$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9095af5d-e21f-3250-9085-1fe0f3da393c.roa File: 9095af5d-e21f-3250-9085-1fe0f3da393c.roa (raw, json) Hash identifier: yJXxDAxAxPyZNsUF6VHYj3moUg94PaF4YMaVWRbz0Gw= Subject key identifier: A6:89:BA:58:2A:13:3D:1A:7C:94:11:50:B9:F4:AE:A3:86:A4:A7:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E33DFEEF7F9BF84E9AB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9095af5d-e21f-3250-9085-1fe0f3da393c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 67.174.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:33:df:ee:f7:f9:bf:84:e9:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=a5e840e7-85d9-47c0-8a59-842735dd67b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e1:e6:dd:75:a1:c4:0c:c0:4c:c8:32:d5:a1: 36:37:25:08:e2:8f:71:48:36:2d:56:11:9d:cc:56: 5e:90:2b:c8:54:6f:81:d8:18:7f:c8:0a:82:42:74: 50:07:ac:64:14:e9:ae:83:bf:79:9a:ed:0d:56:99: 55:1b:83:fc:20:94:52:68:d5:cf:96:5c:ec:bb:f8: 14:a5:ec:da:25:e4:79:71:6e:a0:33:e6:50:fd:99: 7e:f0:5d:65:04:38:c6:d2:6a:61:3b:e6:f4:98:bc: bd:90:55:7e:15:5c:d5:74:b9:6c:5f:0a:85:37:ea: 01:21:07:91:4f:f6:75:b7:57:20:16:61:a9:18:4a: ec:1b:dc:f1:af:16:f9:d3:9e:f8:d5:ac:fa:e5:f9: 2b:1d:42:a7:13:78:4c:f4:62:b1:e3:74:96:79:11: ae:b0:95:5a:4f:c7:31:37:bd:b6:bc:5c:59:46:49: 53:90:db:f9:a9:d6:9d:9e:c8:66:1b:0c:15:43:85: fe:95:93:14:f8:eb:c7:d7:8f:30:20:44:5c:14:02: d5:c0:a6:10:39:a1:00:d1:54:8f:56:87:16:e7:97: c3:e9:ab:a4:11:85:2b:e7:d9:06:22:32:7a:fc:9f: 75:a7:ea:e4:8a:7a:da:a1:07:9b:0a:a0:78:da:50: 0c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:89:BA:58:2A:13:3D:1A:7C:94:11:50:B9:F4:AE:A3:86:A4:A7:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9095af5d-e21f-3250-9085-1fe0f3da393c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.174.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:2d:f3:11:c9:d8:a9:a3:0d:f6:2d:23:0e:63:40:3d:ee:a5: 1f:fb:df:74:8f:92:f3:44:b3:4d:06:fd:ab:13:1d:19:67:5b: 32:fb:91:57:6b:c9:a3:c0:3e:8c:b8:5e:2c:74:e4:9c:aa:df: 7e:9c:49:d4:76:54:29:94:30:ef:0d:0e:eb:a7:9a:04:f4:db: 97:7f:7c:d4:d6:67:93:b1:4e:db:ef:72:33:12:ce:4b:1d:01: 99:bf:61:d8:d9:67:51:0d:be:25:d0:df:e4:be:ae:4d:ab:b4: 3c:d9:9e:20:ab:dc:4a:8f:61:ae:79:50:a8:7f:59:6c:66:5a: 97:51:fa:53:a6:fc:f4:6b:f8:7f:eb:ab:2c:90:51:67:c7:8f: 3f:20:ad:3f:91:ea:f1:a5:18:ba:66:56:4d:a3:42:2f:d2:a3: 1f:71:36:d0:64:7e:1e:eb:a5:f8:81:46:6a:59:04:27:ae:ec: d7:cc:df:75:e9:d2:34:21:49:d9:56:ad:03:10:51:bb:f3:3f: 08:4a:3a:20:64:eb:29:95:b5:88:30:78:45:44:19:a8:b7:2e: 7b:75:9d:af:d8:6e:ae:91:3a:cc:30:4a:92:4b:68:89:13:2c: 59:39:0d:4f:bc:f2:7c:72:54:50:5d:10:c8:c1:f8:41:2d:9d: 60:0e:91:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnjPf7vf5v4TpqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YTVlODQwZTctODVkOS00N2MwLThhNTktODQyNzM1ZGQ2N2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOHm3XWhxAzATMgy1aE2NyUI4o9xSDYtVhGd zFZekCvIVG+B2Bh/yAqCQnRQB6xkFOmug795mu0NVplVG4P8IJRSaNXPllzsu/gU pezaJeR5cW6gM+ZQ/Zl+8F1lBDjG0mphO+b0mLy9kFV+FVzVdLlsXwqFN+oBIQeR T/Z1t1cgFmGpGErsG9zxrxb505741az65fkrHUKnE3hM9GKx43SWeRGusJVaT8cx N722vFxZRklTkNv5qdadnshmGwwVQ4X+lZMU+OvH148wIERcFALVwKYQOaEA0VSP VocW55fD6aukEYUr59kGIjJ6/J91p+rkinraoQebCqB42lAMnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaJulgqEz0afJQRULn0rqOGpKdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTA5NWFmNWQtZTIxZi0z MjUwLTkwODUtMWZlMGYzZGEzOTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ67wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQt8xHJ2KmjDfYtIw5jQD3upR/733SPkvNEs00G/asTHRlnWzL7kVdr yaPAPoy4Xix05Jyq336cSdR2VCmUMO8NDuunmgT025d/fNTWZ5OxTtvvcjMSzksd AZm/YdjZZ1ENviXQ3+S+rk2rtDzZniCr3EqPYa55UKh/WWxmWpdR+lOm/PRr+H/r qyyQUWfHjz8grT+R6vGlGLpmVk2jQi/Sox9xNtBkfh7rpfiBRmpZBCeu7NfM33Xp 0jQhSdlWrQMQUbvzPwhKOiBk6ymVtYgweEVEGai3Lnt1na/Ybq6ROswwSpJLaIkT LFk5DU+88nxyVFBdEMjB+EEtnWAOkcw= -----END CERTIFICATE-----Generated at Sat Sep 26 09:19:01 2026 by rpki-client