$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/896ec34d-3d2b-387d-855d-455efce7ba0d.roa File: 896ec34d-3d2b-387d-855d-455efce7ba0d.roa (raw, json) Hash identifier: /OZo23c0URwCDPX8G4t8HSW3J58/yh6Til5wK1Q6hg0= Subject key identifier: 66:6C:88:34:0E:9D:40:2C:B9:6F:8D:F3:3B:D8:A2:D2:21:81:1D:01 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584F1E2CF3142A4351A3D268ABF6 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/896ec34d-3d2b-387d-855d-455efce7ba0d.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 209 IP address blocks: 174.124.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:f3:14:2a:43:51:a3:d2:68:ab:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=49c5139e-7146-4980-abcb-2716c7f862e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:b6:3e:07:18:56:d4:d1:24:f4:77:75:59: 77:bc:2d:56:82:71:e0:2e:4c:ee:ca:1d:92:c8:ef: 6c:e3:bd:f4:2a:06:14:64:ea:91:a1:ac:a3:89:87: fc:10:71:20:13:89:53:a7:b4:46:55:d1:96:d0:0e: bb:70:9d:9a:8b:dd:dc:9a:59:59:36:46:5a:93:34: f7:d3:93:c2:90:96:4f:9b:f0:57:44:a1:08:81:89: 87:e8:b5:6e:b4:73:b6:ea:65:85:5c:3e:2d:c5:9a: be:aa:b3:65:cd:c9:2a:3b:f0:4f:af:e4:10:52:f3: 60:aa:f0:5d:c9:21:71:99:36:9f:b9:f8:52:19:6f: b8:ee:48:45:c2:f0:e7:c3:15:78:a3:fb:47:9a:28: fb:35:31:04:b4:be:bb:8f:39:98:a4:6d:01:f5:15: 02:42:34:62:f5:46:c6:a7:eb:20:94:23:9b:46:6c: d1:d0:b0:b7:db:26:40:f5:ae:fb:a4:1c:d3:b8:32: bd:90:ab:a8:c0:df:8a:25:3c:fb:c7:cf:80:86:24: f2:8f:c5:e6:b2:80:a0:10:d5:a8:43:0e:24:e6:bb: f0:85:18:17:32:e9:51:70:6e:4d:83:12:61:b5:8c: cc:d5:3e:b7:37:07:e1:37:c2:b8:00:d7:6a:61:8c: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6C:88:34:0E:9D:40:2C:B9:6F:8D:F3:3B:D8:A2:D2:21:81:1D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/896ec34d-3d2b-387d-855d-455efce7ba0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 174.124.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:bc:7a:b5:5c:77:5b:a3:35:09:3b:d6:2d:f3:3f:b4:b9:6c: 94:4f:19:fe:ca:63:bf:cc:cd:8a:f9:5b:af:38:9e:f4:90:86: a4:48:f3:a0:bb:6c:ac:c3:98:92:b8:61:09:c2:17:09:1a:c3: 3e:48:7b:eb:33:42:a8:51:75:26:5a:e2:42:35:ab:36:54:90: 17:0b:1c:e1:9f:4f:04:bf:51:a1:a6:0e:19:4b:11:ca:99:cb: 0b:7b:c8:48:ce:81:d0:35:a9:a2:1b:a9:2e:72:5a:57:a4:01: f8:1d:90:93:0f:c2:62:fc:4e:a9:81:a2:09:d5:c0:48:89:24: 35:39:3e:d9:96:e4:a2:e0:f3:e8:d7:1e:a3:7f:84:78:f0:e9: 02:29:dd:19:65:33:d6:d6:ba:e2:97:ec:f5:7e:5b:1d:16:a8: 5b:44:bc:d2:47:e4:53:f1:87:2f:4d:dd:b7:f2:59:62:5d:dd: 68:4e:41:ad:b3:9d:cc:23:68:76:ae:e4:f8:96:e9:32:30:3e: f4:e0:89:86:5a:f1:2a:cd:98:69:a0:cf:1a:05:27:8d:0a:12: 4b:f9:4f:2f:09:88:b3:31:4d:0f:65:3b:29:97:eb:94:af:34: 07:d6:82:4e:d1:07:d6:98:f9:32:49:ed:b2:7c:41:00:2f:a4: 92:20:3a:f3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8eLPMUKkNRo9Joq/YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk NDljNTEzOWUtNzE0Ni00OTgwLWFiY2ItMjcxNmM3Zjg2MmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPS2PgcYVtTRJPR3dVl3vC1WgnHgLkzuyh2S yO9s4730KgYUZOqRoayjiYf8EHEgE4lTp7RGVdGW0A67cJ2ai93cmllZNkZakzT3 05PCkJZPm/BXRKEIgYmH6LVutHO26mWFXD4txZq+qrNlzckqO/BPr+QQUvNgqvBd ySFxmTafufhSGW+47khFwvDnwxV4o/tHmij7NTEEtL67jzmYpG0B9RUCQjRi9UbG p+sglCObRmzR0LC32yZA9a77pBzTuDK9kKuowN+KJTz7x8+AhiTyj8XmsoCgENWo Qw4k5rvwhRgXMulRcG5NgxJhtYzM1T63NwfhN8K4ANdqYYzt9wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGZsiDQOnUAsuW+N8zvYotIhgR0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvODk2ZWMzNGQtM2QyYi0z ODdkLTg1NWQtNDU1ZWZjZTdiYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBrnwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEApLx6tVx3W6M1CTvWLfM/tLlslE8Z/spjv8zNivlbrzie9JCGpEjzoLts rMOYkrhhCcIXCRrDPkh76zNCqFF1JlriQjWrNlSQFwsc4Z9PBL9RoaYOGUsRypnL C3vISM6B0DWpohupLnJaV6QB+B2Qkw/CYvxOqYGiCdXASIkkNTk+2ZbkouDz6Nce o3+EePDpAindGWUz1ta64pfs9X5bHRaoW0S80kfkU/GHL03dt/JZYl3daE5BrbOd zCNodq7k+JbpMjA+9OCJhlrxKs2YaaDPGgUnjQoSS/lPLwmIszFND2U7KZfrlK80 B9aCTtEH1pj5MkntsnxBAC+kkiA68w== -----END CERTIFICATE-----Generated at Sun Sep 20 15:04:14 2026 by rpki-client