$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943d20f2-0e5b-37e2-8e95-c8546d40d479.roa File: 943d20f2-0e5b-37e2-8e95-c8546d40d479.roa (raw, json) Hash identifier: Lhgjp0ZBfN7VcGb28pGfS4uW1EhrwSGF5bVoNnHhGdE= Subject key identifier: 5E:A1:16:9E:11:14:FF:83:96:50:7D:D7:0D:A9:69:7D:70:3C:A2:86 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49820440409237472B787D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943d20f2-0e5b-37e2-8e95-c8546d40d479.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13367 IP address blocks: 107.4.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:04:40:40:92:37:47:2b:78:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=107fba76-b0b6-4af9-bcd1-f9a31a364bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:66:c2:16:89:5f:ee:e0:ab:ed:e6:71:53: f2:9e:66:95:38:a6:14:59:d9:28:44:64:a8:85:15: 38:ba:51:0c:83:c0:36:8c:78:50:cd:b7:66:19:76: 9b:b7:83:25:b3:cf:0e:26:d7:79:76:16:57:a8:a7: 38:4b:b1:9d:3d:01:a1:87:78:45:6f:f4:6c:cf:10: 49:21:42:34:dd:42:05:1d:e3:68:8d:2b:e0:b6:26: 23:a4:f9:27:d6:68:87:da:5e:38:66:7f:eb:e6:74: 46:15:8a:1f:64:5b:6b:f4:c3:86:e4:60:3c:a4:d0: 1e:52:20:0c:57:b0:23:f2:04:13:28:3a:5a:bf:95: 3c:3a:1b:06:9a:60:bd:32:3a:0f:62:1f:1e:07:62: e9:1d:31:81:44:2b:64:69:68:3d:d4:fb:86:34:3b: fa:b6:d4:45:07:83:1a:54:1c:18:3d:b6:dc:10:cd: 4b:b4:32:bd:f5:86:d4:eb:50:d9:fb:4f:2d:9d:ad: 5b:36:37:2f:87:36:b6:36:48:98:b6:a1:b4:7b:b4: dc:6f:25:0b:4f:bf:ed:28:88:f4:57:c3:a5:02:23: f4:05:e4:17:11:76:b4:7e:f0:a3:c0:ad:f7:e9:59: b1:b8:97:fa:93:ea:67:e9:df:0f:7b:5c:7d:af:4f: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A1:16:9E:11:14:FF:83:96:50:7D:D7:0D:A9:69:7D:70:3C:A2:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/943d20f2-0e5b-37e2-8e95-c8546d40d479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.4.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c2:54:64:e0:78:02:82:bb:14:c1:7f:8f:5b:71:ed:21:d4: e9:d2:4a:ad:d2:1e:f0:7e:17:82:83:c9:3a:24:d6:73:79:62: 44:1d:1c:c7:2e:b1:c7:87:d5:66:b7:eb:f0:37:f2:10:71:63: 79:d9:5f:5b:81:a0:19:f1:48:83:ae:b6:3c:45:52:ea:ed:c8: f2:2c:ac:cf:a3:e1:46:68:53:be:fa:03:55:58:0d:5e:5f:fe: b5:05:40:e2:e6:34:6d:e1:90:5a:74:df:6a:e5:43:22:42:45: 2e:21:0e:0a:03:ec:46:63:39:02:d2:d4:39:9e:59:5e:69:aa: 9a:97:07:3a:a7:61:d6:52:b6:37:9a:d0:de:69:37:db:c8:f6: c3:84:d2:1c:fe:62:93:f7:6b:01:c9:18:b9:f3:96:dc:7f:8b: b2:f0:c1:29:93:1a:12:c6:e9:ec:fd:42:a9:04:0d:26:d4:c4: 2a:f7:0a:52:9b:b1:ad:9b:dd:ef:d1:8a:ae:25:a6:4b:b5:96: 07:e1:11:59:bb:75:fd:5a:53:04:cc:9a:d8:95:aa:55:54:31: 1b:e7:67:0b:2d:d5:94:2a:d8:40:f7:08:2e:eb:ce:4a:4f:00: 5d:86:3f:07:23:41:b9:3e:3d:37:3e:c2:4e:36:0f:be:e4:7d: e7:46:29:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JggRAQJI3Ryt4fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTA3ZmJhNzYtYjBiNi00YWY5LWJjZDEtZjlhMzFhMzY0YmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojJmwhaJX+7gq+3mcVPynmaVOKYUWdkoRGSo hRU4ulEMg8A2jHhQzbdmGXabt4Mls88OJtd5dhZXqKc4S7GdPQGhh3hFb/RszxBJ IUI03UIFHeNojSvgtiYjpPkn1miH2l44Zn/r5nRGFYofZFtr9MOG5GA8pNAeUiAM V7Aj8gQTKDpav5U8OhsGmmC9MjoPYh8eB2LpHTGBRCtkaWg91PuGNDv6ttRFB4Ma VBwYPbbcEM1LtDK99YbU61DZ+08tna1bNjcvhza2NkiYtqG0e7TcbyULT7/tKIj0 V8OlAiP0BeQXEXa0fvCjwK336VmxuJf6k+pn6d8Pe1x9r09P9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6hFp4RFP+DllB91w2paX1wPKKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTQzZDIwZjItMGU1Yi0z N2UyLThlOTUtYzg1NDZkNDBkNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawSkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfCVGTgeAKCuxTBf49bce0h1OnSSq3SHvB+F4KDyTok1nN5YkQdHMcu sceH1Wa36/A38hBxY3nZX1uBoBnxSIOutjxFUurtyPIsrM+j4UZoU776A1VYDV5f /rUFQOLmNG3hkFp032rlQyJCRS4hDgoD7EZjOQLS1DmeWV5pqpqXBzqnYdZStjea 0N5pN9vI9sOE0hz+YpP3awHJGLnzltx/i7LwwSmTGhLG6ez9QqkEDSbUxCr3ClKb sa2b3e/Riq4lpku1lgfhEVm7df1aUwTMmtiVqlVUMRvnZwst1ZQq2ED3CC7rzkpP AF2GPwcjQbk+PTc+wk42D77kfedGKV0= -----END CERTIFICATE-----Generated at Sun Sep 27 03:43:39 2026 by rpki-client