$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa File: 95e32c24-9724-3044-bbbe-40ccb8806632.roa (raw, json) Hash identifier: jA2GYbV94eMJNY7XbtbaUKoajYTjpinU68E2y8GEEDk= Subject key identifier: C0:7C:5C:52:37:52:A4:C3:3A:5D:A5:02:43:95:B4:AD:1E:A0:9B:72 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584F3482747092F23C681C22D600 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 12083 IP address blocks: 23.28.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:74:70:92:f2:3c:68:1c:22:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=cef90427-8c0b-4946-b0cc-618220e39e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c3:0a:e2:a4:da:fb:7e:1c:28:ca:fb:ce:b6: 0f:67:25:0d:36:ac:b8:c0:ec:ed:c2:ef:e7:d8:8d: 7f:84:d0:02:70:c9:f3:1a:3f:3a:0f:e9:d0:a6:84: c7:7a:25:ec:2b:8c:f7:c5:b1:b1:0e:4e:76:33:d5: 88:22:bf:02:c2:cf:a2:01:27:bc:16:e0:cd:e5:5e: be:55:2c:7d:44:3b:fd:4c:54:b3:6b:c6:17:cb:e7: 14:d0:b2:b9:00:14:c6:6f:d0:b6:1d:cb:63:a1:cb: 7f:2f:ca:d2:79:0f:a7:d2:49:e3:70:96:6c:aa:81: 86:e8:02:9a:99:34:b3:f6:93:3b:14:b4:c5:3b:da: 69:37:1c:e8:b7:6d:b6:75:75:f8:47:dd:0c:4f:0b: 98:b3:17:b7:7e:10:e2:46:c1:d1:0e:61:4a:8a:06: e8:f3:12:c8:cf:73:92:11:e4:ec:9e:53:66:3f:b2: 7e:bc:8a:f3:fd:67:0e:76:21:71:92:94:aa:df:70: 5d:20:55:99:71:d8:a6:dd:67:54:c0:c1:48:65:70: 63:e9:22:49:3d:cd:e5:a6:3c:10:ea:9c:d0:03:99: 6c:b1:f0:b4:2f:e4:90:83:e0:fe:2d:ea:89:18:18: 23:37:7c:40:e1:23:42:5a:98:7c:56:3b:b0:78:27: df:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7C:5C:52:37:52:A4:C3:3A:5D:A5:02:43:95:B4:AD:1E:A0:9B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 23.28.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c0:5b:12:ef:4f:38:45:a4:f9:5c:78:5e:9e:8f:a2:be:5e: 36:e0:8b:58:b7:6c:63:f5:80:41:d4:35:8f:c3:38:d9:8b:85: 7e:3e:b3:2c:f5:d1:a0:26:74:e1:ee:fd:09:52:7e:64:1a:bd: 93:b6:22:09:7b:b1:54:eb:54:e9:f2:c5:df:40:ab:a5:95:ac: b6:97:48:85:ac:48:dd:ed:14:a6:d2:42:90:6b:5e:e0:72:41: 26:64:0f:91:37:13:07:38:92:37:f0:13:b9:30:3e:a6:9e:21: 5f:1e:4a:5f:67:7f:84:8c:9e:96:52:0e:e1:3f:78:f4:71:5a: 22:6f:e8:f6:35:83:56:a5:cf:52:db:c9:70:5b:97:00:10:d1: 7f:95:43:9f:bc:99:97:62:03:89:86:85:b3:2f:52:94:7f:82: b0:5d:32:d0:f1:1e:67:bf:0c:03:85:02:62:07:6c:a5:0e:a2: 73:e6:93:0f:82:18:f0:2c:40:6a:13:da:8f:41:37:df:db:e8: c5:fc:4d:6e:c9:c8:92:bc:7c:b6:a1:1b:c9:44:64:98:fe:2d: 30:a1:d6:e7:2f:c3:14:4f:40:75:3c:3f:90:8e:dd:20:28:a0: f7:67:ed:56:47:72:de:19:81:02:23:9d:78:79:aa:aa:65:3a: 2d:0e:30:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnRwkvI8aBwi1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2VmOTA0MjctOGMwYi00OTQ2LWIwY2MtNjE4MjIwZTM5ZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cMK4qTa+34cKMr7zrYPZyUNNqy4wOztwu/n 2I1/hNACcMnzGj86D+nQpoTHeiXsK4z3xbGxDk52M9WIIr8Cws+iASe8FuDN5V6+ VSx9RDv9TFSza8YXy+cU0LK5ABTGb9C2Hctjoct/L8rSeQ+n0knjcJZsqoGG6AKa mTSz9pM7FLTFO9ppNxzot222dXX4R90MTwuYsxe3fhDiRsHRDmFKigbo8xLIz3OS EeTsnlNmP7J+vIrz/WcOdiFxkpSq33BdIFWZcdim3WdUwMFIZXBj6SJJPc3lpjwQ 6pzQA5lssfC0L+SQg+D+LeqJGBgjN3xA4SNCWph8VjuweCffIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMB8XFI3UqTDOl2lAkOVtK0eoJtyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvOTVlMzJjMjQtOTcyNC0z MDQ0LWJiYmUtNDBjY2I4ODA2NjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHFxyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzAWxLvTzhFpPlceF6ej6K+Xjbgi1i3bGP1gEHUNY/DONmLhX4+syz1 0aAmdOHu/QlSfmQavZO2Igl7sVTrVOnyxd9Aq6WVrLaXSIWsSN3tFKbSQpBrXuBy QSZkD5E3Ewc4kjfwE7kwPqaeIV8eSl9nf4SMnpZSDuE/ePRxWiJv6PY1g1alz1Lb yXBblwAQ0X+VQ5+8mZdiA4mGhbMvUpR/grBdMtDxHme/DAOFAmIHbKUOonPmkw+C GPAsQGoT2o9BN9/b6MX8TW7JyJK8fLahG8lEZJj+LTCh1ucvwxRPQHU8P5CO3SAo oPdn7VZHct4ZgQIjnXh5qqplOi0OMD0= -----END CERTIFICATE-----Generated at Sun Sep 20 20:36:24 2026 by rpki-client