:be:9c:7a:32:ed:6c:db:17:ff:9b:94:c8:b4:34: 23:ba:46:24:f2:b2:41:78:1e:35:63:40:8e:7f:34: d1:a6:f9:fe:8f:a5:50:20:d4:41:1b:1d:fc:86:d8: 9b:6e:62:ce:b3:0b:0e:42:06:43:da:43:85:a5:80: ac:fa:04:65:1f:cc:a4:76:5c:6d:a9:a5:49:98:dc: 0d:06:fc:0d:79:86:a4:0a:85:80:96:9a:c6:1a:2d: 11:ac:d1:80:8e:34:5c:34:7a:1b:c9:8a:4d:a8:5e: 75:c9:ec:f3:51:34:6f:e5:53:30:86:b4:e4:40:58: 41:10:ee:10:a3:56:8c:db:dd:d3:fb:43:58:d2:b9: f6:c5:b0:08:0d:01:b7:56:03:95:e6:b4:93:78:f8: 2b:2d:63:b1:36:c1:0b:28:8e:dd:5b:f4:4c:67:73: 0b:82:bc:47:e3:f0:ff:44:76:8f:d8:38:d8:d2:dc: 86:dd:f2:50:9e:bc:9e:11:68:6b:e6:e5:96:b2:df: ec:99:67:1f:37:41:ba:55:b6:0e:e4:68:9a:f2:26: e9:7e:a8:cc:61:98:eb:b8:ba:f4:d3:9a:8e:ed:e3: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:17:92:24:0D:F6:A6:1D:0E:56:D6:04:A5:CF:D3:04:C3:FC:FF:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5b22f93-daf0-353e-aff4-4960f64d8075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.115.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:81:10:8c:ca:6b:00:c3:18:67:a0:bb:0c:a8:7a:e0:99:c0: d8:ab:b9:21:a8:27:eb:29:c9:b2:4f:1f:10:ae:e1:9d:03:98: 9c:e6:8a:16:4a:ad:92:20:b8:24:1a:16:b0:0a:02:45:b7:9c: 9d:54:45:be:60:9e:7a:03:e4:b9:b4:da:70:5a:9b:3f:e0:08: 8d:e9:ee:ee:3b:7e:26:df:a2:89:ce:a6:02:bc:b8:ec:0f:8f: 88:79:16:36:0d:5d:55:f6:2b:dd:f0:cc:60:dc:0f:0d:9f:6d: d6:42:2a:2b:5b:64:a9:57:5f:b6:08:b7:66:24:f2:e8:ca:73: 5b:95:93:19:44:67:24:fe:48:f9:a1:00:4d:99:bb:31:70:0d: 0f:3a:36:d4:08:dc:92:f5:15:42:12:f8:c3:6b:27:37:98:31: 9b:20:bf:b9:82:c0:9f:8e:99:78:7a:c3:0b:c5:1e:a4:9e:e6: 64:56:fa:81:28:d6:ae:ac:0b:8f:c9:8a:2e:17:26:94:36:8f: 9b:30:7b:2c:ee:b5:ff:21:0c:88:b0:81:e9:df:18:87:c5:33: 23:94:17:19:3f:bd:85:43:6a:01:d8:0f:84:8a:f0:3b:2d:b1: e6:63:59:a8:c1:69:40:d8:90:57:01:30:36:83:69:a6:40:4b: 03:d1:f8:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgvS2hre0f8rxS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjAzYmMxM2ItZmNjZi00OTQ3LWFmZDctZWRiNzNjOTkzYzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl4qWmS6+/2G32/21wanbVsxJMTp9/w1C0lq YQMBvpx6Mu1s2xf/m5TItDQjukYk8rJBeB41Y0COfzTRpvn+j6VQINRBGx38htib bmLOswsOQgZD2kOFpYCs+gRlH8ykdlxtqaVJmNwNBvwNeYakCoWAlprGGi0RrNGA jjRcNHobyYpNqF51yezzUTRv5VMwhrTkQFhBEO4Qo1aM293T+0NY0rn2xbAIDQG3 VgOV5rSTePgrLWOxNsELKI7dW/RMZ3MLgrxH4/D/RHaP2DjY0tyG3fJQnryeEWhr 5uWWst/smWcfN0G6VbYO5Gia8ibpfqjMYZjruLr005qO7eOGfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIXkiQN9qYdDlbWBKXP0wTD/P9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTViMjJmOTMtZGFmMC0z NTNlLWFmZjQtNDk2MGY2NGQ4MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYHPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+BEIzKawDDGGeguwyoeuCZwNiruSGoJ+spybJPHxCu4Z0DmJzmihZK rZIguCQaFrAKAkW3nJ1URb5gnnoD5Lm02nBamz/gCI3p7u47fibfoonOpgK8uOwP j4h5FjYNXVX2K93wzGDcDw2fbdZCKitbZKlXX7YIt2Yk8ujKc1uVkxlEZyT+SPmh AE2ZuzFwDQ86NtQI3JL1FUIS+MNrJzeYMZsgv7mCwJ+OmXh6wwvFHqSe5mRW+oEo 1q6sC4/Jii4XJpQ2j5sweyzutf8hDIiwgenfGIfFMyOUFxk/vYVDagHYD4SK8Dst seZjWajBaUDYkFcBMDaDaaZASwPR+JU= -----END CERTIFICATE-----Generated at Sat Sep 26 11:42:25 2026 by rpki-client