$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd13a926-8544-3c83-aaab-84e31715ee84.roa File: dd13a926-8544-3c83-aaab-84e31715ee84.roa (raw, json) Hash identifier: RIx81UI4MjWbE/gYct6yi/BZgruI1S3XXjWKVIlyPQ0= Subject key identifier: A9:B8:D1:87:5A:00:4D:D2:75:1C:16:A4:9A:52:0D:F0:F0:00:C0:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D93B485AC3FF898FCB500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd13a926-8544-3c83-aaab-84e31715ee84.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 174.173.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:93:b4:85:ac:3f:f8:98:fc:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=6dfc513f-e819-45a4-84e1-2c338a2d1ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:89:c5:cb:b1:5a:48:b7:7d:53:a3:d3:a1:b5: 76:22:76:18:3c:25:81:af:8e:b0:95:16:7e:25:74: c0:61:05:51:a8:5a:1b:50:61:72:af:d8:f2:b3:a4: b9:38:87:f7:f2:14:a1:ab:ff:20:12:53:49:b9:fb: 86:92:80:7b:ae:61:29:3f:1b:b1:7d:94:14:02:b1: cd:a9:cb:cf:ec:f7:13:20:16:1b:fd:7d:2b:f7:f3: 4b:a7:4c:b6:57:14:cc:2f:f9:be:23:a2:4f:6e:cf: 41:41:84:18:7e:c0:f1:22:6b:2b:3a:96:2b:c8:e8: dd:1f:bc:c4:f4:de:7a:c9:02:8d:08:88:94:b9:e8: 01:a6:ea:5f:ab:70:bf:f6:df:a8:d1:7f:ed:7d:18: 93:30:ad:85:d3:89:7c:70:5e:47:29:12:13:49:03: bd:8f:15:27:7f:7c:7f:d8:04:f3:db:57:7e:de:de: 36:99:1a:19:b5:61:b1:44:79:29:c0:f0:03:83:a9: 72:25:ef:8f:4c:0b:03:df:4b:4b:b7:9c:98:11:13: e8:f3:e1:f0:95:2a:44:4b:88:a3:4c:53:3d:9c:19: 48:46:ef:14:0b:fe:59:ab:46:e2:ef:21:c8:f8:24: 5c:11:90:27:39:c8:db:d3:ec:19:cd:7a:ab:df:04: 48:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B8:D1:87:5A:00:4D:D2:75:1C:16:A4:9A:52:0D:F0:F0:00:C0:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd13a926-8544-3c83-aaab-84e31715ee84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.173.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9a:b3:4d:ec:33:c4:53:20:a3:ed:27:04:83:3d:c7:82:6f: 5e:d9:be:af:c0:7b:6e:5c:76:8a:98:a4:80:3e:38:9c:d4:a8: 7b:ae:a8:14:83:7f:f2:c6:eb:75:d7:32:e9:c8:b9:2f:0d:1a: 69:37:e5:39:b6:b1:23:21:81:09:94:49:ae:ed:ef:f0:91:d7: 4f:a5:2b:84:eb:3e:c1:1a:9f:86:2d:e4:e9:61:6b:84:20:1d: 0e:10:98:d7:c1:28:d4:b8:1a:81:9f:5e:c0:4e:e5:00:ca:fd: 89:a9:11:bc:1f:5c:7c:3b:53:69:7c:fb:3e:01:c6:ff:c6:34: 68:23:13:8a:76:9e:f1:a9:b8:66:df:1f:b3:23:b2:40:d6:22: 62:c1:7f:b8:2f:7c:b2:5e:b6:9f:55:27:f9:48:d8:55:44:ed: f1:a4:c8:82:4b:e5:55:60:4f:41:09:7e:10:ca:83:6f:68:10: ec:0d:b3:50:53:88:cf:ca:3e:a2:15:3c:00:60:aa:7c:2d:17: 63:3f:7b:d0:2f:56:4e:c0:99:75:d8:89:75:33:a0:96:b8:72: a1:71:99:40:40:c2:0c:16:1e:3c:eb:15:d2:8d:b7:9d:d5:76: da:e1:25:af:fd:dc:0f:34:ff:33:0a:0a:a9:eb:99:82:85:9b: f8:1f:06:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnZO0haw/+Jj8tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NmRmYzUxM2YtZTgxOS00NWE0LTg0ZTEtMmMzMzhhMmQxYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgInFy7FaSLd9U6PTobV2InYYPCWBr46wlRZ+ JXTAYQVRqFobUGFyr9jys6S5OIf38hShq/8gElNJufuGkoB7rmEpPxuxfZQUArHN qcvP7PcTIBYb/X0r9/NLp0y2VxTML/m+I6JPbs9BQYQYfsDxImsrOpYryOjdH7zE 9N56yQKNCIiUuegBpupfq3C/9t+o0X/tfRiTMK2F04l8cF5HKRITSQO9jxUnf3x/ 2ATz21d+3t42mRoZtWGxRHkpwPADg6lyJe+PTAsD30tLt5yYERPo8+HwlSpES4ij TFM9nBlIRu8UC/5Zq0bi7yHI+CRcEZAnOcjb0+wZzXqr3wRI/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKm40YdaAE3SdRwWpJpSDfDwAMA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQxM2E5MjYtODU0NC0z YzgzLWFhYWItODRlMzE3MTVlZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrq3UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaas03sM8RTIKPtJwSDPceCb17Zvq/Ae25cdoqYpIA+OJzUqHuuqBSD f/LG63XXMunIuS8NGmk35Tm2sSMhgQmUSa7t7/CR10+lK4TrPsEan4Yt5Olha4Qg HQ4QmNfBKNS4GoGfXsBO5QDK/YmpEbwfXHw7U2l8+z4Bxv/GNGgjE4p2nvGpuGbf H7MjskDWImLBf7gvfLJetp9VJ/lI2FVE7fGkyIJL5VVgT0EJfhDKg29oEOwNs1BT iM/KPqIVPABgqnwtF2M/e9AvVk7AmXXYiXUzoJa4cqFxmUBAwgwWHjzrFdKNt53V dtrhJa/93A80/zMKCqnrmYKFm/gfBvw= -----END CERTIFICATE-----Generated at Mon Sep 28 23:16:34 2026 by rpki-client