$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d2d4668-937e-32a1-a3bc-78c34ed6af7c.roa File: 4d2d4668-937e-32a1-a3bc-78c34ed6af7c.roa (raw, json) Hash identifier: ixrXBbhfBmYqJEO3RJW4tFe8Pa5sQAAkJDRHZjBAxJ0= Subject key identifier: CB:0B:10:DF:CC:67:F7:94:78:CF:71:D5:D7:CC:16:E2:27:34:DA:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E32624C7F5C2D083E02C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d2d4668-937e-32a1-a3bc-78c34ed6af7c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 67.169.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:32:62:4c:7f:5c:2d:08:3e:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=54d185cb-33c0-4e64-b3d4-ba0416bbbd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:45:5d:92:b4:e1:62:0a:83:74:46:86:9a: a5:c6:c7:59:54:9b:a1:f6:20:f5:7e:c5:b4:74:b7: bc:2e:3e:cf:28:88:ef:a1:23:83:e9:5f:57:9b:93: 84:b7:dd:50:5c:6e:84:81:90:1d:0e:35:83:34:c8: ec:ac:4d:94:8b:8a:88:ad:9a:b1:2b:ae:cd:9c:9e: 4e:68:30:2e:2c:73:cc:72:13:6c:7f:f3:ef:7d:06: 53:a6:9d:c4:0d:70:35:9d:bf:0f:55:43:10:fb:6a: d1:f8:81:f7:57:58:99:72:70:a6:64:68:34:3b:2b: f3:74:5a:02:32:03:1f:e1:b0:87:9c:e7:80:cf:e5: eb:71:0e:ed:b3:71:34:ce:87:8c:0f:36:ca:d1:25: bc:fd:a4:6b:06:3f:6d:cc:cf:8b:49:cd:59:bf:9c: 87:8b:ec:51:e6:f0:3d:64:43:45:9d:27:25:75:39: 52:0f:16:ef:81:f4:9d:07:6d:d0:90:4c:bc:09:cf: b4:2c:c0:a3:46:6d:55:e1:67:aa:4d:0e:cd:c3:62: 58:22:42:a6:cb:f3:c7:9c:57:db:0c:65:b2:ae:70: 0e:a4:c9:99:cd:de:d7:41:8f:37:f6:bf:ba:f1:5f: e5:94:05:2b:8d:54:da:b9:36:da:a5:92:ce:c5:58: c0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0B:10:DF:CC:67:F7:94:78:CF:71:D5:D7:CC:16:E2:27:34:DA:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d2d4668-937e-32a1-a3bc-78c34ed6af7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.169.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:e8:61:fb:cf:99:26:0e:cf:c7:77:77:b3:68:c3:b8:1d:77: bc:ec:42:53:a9:33:43:c4:b7:80:a3:99:f2:98:99:8e:8c:23: ca:aa:d4:8b:ac:c9:a3:0e:f1:15:b4:09:b7:e7:f7:fd:c2:64: 28:b8:27:b1:f3:71:98:d3:f2:73:4a:18:5c:82:c3:38:97:52: b1:35:39:19:42:e4:3a:5a:fd:eb:6e:b2:98:bc:27:30:02:fa: 31:3a:bd:79:67:8e:cf:21:b9:25:8e:3a:84:88:b7:9c:b2:fc: 82:fc:7d:9d:5b:0a:83:00:77:0d:26:06:e9:d9:c5:62:a4:d5: 9f:29:33:8f:73:e2:13:6b:9e:d0:77:f6:66:45:a6:61:15:e6: f0:73:2c:9b:96:0a:54:40:45:0c:36:5e:5f:51:49:92:c1:99: 4f:2a:d5:fb:dc:75:82:64:ca:22:95:c8:bc:f0:b0:bc:67:d5: db:5b:3f:fe:7f:15:e6:76:50:83:41:8c:fb:87:a5:3a:fc:03: e2:be:16:82:9b:8d:51:31:9d:9f:2f:59:fd:6c:c8:0a:d4:f0: d0:68:eb:49:ab:0f:dd:6e:12:ba:e6:ee:9d:07:a5:3d:0f:62: 5f:5d:77:61:3b:d4:7e:f9:a1:d9:c4:25:da:ff:d4:19:70:7a: cc:ac:f8:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnjJiTH9cLQg+AsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NTRkMTg1Y2ItMzNjMC00ZTY0LWIzZDQtYmEwNDE2YmJiZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV1FXZK04WIKg3RGhpqlxsdZVJuh9iD1fsW0 dLe8Lj7PKIjvoSOD6V9Xm5OEt91QXG6EgZAdDjWDNMjsrE2Ui4qIrZqxK67NnJ5O aDAuLHPMchNsf/PvfQZTpp3EDXA1nb8PVUMQ+2rR+IH3V1iZcnCmZGg0OyvzdFoC MgMf4bCHnOeAz+XrcQ7ts3E0zoeMDzbK0SW8/aRrBj9tzM+LSc1Zv5yHi+xR5vA9 ZENFnScldTlSDxbvgfSdB23QkEy8Cc+0LMCjRm1V4WeqTQ7Nw2JYIkKmy/PHnFfb DGWyrnAOpMmZzd7XQY839r+68V/llAUrjVTauTbapZLOxVjAuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsLEN/MZ/eUeM9x1dfMFuInNNopMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQyZDQ2NjgtOTM3ZS0z MmExLWEzYmMtNzhjMzRlZDZhZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6k0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/oYfvPmSYOz8d3d7Now7gdd7zsQlOpM0PEt4CjmfKYmY6MI8qq1Ius yaMO8RW0Cbfn9/3CZCi4J7HzcZjT8nNKGFyCwziXUrE1ORlC5Dpa/etuspi8JzAC +jE6vXlnjs8huSWOOoSIt5yy/IL8fZ1bCoMAdw0mBunZxWKk1Z8pM49z4hNrntB3 9mZFpmEV5vBzLJuWClRARQw2Xl9RSZLBmU8q1fvcdYJkyiKVyLzwsLxn1dtbP/5/ FeZ2UINBjPuHpTr8A+K+FoKbjVExnZ8vWf1syArU8NBo60mrD91uErrm7p0HpT0P Yl9dd2E71H75odnEJdr/1Blwesys+Ic= -----END CERTIFICATE-----Generated at Sun Sep 20 17:31:48 2026 by rpki-client