$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da3efcbd-c437-355f-9d1a-208bd26f5250.roa File: da3efcbd-c437-355f-9d1a-208bd26f5250.roa (raw, json) Hash identifier: A2Qk8iEO/XFPRcXngawqQgubG+4yBaI23IqnwxMzWcI= Subject key identifier: 9D:87:30:9E:46:C7:8D:E9:24:E8:93:A4:50:B6:65:95:64:FE:76:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D9297EA19636ED4B99980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da3efcbd-c437-355f-9d1a-208bd26f5250.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 174.173.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:92:97:ea:19:63:6e:d4:b9:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=afabd807-9696-4824-9b13-0ec55b709f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:64:be:f7:20:db:18:8b:f1:74:70:7f:0f:28: b2:fe:73:5e:1b:ac:24:cd:f0:39:dd:4d:98:3e:b2: 3c:a4:b8:24:89:1d:6e:7a:b7:ab:6e:ad:4f:8d:e2: 02:c2:df:8c:03:df:6a:d4:f3:4c:07:db:27:c6:62: 25:74:da:0e:87:85:88:94:fd:36:bf:a5:d7:c3:30: 88:f7:d1:6b:ae:30:61:01:52:14:25:d9:53:98:8e: 4a:ed:d5:fe:88:30:93:1e:32:99:f9:fb:4a:ea:e0: 21:65:13:1a:36:a7:db:20:22:5c:29:c7:5e:97:83: e1:d7:a2:0d:8f:b1:37:cf:3d:1b:e7:16:69:41:08: 29:d3:3e:05:75:ae:e9:0f:ca:e8:30:37:70:78:dd: 9f:ba:74:be:fb:9d:7c:fb:83:5b:54:45:fc:7a:62: 23:5c:d9:6c:06:af:3a:f7:83:39:97:f8:92:c6:0f: 64:59:2e:0b:9a:03:18:53:54:ff:9d:d3:4d:ce:43: 2b:f9:45:cc:35:9c:b0:30:5b:a4:d7:e0:73:97:f2: 0b:7f:e4:1e:f4:b7:29:ae:b7:16:59:a0:11:22:c5: 20:4d:b3:e5:34:85:1a:88:5a:47:f4:c4:26:aa:f2: 61:43:c9:07:c4:7c:67:64:b8:05:5f:3b:c0:a7:79: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:87:30:9E:46:C7:8D:E9:24:E8:93:A4:50:B6:65:95:64:FE:76:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da3efcbd-c437-355f-9d1a-208bd26f5250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.173.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:42:ff:48:32:91:53:70:89:6c:a6:a1:b2:5f:47:89:95:44: 59:32:53:57:d9:e6:22:b4:c1:30:b6:32:ba:98:f3:e3:dc:d9: 61:7a:92:c4:57:5b:49:3f:6d:47:6e:03:8f:2c:ad:67:22:3a: 8f:b7:27:3e:e4:2c:ef:61:03:78:72:83:7a:20:be:60:38:d0: 57:31:3d:26:87:0b:e0:a8:38:3c:bf:fd:3b:8f:db:39:61:cd: 1c:ae:12:8c:0b:2a:c0:03:b9:72:07:f1:f4:6f:07:4b:a5:e3: 5a:8f:72:11:a4:17:ed:6e:ef:a4:b5:ba:95:49:04:3f:5c:db: 02:5d:75:ab:fe:5d:f4:42:3b:f0:99:86:26:b6:4e:be:e7:c4: a3:ab:e7:2c:3f:75:e7:1e:14:c8:bc:a2:3d:fa:41:2c:06:29: 22:3c:44:39:3a:35:28:06:4f:84:a7:0e:52:ce:42:7e:99:d3: df:a7:af:47:b9:ae:3c:6e:d4:7e:25:2f:c0:4d:a3:be:ef:c8: 2d:c2:55:9f:a3:23:6d:29:ca:b9:24:26:3a:e8:c2:e4:d9:7c: 45:3b:e9:d7:36:d1:6e:aa:eb:a4:7f:d3:d7:4d:66:9c:a0:7a: 58:c5:48:e1:cf:2f:78:92:73:c5:d2:db:a7:7a:cf:a2:2d:ee: 97:6c:d5:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnZKX6hljbtS5mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YWZhYmQ4MDctOTY5Ni00ODI0LTliMTMtMGVjNTViNzA5ZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mS+9yDbGIvxdHB/Dyiy/nNeG6wkzfA53U2Y PrI8pLgkiR1uererbq1PjeICwt+MA99q1PNMB9snxmIldNoOh4WIlP02v6XXwzCI 99FrrjBhAVIUJdlTmI5K7dX+iDCTHjKZ+ftK6uAhZRMaNqfbICJcKcdel4Ph16IN j7E3zz0b5xZpQQgp0z4Fda7pD8roMDdweN2funS++518+4NbVEX8emIjXNlsBq86 94M5l/iSxg9kWS4LmgMYU1T/ndNNzkMr+UXMNZywMFuk1+Bzl/ILf+Qe9LcprrcW WaARIsUgTbPlNIUaiFpH9MQmqvJhQ8kHxHxnZLgFXzvAp3lUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2HMJ5Gx43pJOiTpFC2ZZVk/nY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGEzZWZjYmQtYzQzNy0z NTVmLTlkMWEtMjA4YmQyNmY1MjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrq1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARC/0gykVNwiWymobJfR4mVRFkyU1fZ5iK0wTC2MrqY8+Pc2WF6ksRX W0k/bUduA48srWciOo+3Jz7kLO9hA3hyg3ogvmA40FcxPSaHC+CoODy//TuP2zlh zRyuEowLKsADuXIH8fRvB0ul41qPchGkF+1u76S1upVJBD9c2wJddav+XfRCO/CZ hia2Tr7nxKOr5yw/deceFMi8oj36QSwGKSI8RDk6NSgGT4SnDlLOQn6Z09+nr0e5 rjxu1H4lL8BNo77vyC3CVZ+jI20pyrkkJjrowuTZfEU76dc20W6q66R/09dNZpyg eljFSOHPL3iSc8XS26d6z6It7pds1e4= -----END CERTIFICATE-----Generated at Fri Sep 25 01:27:08 2026 by rpki-client