$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a87397f2-abc6-3f23-9497-034afa4196d4.roa File: a87397f2-abc6-3f23-9497-034afa4196d4.roa (raw, json) Hash identifier: mmsRcVBnwNcxkpKJ+AB7DmClDaIp/ebsss1GTQB2QSs= Subject key identifier: 39:54:63:AC:9A:36:56:0B:8F:BA:32:CF:17:9C:05:8E:59:2D:6C:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49786F20045FA9A9444D4A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a87397f2-abc6-3f23-9497-034afa4196d4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33490 IP address blocks: 67.170.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:6f:20:04:5f:a9:a9:44:4d:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d9e48e1f-5d0b-4a36-bf2e-e67167081aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4b:4d:1f:95:10:e5:7a:34:f9:c5:1d:74:d2: 6b:3e:e8:5f:9d:18:14:83:62:f9:72:60:10:fe:77: da:1c:9a:b2:21:e9:c8:4a:5e:95:79:11:20:27:8b: 0b:4a:f3:17:39:ac:c1:df:80:a6:d1:87:4d:38:5f: 14:1f:4e:12:07:e3:9a:6e:eb:37:1a:53:80:ea:0a: be:bc:80:bd:48:43:9e:ff:58:63:e2:94:b3:5a:85: b5:7c:64:ea:53:88:d3:27:52:bb:7c:30:a3:a3:ce: b8:3c:81:00:ac:52:6a:a4:ad:f4:83:9b:bf:31:64: d5:b3:d0:c5:19:72:4c:1c:57:dd:64:85:6e:32:5f: a3:ca:b7:04:16:ef:02:28:dc:4d:09:53:d5:93:e1: b3:47:5e:2d:80:6d:de:30:ab:1a:2c:06:1c:c7:0f: 3e:d4:67:1b:e9:89:f7:65:a4:d2:b5:d1:e4:92:83: 4b:ac:37:02:bf:dc:02:d2:d2:8b:98:4a:eb:fa:03: 19:6e:80:f0:6e:95:a5:88:0c:61:b8:94:00:c4:51: 55:af:86:73:af:55:77:48:ff:44:55:47:13:ba:b9: 8a:ec:64:40:15:3f:69:c1:f9:49:d8:93:e5:c8:65: 27:ae:61:2b:47:89:6c:e8:f1:04:08:57:39:f7:9c: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:54:63:AC:9A:36:56:0B:8F:BA:32:CF:17:9C:05:8E:59:2D:6C:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a87397f2-abc6-3f23-9497-034afa4196d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5b:37:df:cb:ea:32:00:7d:11:31:db:1e:d3:a2:26:a3:3c: b4:2d:45:1d:a8:f3:68:6e:22:60:0d:de:64:09:cc:30:ba:f4: e2:a5:fb:97:9a:0b:d6:b3:92:15:3e:44:9f:5f:77:e7:d6:26: 06:e8:4a:35:12:4d:98:51:08:72:92:81:13:3a:26:ed:84:c7: b5:2b:db:06:69:7c:8f:84:70:93:7b:1b:c0:b3:ae:ec:4e:4e: 8e:f8:5c:fa:06:f8:b7:97:4b:78:25:a4:70:30:9f:8c:44:85: b6:b4:3b:93:17:d9:14:3b:72:68:37:c2:11:ba:39:00:f6:9d: f9:76:e4:d8:6f:a2:91:40:29:90:ec:d2:41:d5:08:db:e8:81: a2:0d:73:d2:e6:52:cd:9f:14:1e:03:9a:60:87:82:6e:74:0f: 65:1d:95:c0:88:eb:f9:50:9c:e9:d8:ca:be:4f:2a:20:42:86: 52:cd:f8:52:6a:ee:ab:2e:4a:3d:71:eb:bf:77:2f:e1:3c:d7: 50:da:89:a0:8b:5b:2b:10:5f:1a:77:b4:cd:81:a1:7b:20:88: e3:b0:12:c7:63:23:f4:82:21:85:a5:56:bb:c0:b2:e5:b8:ea: 8f:05:f4:0d:1d:b7:90:aa:59:2c:86:77:43:6e:64:b0:ab:6f: 4c:c3:39:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeG8gBF+pqURNSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDllNDhlMWYtNWQwYi00YTM2LWJmMmUtZTY3MTY3MDgxYWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0tNH5UQ5Xo0+cUddNJrPuhfnRgUg2L5cmAQ /nfaHJqyIenISl6VeREgJ4sLSvMXOazB34Cm0YdNOF8UH04SB+Oabus3GlOA6gq+ vIC9SEOe/1hj4pSzWoW1fGTqU4jTJ1K7fDCjo864PIEArFJqpK30g5u/MWTVs9DF GXJMHFfdZIVuMl+jyrcEFu8CKNxNCVPVk+GzR14tgG3eMKsaLAYcxw8+1Gcb6Yn3 ZaTStdHkkoNLrDcCv9wC0tKLmErr+gMZboDwbpWliAxhuJQAxFFVr4Zzr1V3SP9E VUcTurmK7GRAFT9pwflJ2JPlyGUnrmErR4ls6PEECFc595w2zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlUY6yaNlYLj7oyzxecBY5ZLWzDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTg3Mzk3ZjItYWJjNi0z ZjIzLTk0OTctMDM0YWZhNDE5NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQ6qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlbN9/L6jIAfREx2x7ToiajPLQtRR2o82huImAN3mQJzDC69OKl+5ea C9azkhU+RJ9fd+fWJgboSjUSTZhRCHKSgRM6Ju2Ex7Ur2wZpfI+EcJN7G8CzruxO To74XPoG+LeXS3glpHAwn4xEhba0O5MX2RQ7cmg3whG6OQD2nfl25NhvopFAKZDs 0kHVCNvogaINc9LmUs2fFB4DmmCHgm50D2UdlcCI6/lQnOnYyr5PKiBChlLN+FJq 7qsuSj1x6793L+E811DaiaCLWysQXxp3tM2BoXsgiOOwEsdjI/SCIYWlVrvAsuW4 6o8F9A0dt5CqWSyGd0NuZLCrb0zDOac= -----END CERTIFICATE-----Generated at Sun Sep 27 07:41:10 2026 by rpki-client