$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d54a64b-742a-33a7-8f01-4fc8c25e6648.roa File: 8d54a64b-742a-33a7-8f01-4fc8c25e6648.roa (raw, json) Hash identifier: ynkJfHfSTxAArtn3Pt82V9Qr1YkuJ6iikqX3sGMi76k= Subject key identifier: 2A:73:3F:1E:7B:1F:41:7C:99:04:DF:90:92:3C:DC:8F:4B:1A:50:A2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4977D96C22F5F5B11680A9E8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d54a64b-742a-33a7-8f01-4fc8c25e6648.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 174.161.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:d9:6c:22:f5:f5:b1:16:80:a9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=21916afb-39b3-4091-beaa-138e3fc91017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:99:1d:8e:54:6a:83:8c:a8:a0:5e:5c:b8:51: e0:c2:24:6e:70:4b:5a:9e:54:53:e2:3c:57:db:48: cd:21:d5:79:fc:dc:b4:21:64:16:44:fa:09:49:3b: ed:23:9e:e1:e1:54:e1:c3:8b:b0:09:31:db:7f:df: 6e:89:8e:8d:74:f7:a5:49:90:25:d1:53:5a:b3:ed: cd:d1:e3:af:dd:3e:39:a7:fe:ba:20:da:63:33:eb: 4d:c9:f9:91:df:af:a0:e9:44:5e:f7:2d:94:5f:ad: 32:9d:7a:7e:51:23:97:0e:b7:25:a9:f6:f1:7f:aa: 0e:53:48:bd:0b:b9:1c:c0:27:b5:da:3a:be:59:f7: 70:81:ea:46:76:6b:e2:f8:bd:a2:b4:17:f8:7a:15: ae:e5:99:9f:bb:3b:26:9b:48:63:dc:18:d9:12:9c: 83:44:cf:2a:81:ae:6b:61:13:0d:3a:8f:77:53:4c: b7:7a:f7:30:f8:32:03:a8:d2:9b:6e:b2:fe:04:52: f9:ed:58:47:05:2d:9d:23:64:7e:89:c8:b1:0c:53: db:75:8c:9e:84:c3:dc:f5:9f:e1:91:c1:30:e9:33: 87:3b:7f:bb:26:cd:9d:76:07:29:6f:75:7a:06:43: 1f:2a:74:7a:f0:8e:8b:9d:1c:73:62:fc:a0:8d:22: 9b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:73:3F:1E:7B:1F:41:7C:99:04:DF:90:92:3C:DC:8F:4B:1A:50:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d54a64b-742a-33a7-8f01-4fc8c25e6648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:96:50:73:82:a3:fa:b2:7b:d3:13:ea:6e:85:e6:a9:4a:7f: ae:a3:dc:c0:0c:ee:bd:02:4b:00:fd:fa:96:20:02:df:76:be: 29:1d:b4:05:c8:95:0a:39:ee:e2:2a:36:a6:1c:61:74:36:12: a0:2d:98:a7:07:cd:83:d7:38:cc:6c:2b:8f:e2:3d:f7:3a:db: a3:cc:ee:58:a5:93:26:6c:bb:6d:3f:0f:9c:0a:30:c6:c9:ee: a8:39:b0:11:ee:aa:31:4b:75:31:8a:f1:a7:c0:62:20:25:a4: ce:7e:8d:58:33:1d:c1:bb:82:5f:a7:f3:00:36:2e:29:3d:5a: d8:bd:4e:21:32:d6:5f:1d:71:6d:b2:b9:63:29:ed:ec:85:ff: 54:50:dd:55:5a:ea:4d:9b:93:6b:af:7b:bf:06:1c:63:ed:28: c2:39:23:26:c7:7e:dc:e1:07:a5:1d:e7:69:58:e4:0f:e6:53: 76:7b:8f:50:df:42:5c:52:ee:fa:23:2a:9f:49:5d:d6:e1:ff: 8e:5d:e0:3f:37:4c:39:55:da:93:52:f6:98:f0:8f:5b:7d:33: de:25:24:cb:a9:29:4b:ff:e9:64:fb:f7:68:d8:8e:6c:b9:7f: c2:b2:ee:b3:a2:0e:a1:15:ce:af:3e:fe:7a:1a:08:e0:e9:69: 98:61:a9:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd9lsIvX1sRaAqegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjE5MTZhZmItMzliMy00MDkxLWJlYWEtMTM4ZTNmYzkxMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5kdjlRqg4yooF5cuFHgwiRucEtanlRT4jxX 20jNIdV5/Ny0IWQWRPoJSTvtI57h4VThw4uwCTHbf99uiY6NdPelSZAl0VNas+3N 0eOv3T45p/66INpjM+tNyfmR36+g6URe9y2UX60ynXp+USOXDrclqfbxf6oOU0i9 C7kcwCe12jq+WfdwgepGdmvi+L2itBf4ehWu5Zmfuzsmm0hj3BjZEpyDRM8qga5r YRMNOo93U0y3evcw+DIDqNKbbrL+BFL57VhHBS2dI2R+icixDFPbdYyehMPc9Z/h kcEw6TOHO3+7Js2ddgcpb3V6BkMfKnR68I6LnRxzYvygjSKblQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpzPx57H0F8mQTfkJI83I9LGlCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQ1NGE2NGItNzQyYS0z M2E3LThmMDEtNGZjOGMyNWU2NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCWUHOCo/qye9MT6m6F5qlKf66j3MAM7r0CSwD9+pYgAt92vikdtAXI lQo57uIqNqYcYXQ2EqAtmKcHzYPXOMxsK4/iPfc626PM7lilkyZsu20/D5wKMMbJ 7qg5sBHuqjFLdTGK8afAYiAlpM5+jVgzHcG7gl+n8wA2Lik9Wti9TiEy1l8dcW2y uWMp7eyF/1RQ3VVa6k2bk2uve78GHGPtKMI5IybHftzhB6Ud52lY5A/mU3Z7j1Df QlxS7vojKp9JXdbh/45d4D83TDlV2pNS9pjwj1t9M94lJMupKUv/6WT792jYjmy5 f8Ky7rOiDqEVzq8+/noaCODpaZhhqdk= -----END CERTIFICATE-----Generated at Fri Sep 25 06:14:46 2026 by rpki-client