$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ae1c817-cac1-3e26-86ec-733ce93fa8c8.roa File: 2ae1c817-cac1-3e26-86ec-733ce93fa8c8.roa (raw, json) Hash identifier: d5dCelfyGr2hdVI9g1jVv2qZifxVb+ye9AFzBacuYyE= Subject key identifier: C7:C6:73:F8:5E:C8:50:32:2A:16:B7:97:60:3D:E3:24:E5:A2:C1:B0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D670ED88F657D194E50C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ae1c817-cac1-3e26-86ec-733ce93fa8c8.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 174.166.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:67:0e:d8:8f:65:7d:19:4e:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=78c363a3-4854-42de-89b7-ec792407af56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:df:48:69:f6:74:52:34:79:d8:1e:15:8a: 5b:4a:e5:9f:21:d7:e4:85:96:09:dc:c4:77:32:e6: 84:17:9d:18:8b:e3:bf:1a:57:d4:14:6a:d0:ad:33: 60:a9:fc:27:79:6f:9e:e3:4f:5f:cc:e7:c5:a7:ed: d6:f7:50:3f:3e:8b:a2:0f:bd:57:f2:05:15:51:b7: 54:c1:3f:87:d4:ef:a0:83:79:44:e2:ff:11:f6:06: 06:be:fe:90:c2:ea:b7:71:17:2f:50:98:42:3a:d2: fe:f8:60:22:98:6f:4e:e9:36:8d:99:1f:1e:f5:0d: 1b:67:57:0a:3d:b4:ef:2e:da:52:fb:51:f0:1c:f0: e7:3c:0c:d2:7f:d9:b7:2a:4c:e7:ef:c2:ad:2a:5a: af:44:1b:8c:9d:b8:f1:09:e4:27:1c:b0:a5:62:98: 01:b3:7a:12:b3:7e:93:eb:8c:8e:8e:51:17:a6:6e: 8c:f3:e2:ea:fc:07:30:49:96:d6:39:97:6e:74:44: f8:41:8e:c8:ec:96:db:68:5b:d5:3d:9e:0a:5c:34: d1:60:1e:20:79:0e:81:21:b2:f0:a5:f6:ed:3f:81: 78:74:20:6c:4d:c7:20:30:b9:a9:22:90:36:db:9d: ba:42:8d:e7:40:26:49:21:de:9d:9f:9f:06:f7:b9: 34:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C6:73:F8:5E:C8:50:32:2A:16:B7:97:60:3D:E3:24:E5:A2:C1:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ae1c817-cac1-3e26-86ec-733ce93fa8c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.166.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:fa:16:12:ce:c9:8e:e1:f0:74:0b:42:15:e6:1e:36:cb:16: 67:23:a7:97:3f:39:e7:16:c4:06:d0:ec:ad:3c:3c:9a:a3:25: 06:a9:c0:42:d9:c2:3a:60:d9:78:9e:9e:53:c3:e0:ab:4c:1f: 1e:13:92:32:23:01:75:43:10:33:15:5f:05:c3:f2:7f:dc:02: 82:f7:f5:1c:4f:22:32:0e:f5:ed:12:e7:e1:c8:d1:61:de:b7: fb:71:f3:c1:36:16:99:40:02:11:48:a8:28:46:c5:8b:1c:03: d8:a5:ef:c0:10:f5:db:61:77:78:e2:26:0c:de:0b:4d:31:f4: c7:20:78:85:96:34:d6:45:9c:82:c5:9e:cd:bf:12:d9:21:cf: fb:9c:a5:02:61:18:c4:b3:26:10:61:92:10:6f:8c:44:5b:97: ac:b8:2e:f7:2b:68:6a:f0:3c:6a:6e:d2:dd:c1:98:50:2a:06: 28:89:fc:13:1c:7d:ef:8e:f4:37:8f:ac:32:2d:8a:cd:ad:81: 3b:4c:63:cb:2c:7c:09:da:1d:90:c6:db:e8:02:79:98:ca:47: 9e:28:76:99:a3:57:3b:9c:69:00:84:3a:ba:9b:cb:fb:5f:9e: ea:d8:f5:4d:ca:a8:fd:44:8f:47:50:3b:6e:54:53:25:ac:a6: 7f:14:01:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnWcO2I9lfRlOUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NzhjMzYzYTMtNDg1NC00MmRlLTg5YjctZWM3OTI0MDdhZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxvfSGn2dFI0edgeFYpbSuWfIdfkhZYJ3MR3 MuaEF50Yi+O/GlfUFGrQrTNgqfwneW+e409fzOfFp+3W91A/PouiD71X8gUVUbdU wT+H1O+gg3lE4v8R9gYGvv6Qwuq3cRcvUJhCOtL++GAimG9O6TaNmR8e9Q0bZ1cK PbTvLtpS+1HwHPDnPAzSf9m3Kkzn78KtKlqvRBuMnbjxCeQnHLClYpgBs3oSs36T 64yOjlEXpm6M8+Lq/AcwSZbWOZdudET4QY7I7JbbaFvVPZ4KXDTRYB4geQ6BIbLw pfbtP4F4dCBsTccgMLmpIpA22526Qo3nQCZJId6dn58G97k0iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfGc/heyFAyKha3l2A94yTlosGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmFlMWM4MTctY2FjMS0z ZTI2LTg2ZWMtNzMzY2U5M2ZhOGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT6FhLOyY7h8HQLQhXmHjbLFmcjp5c/OecWxAbQ7K08PJqjJQapwELZ wjpg2XienlPD4KtMHx4TkjIjAXVDEDMVXwXD8n/cAoL39RxPIjIO9e0S5+HI0WHe t/tx88E2FplAAhFIqChGxYscA9il78AQ9dthd3jiJgzeC00x9McgeIWWNNZFnILF ns2/Etkhz/ucpQJhGMSzJhBhkhBvjERbl6y4LvcraGrwPGpu0t3BmFAqBiiJ/BMc fe+O9DePrDItis2tgTtMY8ssfAnaHZDG2+gCeZjKR54odpmjVzucaQCEOrqby/tf nurY9U3KqP1Ej0dQO25UUyWspn8UAb0= -----END CERTIFICATE-----Generated at Tue Sep 22 09:49:21 2026 by rpki-client