$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2aa8a62-9741-3f52-8ff8-20933ea5f447.roa File: d2aa8a62-9741-3f52-8ff8-20933ea5f447.roa (raw, json) Hash identifier: Zq0LCNPdWOE1iHGEdF9m4XbubHDbQ7i5lBI7ehAbCEg= Subject key identifier: CD:E5:4D:E4:C4:2B:5E:69:76:4F:21:4B:25:15:CF:76:DE:18:B3:8C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED864061930BFDA32BCF3A6A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2aa8a62-9741-3f52-8ff8-20933ea5f447.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33662 IP address blocks: 174.171.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:06:19:30:bf:da:32:bc:f3:a6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=852a8abb-a6ca-4797-be02-81b14b1cdd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:05:1e:de:82:df:b8:3a:ca:96:57:6d:98: 32:23:49:c9:ce:d1:e9:0b:84:46:e7:d2:80:7b:51: 61:dd:a1:51:07:ee:e1:90:ce:cb:97:e2:54:be:1f: 7a:d0:55:e7:45:6e:1f:dc:1e:20:27:4f:a5:89:7b: c1:5e:78:de:01:3c:8d:0d:93:43:1f:e7:8b:56:14: 17:80:48:c3:a4:33:71:59:47:03:15:00:5e:e5:2e: 2a:4f:bc:dd:f7:b0:da:23:a8:33:c3:31:5b:83:57: c2:f7:02:35:96:d3:5d:3d:a3:3b:bf:db:87:a6:35: 30:9b:90:2e:18:f3:72:89:37:15:55:cf:ce:4e:82: 2d:8b:6d:e0:be:29:98:6b:15:b8:b1:2d:95:ab:86: a9:2c:4c:55:7c:48:d6:9d:93:49:f7:71:32:b4:a9: 70:2e:a6:4b:95:5e:7f:d4:93:17:01:79:d8:f8:01: 22:f7:c4:ca:61:6f:e5:38:cf:68:a3:7e:7c:12:99: 2d:43:9e:90:4f:3f:60:41:53:6d:49:3b:41:71:55: 62:f9:7e:ef:68:41:e3:50:71:9f:88:b1:c0:a5:36: ce:5d:c4:a8:70:6f:f1:87:a1:1c:13:96:87:0b:c6: d9:ec:d2:66:c9:07:c0:d5:bf:44:a7:2a:8c:4c:f2: b8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E5:4D:E4:C4:2B:5E:69:76:4F:21:4B:25:15:CF:76:DE:18:B3:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2aa8a62-9741-3f52-8ff8-20933ea5f447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:19:53:8b:06:ab:c2:f5:ab:37:a9:c0:0b:f5:a2:68:b8:3e: 00:d5:8f:32:a6:a8:34:18:35:7a:96:43:73:9c:b1:9f:21:29: 0f:55:1d:03:c9:f9:60:d9:b2:44:4f:9e:d0:f8:b2:db:43:e0: 81:37:9d:d2:97:c3:6d:2a:bb:e6:6e:99:37:e6:88:21:45:ac: be:11:71:e4:76:74:2d:ac:25:e7:b6:32:79:b1:32:02:0e:57: bb:7f:e0:d2:f3:96:45:82:f6:11:97:20:53:4d:0b:1e:f9:45: 6f:94:01:ec:17:86:9d:de:62:4e:5a:c8:f8:6f:8b:f7:11:67: 06:c2:99:69:c5:f2:f0:59:78:96:be:42:43:00:e6:d1:59:5e: 4a:30:9f:27:2c:4b:d9:ce:ef:20:42:81:ba:5c:0e:76:84:21: 72:dd:47:03:dc:88:92:b3:43:1f:89:e5:24:d9:b8:4d:61:aa: 6d:b0:cd:5b:0d:f4:35:72:e1:3d:3a:41:74:a6:b6:fc:08:e6: fe:b1:ec:db:e0:d9:c9:38:03:f8:d2:b9:6d:0e:c8:cb:bf:2b: b5:31:de:14:5b:c5:26:31:19:85:e4:01:11:fe:9c:d5:f5:b0: ba:f7:c5:14:6d:21:81:a4:62:d3:1a:42:ed:9c:81:1b:7d:f1: eb:90:47:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZAYZML/aMrzzpqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ODUyYThhYmItYTZjYS00Nzk3LWJlMDItODFiMTRiMWNkZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrwFHt6C37g6ypZXbZgyI0nJztHpC4RG59KA e1Fh3aFRB+7hkM7Ll+JUvh960FXnRW4f3B4gJ0+liXvBXnjeATyNDZNDH+eLVhQX gEjDpDNxWUcDFQBe5S4qT7zd97DaI6gzwzFbg1fC9wI1ltNdPaM7v9uHpjUwm5Au GPNyiTcVVc/OToIti23gvimYaxW4sS2Vq4apLExVfEjWnZNJ93EytKlwLqZLlV5/ 1JMXAXnY+AEi98TKYW/lOM9oo358EpktQ56QTz9gQVNtSTtBcVVi+X7vaEHjUHGf iLHApTbOXcSocG/xh6EcE5aHC8bZ7NJmyQfA1b9EpyqMTPK4zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3lTeTEK15pdk8hSyUVz3beGLOMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDJhYThhNjItOTc0MS0z ZjUyLThmZjgtMjA5MzNlYTVmNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYZU4sGq8L1qzepwAv1omi4PgDVjzKmqDQYNXqWQ3OcsZ8hKQ9VHQPJ +WDZskRPntD4sttD4IE3ndKXw20qu+ZumTfmiCFFrL4RceR2dC2sJee2MnmxMgIO V7t/4NLzlkWC9hGXIFNNCx75RW+UAewXhp3eYk5ayPhvi/cRZwbCmWnF8vBZeJa+ QkMA5tFZXkownycsS9nO7yBCgbpcDnaEIXLdRwPciJKzQx+J5STZuE1hqm2wzVsN 9DVy4T06QXSmtvwI5v6x7Nvg2ck4A/jSuW0OyMu/K7Ux3hRbxSYxGYXkARH+nNX1 sLr3xRRtIYGkYtMaQu2cgRt98euQRxc= -----END CERTIFICATE-----Generated at Thu Sep 24 11:19:43 2026 by rpki-client