$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c909b97b-2a40-37c8-83ca-ce84f6b4b977.roa File: c909b97b-2a40-37c8-83ca-ce84f6b4b977.roa (raw, json) Hash identifier: yJZaoak+a7+Z1pb8NLol6kPejqNzx1SUn1izsGHMolQ= Subject key identifier: 8E:76:7F:F3:9A:AF:C9:B0:BC:E1:51:85:0D:FD:CD:1A:B0:23:08:D4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F498023A83FDC1AE9CF96A580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c909b97b-2a40-37c8-83ca-ce84f6b4b977.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 174.161.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:23:a8:3f:dc:1a:e9:cf:96:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=88f1684d-5c5a-403b-b79e-c356e72011e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:54:c1:92:75:b3:83:de:e6:fa:08:bc:ca:38: d6:f0:eb:30:ea:e9:23:1d:83:5e:93:8f:f4:df:33: 86:53:96:ba:b7:78:65:65:3a:11:51:d4:e3:89:ed: 7c:3c:5c:01:26:cf:a3:a9:47:5c:a8:4e:9c:72:1e: ca:54:b8:bc:ea:1d:f2:15:de:31:89:23:d7:97:21: a7:a7:ba:0e:17:a0:7d:4a:33:ac:60:29:f3:87:4e: 47:9e:53:6a:bd:01:01:46:66:8b:6e:8c:49:41:e3: 43:a9:88:71:89:1c:5d:64:2a:d8:6b:17:b4:66:6b: b6:a2:e1:95:b7:3a:e1:1f:fb:c8:9b:8f:0e:b8:7a: 22:68:7f:1d:c5:ee:68:3e:5d:66:1c:b9:24:f4:8d: 7c:fd:1e:bb:59:6b:26:0c:bd:ff:3f:75:69:9a:fd: d2:89:95:67:3a:58:27:98:95:b3:ae:e4:2e:86:9c: 1f:e4:7c:aa:0a:89:9e:cd:89:22:79:0f:12:ff:99: 1b:d5:37:8e:8f:b6:7a:0f:61:1a:b1:a6:9d:7e:e1: 86:9d:d8:51:a5:64:ae:fe:0d:4d:14:c0:69:78:89: e8:c8:d1:2a:19:1b:dd:c5:dd:ec:fd:e3:35:5e:76: a1:b7:f9:6f:15:d4:3a:0b:49:e5:76:e8:89:35:3e: 69:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:76:7F:F3:9A:AF:C9:B0:BC:E1:51:85:0D:FD:CD:1A:B0:23:08:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c909b97b-2a40-37c8-83ca-ce84f6b4b977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:6a:61:1f:45:e8:d2:cd:81:a5:1b:97:0f:fe:ff:f6:dd:66: c0:a9:26:6a:8a:8b:29:e0:57:09:38:32:fd:3b:3d:28:f1:ec: d5:9d:33:e3:4b:ef:a9:0e:f6:7e:9e:63:fc:2e:89:b5:01:ba: f6:95:c7:29:86:da:79:0b:ad:52:16:04:d2:9f:dc:01:3a:fb: 6f:37:e1:92:63:8a:77:32:19:50:34:fb:ce:8e:6d:51:76:f6: 67:9b:01:52:0f:d6:c4:52:5a:f2:ab:b5:63:31:e1:e8:cb:7d: 8f:1f:48:cb:e2:bb:9e:57:54:26:c2:dd:83:65:b9:9d:ab:a9: 7b:f9:7f:21:10:79:2b:f4:87:f2:8f:cc:82:17:a2:a0:06:62: 68:2d:20:38:0d:dc:08:8e:20:10:aa:a7:9a:58:41:6f:c6:6a: 3d:ea:8a:85:af:91:d7:1d:40:f9:c6:96:0d:19:33:07:b1:b6: 97:54:86:cd:5a:7a:90:77:c7:27:22:ba:e8:e9:34:ca:4d:36: d7:49:46:e0:59:59:92:84:ff:2c:75:a0:d8:c9:48:22:56:d2: f5:6b:8d:0f:25:16:c0:3b:aa:d7:72:2a:6b:99:63:2f:3e:99: ec:ff:67:19:2b:4e:73:79:db:05:d7:7d:00:0f:e4:dd:eb:11: 07:0c:e5:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgCOoP9wa6c+WpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODhmMTY4NGQtNWM1YS00MDNiLWI3OWUtYzM1NmU3MjAxMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFTBknWzg97m+gi8yjjW8Osw6ukjHYNek4/0 3zOGU5a6t3hlZToRUdTjie18PFwBJs+jqUdcqE6cch7KVLi86h3yFd4xiSPXlyGn p7oOF6B9SjOsYCnzh05HnlNqvQEBRmaLboxJQeNDqYhxiRxdZCrYaxe0Zmu2ouGV tzrhH/vIm48OuHoiaH8dxe5oPl1mHLkk9I18/R67WWsmDL3/P3Vpmv3SiZVnOlgn mJWzruQuhpwf5HyqComezYkieQ8S/5kb1TeOj7Z6D2EasaadfuGGndhRpWSu/g1N FMBpeInoyNEqGRvdxd3s/eM1Xnaht/lvFdQ6C0nlduiJNT5pQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI52f/Oar8mwvOFRhQ39zRqwIwjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzkwOWI5N2ItMmE0MC0z N2M4LTgzY2EtY2U4NGY2YjRiOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpqYR9F6NLNgaUblw/+//bdZsCpJmqKiyngVwk4Mv07PSjx7NWdM+NL 76kO9n6eY/wuibUBuvaVxymG2nkLrVIWBNKf3AE6+2834ZJjincyGVA0+86ObVF2 9mebAVIP1sRSWvKrtWMx4ejLfY8fSMviu55XVCbC3YNluZ2rqXv5fyEQeSv0h/KP zIIXoqAGYmgtIDgN3AiOIBCqp5pYQW/Gaj3qioWvkdcdQPnGlg0ZMwextpdUhs1a epB3xyciuujpNMpNNtdJRuBZWZKE/yx1oNjJSCJW0vVrjQ8lFsA7qtdyKmuZYy8+ mez/ZxkrTnN52wXXfQAP5N3rEQcM5fs= -----END CERTIFICATE-----Generated at Sat Sep 26 06:16:28 2026 by rpki-client