$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8e0c583-56ba-30f0-b950-26aac67102f4.roa File: b8e0c583-56ba-30f0-b950-26aac67102f4.roa (raw, json) Hash identifier: FJfduef1rNdTSy2JgN63PCt3R/e/S4ss++pnp7DmG2o= Subject key identifier: E7:4E:47:2E:EC:F2:23:21:0B:9C:9D:DB:85:AB:DF:CB:F0:0E:55:E3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497AC1EE37369DFCD0C02A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8e0c583-56ba-30f0-b950-26aac67102f4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7922 IP address blocks: 76.96.248.64/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:c1:ee:37:36:9d:fc:d0:c0:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=52f64b52-8dde-400f-8bba-59b23a9c2175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:dc:a8:f4:39:2c:73:d7:32:27:e3:17:f1:98: 0b:b4:d3:a8:db:20:31:7f:28:d6:ca:92:47:64:30: 4a:ed:b1:d7:20:d8:3b:5c:b8:d5:09:70:c4:35:23: 6d:53:fb:94:e6:6b:7b:da:9f:a9:45:c3:47:98:88: 52:2c:26:35:88:b9:68:23:3a:ce:c9:3a:50:e0:fe: 7a:6e:9a:62:8b:7c:b7:6b:19:ea:5b:ef:cc:a3:81: e3:1e:b2:0e:59:cf:45:99:73:77:d4:14:97:e8:7c: d3:c6:49:48:f0:26:82:61:96:d6:9d:31:9f:88:99: 14:df:86:fc:f9:fd:c3:00:e9:22:fc:c3:dc:0e:e9: 25:82:b3:c4:c2:4d:dd:68:48:97:77:cf:c0:33:cb: a5:40:28:64:d3:28:12:aa:8e:7a:cb:52:f1:dd:99: c9:48:ee:4d:e1:75:60:f7:2b:62:bf:57:fc:64:f9: 3b:ee:00:af:f7:a3:0b:92:8f:33:92:3c:7d:96:61: e4:28:f8:f8:7b:2b:87:bf:d0:da:24:1b:64:bc:4a: 58:78:d7:b5:4b:dc:fb:e6:81:42:1b:84:36:0e:13: ec:03:d1:87:73:24:84:e3:63:18:75:5e:55:18:fb: 40:84:e1:02:83:b8:8e:6e:c3:f8:44:78:d0:58:d2: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4E:47:2E:EC:F2:23:21:0B:9C:9D:DB:85:AB:DF:CB:F0:0E:55:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8e0c583-56ba-30f0-b950-26aac67102f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.96.248.64/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f1:a3:80:48:1c:12:d2:60:41:28:8a:8d:f8:4e:84:df:af: d5:71:42:45:1f:80:3e:58:db:df:a6:e9:6b:ef:34:9d:ce:2d: 2a:7e:4e:e9:9d:83:8f:36:43:77:de:13:e9:ad:04:64:38:3c: 53:da:42:4d:4a:9e:8e:d2:92:f8:9b:d9:37:1f:b5:e8:22:d7: 84:36:b5:8f:15:2d:af:8d:88:e0:12:f4:e0:44:3f:f8:0f:7f: a7:a5:40:79:11:16:73:67:4f:d4:0e:91:d6:91:da:c6:32:7d: 24:89:db:d9:5a:86:56:ef:4c:97:a9:96:3a:a3:4f:c9:7f:d8: 25:ba:0a:e9:0e:e9:46:20:5d:c0:17:77:2a:97:36:2d:45:37: a4:7c:6d:d4:3a:64:4e:04:9d:c9:32:5b:8b:0f:28:f4:68:4c: 86:5c:4d:6a:ca:e5:26:17:55:1a:fa:a6:6b:94:03:e2:0b:79: a2:fb:20:10:e4:56:a4:56:22:99:d2:d1:cd:4b:b6:a6:4b:32: ec:d7:75:b1:94:ec:4f:d0:12:fa:f9:60:1d:7e:2a:12:71:6f: 59:5f:c0:34:c6:fe:66:48:72:f3:aa:4e:2b:84:9c:ad:95:82: c3:08:7b:55:7d:4f:d7:49:47:e3:bb:96:b7:fe:73:28:3e:de: 8c:cb:57:fb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JesHuNzad/NDAKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTJmNjRiNTItOGRkZS00MDBmLThiYmEtNTliMjNhOWMyMTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNyo9Dksc9cyJ+MX8ZgLtNOo2yAxfyjWypJH ZDBK7bHXINg7XLjVCXDENSNtU/uU5mt72p+pRcNHmIhSLCY1iLloIzrOyTpQ4P56 bppii3y3axnqW+/Mo4HjHrIOWc9FmXN31BSX6HzTxklI8CaCYZbWnTGfiJkU34b8 +f3DAOki/MPcDuklgrPEwk3daEiXd8/AM8ulQChk0ygSqo56y1Lx3ZnJSO5N4XVg 9ytiv1f8ZPk77gCv96MLko8zkjx9lmHkKPj4eyuHv9DaJBtkvEpYeNe1S9z75oFC G4Q2DhPsA9GHcySE42MYdV5VGPtAhOECg7iObsP4RHjQWNJZqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOdORy7s8iMhC5yd24Wr38vwDlXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjhlMGM1ODMtNTZiYS0z MGYwLWI5NTAtMjZhYWM2NzEwMmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUETGD4QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCA8aOASBwS0mBBKIqN+E6E36/VcUJFH4A+WNvfpulr7zSdzi0qfk7p nYOPNkN33hPprQRkODxT2kJNSp6O0pL4m9k3H7XoIteENrWPFS2vjYjgEvTgRD/4 D3+npUB5ERZzZ0/UDpHWkdrGMn0kidvZWoZW70yXqZY6o0/Jf9glugrpDulGIF3A F3cqlzYtRTekfG3UOmROBJ3JMluLDyj0aEyGXE1qyuUmF1Ua+qZrlAPiC3mi+yAQ 5FakViKZ0tHNS7amSzLs13WxlOxP0BL6+WAdfioScW9ZX8A0xv5mSHLzqk4rhJyt lYLDCHtVfU/XSUfju5a3/nMoPt6My1f7 -----END CERTIFICATE-----Generated at Sat Oct 3 14:09:25 2026 by rpki-client