$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa File: d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa (raw, json) Hash identifier: 0uZq899HYPQlzCXsjqxub0yHZpD5AhFE0QWxFdZBCsw= Subject key identifier: 7E:28:24:8A:2B:7B:70:E8:6F:EE:2F:10:35:66:C8:29:E0:D9:A7:D4 Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584F119CF3C1FF31BA8E563EE900 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 7311 IP address blocks: 96.125.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f3:c1:ff:31:ba:8e:56:3e:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=caa83f2c-bf8b-457b-9432-8560b0346e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:16:61:7b:b0:8a:39:9e:41:66:8a:ee:84:db: a8:40:0b:51:41:fa:4f:19:42:c3:35:f5:72:20:ea: d1:24:e4:dd:1c:99:5e:1f:40:f5:f4:60:ef:16:77: 1b:1b:bb:33:2b:b3:95:06:1e:33:58:9b:2f:a0:63: b8:85:13:24:88:dc:66:3a:54:1f:03:7c:23:1f:6c: 44:09:2c:10:03:3b:33:96:46:2e:f3:79:83:b1:d0: 85:06:ca:e5:a7:20:2c:6c:51:76:4b:65:3e:b1:73: ed:4f:80:c2:52:2a:ee:11:f0:ba:b0:38:de:6c:64: 70:58:09:a8:17:53:56:45:f9:dc:eb:47:35:f2:d5: e7:b4:b3:ff:13:53:29:14:da:ca:c9:48:17:37:8a: 6a:14:b8:ed:56:7d:b8:52:24:c7:35:4b:3d:45:db: 25:dc:a8:e9:bb:47:2f:89:e1:9a:a1:8e:b0:98:91: ad:51:98:a3:c3:2c:6a:67:60:d7:b0:76:20:3c:e7: 53:20:da:25:26:96:de:0f:39:6d:f6:e2:85:b8:12: 26:64:c7:95:89:e3:c8:57:10:44:79:91:2b:8e:3a: aa:4f:0d:c4:5f:b3:42:60:32:97:c1:6a:23:ce:a4: ea:18:3f:21:fa:9d:dc:5b:38:2a:92:ec:25:ec:42: 37:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:28:24:8A:2B:7B:70:E8:6F:EE:2F:10:35:66:C8:29:E0:D9:A7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 96.125.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:bc:dd:e0:c3:3f:5b:92:4e:ce:aa:46:bb:02:9d:eb:df:a1: b5:6c:cb:98:a0:1b:1b:21:21:e3:2f:1e:34:9c:14:59:d3:39: e9:29:c2:3b:db:a3:11:d1:de:f7:4e:12:21:10:10:40:b0:67: 04:6b:a3:3b:55:56:b2:2a:41:6f:63:9f:c8:f0:a7:ce:12:47: 30:68:42:b5:cc:80:f9:d1:3c:d1:89:9f:89:29:51:7b:bc:1f: 9b:5f:19:25:0f:17:32:3a:7f:85:47:db:ec:a6:61:ac:c1:4f: 25:9a:c4:be:e3:73:75:46:ef:d3:56:8b:f2:27:83:fd:04:6a: 56:c5:1e:a3:84:a0:ac:a6:b1:6d:67:0c:10:ef:8b:38:17:1a: d7:3f:f8:50:41:1f:18:11:09:2a:6f:22:46:de:7d:71:16:95: 01:0f:1a:06:89:d2:a1:f9:3c:32:d3:a1:41:da:8a:07:71:ee: fd:37:8b:92:24:32:e1:2e:8d:95:5f:0d:65:a6:cb:d5:bf:6c: fc:09:1f:df:9e:5b:a6:60:4f:b7:54:9c:2b:da:48:4b:8c:81: 3a:67:eb:a1:b2:d8:df:d8:1f:28:ed:47:12:f1:6f:bc:a7:96: fe:b2:02:2f:64:c2:d6:8c:56:94:2e:72:1e:f2:24:23:76:63: b9:12:18:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPPB/zG6jlY+6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2FhODNmMmMtYmY4Yi00NTdiLTk0MzItODU2MGIwMzQ2ZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxZhe7CKOZ5BZoruhNuoQAtRQfpPGULDNfVy IOrRJOTdHJleH0D19GDvFncbG7szK7OVBh4zWJsvoGO4hRMkiNxmOlQfA3wjH2xE CSwQAzszlkYu83mDsdCFBsrlpyAsbFF2S2U+sXPtT4DCUiruEfC6sDjebGRwWAmo F1NWRfnc60c18tXntLP/E1MpFNrKyUgXN4pqFLjtVn24UiTHNUs9Rdsl3Kjpu0cv ieGaoY6wmJGtUZijwyxqZ2DXsHYgPOdTINolJpbeDzlt9uKFuBImZMeViePIVxBE eZErjjqqTw3EX7NCYDKXwWojzqTqGD8h+p3cWzgqkuwl7EI3KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4oJIore3Dob+4vEDVmyCng2afUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvZDM0ZWIwZDgtZmEwYy0z MGQ2LWIzMjItYzYxYWYzMDQ1YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYH2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy83eDDP1uSTs6qRrsCnevfobVsy5igGxshIeMvHjScFFnTOekpwjvb oxHR3vdOEiEQEECwZwRroztVVrIqQW9jn8jwp84SRzBoQrXMgPnRPNGJn4kpUXu8 H5tfGSUPFzI6f4VH2+ymYazBTyWaxL7jc3VG79NWi/Ing/0EalbFHqOEoKymsW1n DBDvizgXGtc/+FBBHxgRCSpvIkbefXEWlQEPGgaJ0qH5PDLToUHaigdx7v03i5Ik MuEujZVfDWWmy9W/bPwJH9+eW6ZgT7dUnCvaSEuMgTpn66Gy2N/YHyjtRxLxb7yn lv6yAi9kwtaMVpQuch7yJCN2Y7kSGHc= -----END CERTIFICATE-----Generated at Tue Sep 22 08:21:19 2026 by rpki-client