$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f5b1caa-350f-3b4e-8c29-e64b32927d54.roa File: 1f5b1caa-350f-3b4e-8c29-e64b32927d54.roa (raw, json) Hash identifier: wJ9uYNmyIvJFC8Ma5Rpv/FHPoouP/IjMoVa/8YPPDgs= Subject key identifier: 2E:7F:CB:E7:44:E4:AA:FF:8C:05:2D:36:46:D8:05:62:C0:28:1F:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E359E1855EA0FF469F740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f5b1caa-350f-3b4e-8c29-e64b32927d54.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 67.188.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:35:9e:18:55:ea:0f:f4:69:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=def36963-c0ab-4b4d-a258-565ed8802c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a3:8b:cd:27:8f:a0:35:17:6a:1f:0e:60:fb: 5c:2e:ba:8c:5a:92:0d:81:1c:90:88:aa:b3:0f:3d: f4:eb:c7:26:ef:82:04:20:34:da:a9:c4:53:9b:4b: c5:f3:38:44:6c:88:c1:21:1b:f0:58:5f:67:91:dc: 5d:70:77:40:0a:e8:53:87:9a:c1:6e:f8:97:14:8c: 4d:4a:d2:e6:d7:a5:fe:ba:67:0a:cd:bf:19:d0:f9: e1:b1:99:46:d3:83:b1:b1:f4:73:1b:98:56:e8:4a: 3a:5c:6d:37:76:fb:92:63:51:3a:0b:45:75:a2:c9: 2e:38:2b:e2:82:3b:41:b0:25:d3:38:33:e7:2a:ac: 6a:88:5a:ae:90:45:49:fc:55:c1:9a:8b:c0:90:bd: f3:a0:47:55:96:b3:df:4b:70:23:ea:1b:c0:2f:b2: ff:02:d8:46:39:27:88:f5:7a:0f:f7:30:77:29:b7: 0e:94:24:87:4f:e1:81:ed:7f:db:4e:65:44:d8:f4: d5:25:80:4a:14:1c:c1:93:7d:b3:5c:79:08:66:63: 83:dc:89:07:a3:eb:6f:92:cc:1d:5f:9c:dd:90:87: 50:26:d5:2a:8d:f6:ca:22:fc:3b:a1:7d:e2:eb:42: 37:c8:07:43:08:61:80:08:bb:dc:4a:5e:f7:8d:d0: 87:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7F:CB:E7:44:E4:AA:FF:8C:05:2D:36:46:D8:05:62:C0:28:1F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f5b1caa-350f-3b4e-8c29-e64b32927d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:83:f4:1d:2d:0b:cd:dd:d4:7f:5a:d0:0c:26:5c:8c:a9:c7: 73:d3:c4:1d:14:e0:eb:74:26:1a:f5:8b:60:cf:52:63:9d:c6: 7c:2d:c2:e1:3f:8a:38:c1:75:af:bb:82:8d:30:fe:97:ab:f9: fc:6b:cc:74:12:68:11:64:99:25:e2:39:8a:49:e0:e9:70:e6: 6a:52:49:99:c0:16:d5:60:fb:97:9d:16:42:2f:bc:42:d6:6d: 3c:3e:6e:01:3f:8c:73:7c:d7:08:b7:7f:ae:e8:57:dd:2e:3b: 34:b0:c3:ad:0e:7e:3c:b8:bd:e8:4b:2a:bb:60:fa:12:ce:1c: e9:76:13:d7:f9:1a:4d:a4:a7:62:01:9f:2b:63:26:5b:7f:35: 49:1f:12:8c:7c:a4:db:48:a2:2b:bf:2e:61:0d:ce:c8:1d:53: 34:9c:b9:fa:55:12:22:2e:fb:40:10:8c:df:ef:c0:41:45:b5: dd:d0:73:bf:59:b1:c0:cd:9f:93:c5:98:e6:24:c8:fb:c0:04: ce:2f:58:38:24:81:78:e1:0b:6b:fd:eb:9f:f1:a0:bc:2d:d2: 71:2b:8d:8b:2c:74:41:c7:5a:c9:6c:d7:7f:23:5d:87:5c:25: fb:18:7f:cd:4c:d8:bc:11:f4:2d:4d:3d:32:d0:fa:7f:01:b1: e1:13:4e:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnjWeGFXqD/Rp90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGVmMzY5NjMtYzBhYi00YjRkLWEyNTgtNTY1ZWQ4ODAyYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26OLzSePoDUXah8OYPtcLrqMWpINgRyQiKqz Dz3068cm74IEIDTaqcRTm0vF8zhEbIjBIRvwWF9nkdxdcHdACuhTh5rBbviXFIxN StLm16X+umcKzb8Z0PnhsZlG04OxsfRzG5hW6Eo6XG03dvuSY1E6C0V1oskuOCvi gjtBsCXTODPnKqxqiFqukEVJ/FXBmovAkL3zoEdVlrPfS3Aj6hvAL7L/AthGOSeI 9XoP9zB3KbcOlCSHT+GB7X/bTmVE2PTVJYBKFBzBk32zXHkIZmOD3IkHo+tvkswd X5zdkIdQJtUqjfbKIvw7oX3i60I3yAdDCGGACLvcSl73jdCHXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5/y+dE5Kr/jAUtNkbYBWLAKB8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWY1YjFjYWEtMzUwZi0z YjRlLThjMjktZTY0YjMyOTI3ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ7yYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOD9B0tC83d1H9a0AwmXIypx3PTxB0U4Ot0Jhr1i2DPUmOdxnwtwuE/ ijjBda+7go0w/per+fxrzHQSaBFkmSXiOYpJ4Olw5mpSSZnAFtVg+5edFkIvvELW bTw+bgE/jHN81wi3f67oV90uOzSww60Ofjy4vehLKrtg+hLOHOl2E9f5Gk2kp2IB nytjJlt/NUkfEox8pNtIoiu/LmENzsgdUzScufpVEiIu+0AQjN/vwEFFtd3Qc79Z scDNn5PFmOYkyPvABM4vWDgkgXjhC2v965/xoLwt0nErjYssdEHHWsls138jXYdc JfsYf81M2LwR9C1NPTLQ+n8BseETTr8= -----END CERTIFICATE-----Generated at Sun Sep 20 19:36:08 2026 by rpki-client