$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03dc911a-366b-358d-ac1e-c79c6e664006.roa File: 03dc911a-366b-358d-ac1e-c79c6e664006.roa (raw, json) Hash identifier: 6aTGGFgppyKFcWAuZcraf/byKxo7eChwQy+F4NBFQ2A= Subject key identifier: 0A:23:8A:F4:03:D1:97:E3:73:E3:5A:2A:3B:32:93:71:6A:65:0D:E3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3ABE34549B7479B8E72180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03dc911a-366b-358d-ac1e-c79c6e664006.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33287 IP address blocks: 174.173.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:be:34:54:9b:74:79:b8:e7:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=4d40d54b-9de8-4f4d-9204-c591b106d972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:04:49:dc:75:be:73:df:30:03:58:a4:1b: 08:76:8c:9b:08:06:a1:bb:c9:c4:95:51:23:47:f3: a4:bc:01:e3:ce:ee:a3:c8:cc:52:fd:e5:b9:8a:29: de:72:2a:ea:65:23:00:01:db:18:90:0a:f0:a4:7a: 74:c9:0a:8f:23:48:11:99:31:e4:1c:24:07:d6:7b: 43:8b:86:17:14:45:10:bf:a0:18:72:80:1c:c3:58: 14:d5:a3:dd:93:d2:a1:de:ec:54:f8:f1:12:01:ad: 60:76:00:fd:3f:ee:e1:05:0e:1e:b4:85:28:c7:0c: da:15:6b:d0:35:93:50:69:8b:08:68:bd:b4:0d:2e: 04:f2:82:62:43:5e:6e:cb:f2:b2:61:ef:a7:68:74: b1:9e:49:f9:89:4b:3a:ba:64:da:62:9f:d1:01:8a: 3d:69:fe:37:0d:19:a5:af:bd:72:e4:cf:fc:4e:f8: b3:61:87:a2:36:af:ba:fe:af:e1:28:1f:ff:97:28: b2:ec:8e:c3:2b:26:00:d7:f8:78:35:7d:2e:26:1b: 0e:a8:6e:4d:1c:17:ba:2d:16:6c:ae:6d:65:38:1c: 9e:1b:a9:60:2b:b2:53:21:4e:04:88:2b:89:b0:fb: 06:74:e9:c6:41:42:b4:9c:b4:81:26:34:a2:6c:c9: b5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:23:8A:F4:03:D1:97:E3:73:E3:5A:2A:3B:32:93:71:6A:65:0D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03dc911a-366b-358d-ac1e-c79c6e664006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.173.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:3b:e7:89:24:82:71:01:82:97:b9:6f:af:b6:a6:cc:bc:96: d6:eb:0d:96:44:54:89:ce:69:1f:c9:13:30:13:87:5d:72:e0: 5e:6b:49:67:79:bc:10:d3:24:22:2a:af:71:27:15:80:c4:60: 62:2b:c2:f0:85:6d:a6:03:b9:4b:34:1c:9b:46:3c:18:60:f5: 0d:45:20:78:99:73:8a:3d:42:7f:47:7a:62:95:47:ea:1f:78: 0f:fb:0b:04:0b:81:e8:cf:ba:e2:98:f5:89:f6:77:9c:d6:e0: 80:cf:7d:f6:a3:f5:00:3a:5c:d7:ea:ee:a9:83:b4:d9:d2:6a: ef:7a:ea:c0:36:1b:55:f4:9f:f6:38:2f:43:8f:ab:37:d8:b7: f5:2e:bf:ff:2d:4a:45:ce:a2:09:15:26:3e:b1:50:a0:35:cc: bd:90:a5:d5:81:71:b4:5e:a2:c1:a2:8c:16:38:bf:f4:4a:7b: f3:98:da:ba:a1:bb:08:e8:8c:4b:9a:9f:77:a9:48:38:ab:ea: 09:4b:4e:42:d2:49:52:38:e3:ed:e1:41:1d:c9:e2:12:1f:8a: 59:d3:29:2e:3f:6d:06:4c:a3:d3:dd:d3:20:3c:34:52:bb:7f: 0a:92:0c:2c:f7:64:49:da:eb:a3:59:e7:60:4e:a4:65:ab:06: 51:b5:9b:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOr40VJt0ebjnIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NGQ0MGQ1NGItOWRlOC00ZjRkLTkyMDQtYzU5MWIxMDZkOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy0ESdx1vnPfMANYpBsIdoybCAahu8nElVEj R/OkvAHjzu6jyMxS/eW5iinecirqZSMAAdsYkArwpHp0yQqPI0gRmTHkHCQH1ntD i4YXFEUQv6AYcoAcw1gU1aPdk9Kh3uxU+PESAa1gdgD9P+7hBQ4etIUoxwzaFWvQ NZNQaYsIaL20DS4E8oJiQ15uy/KyYe+naHSxnkn5iUs6umTaYp/RAYo9af43DRml r71y5M/8TvizYYeiNq+6/q/hKB//lyiy7I7DKyYA1/h4NX0uJhsOqG5NHBe6LRZs rm1lOByeG6lgK7JTIU4EiCuJsPsGdOnGQUK0nLSBJjSibMm1IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAojivQD0Zfjc+NaKjsyk3FqZQ3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDNkYzkxMWEtMzY2Yi0z NThkLWFjMWUtYzc5YzZlNjY0MDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrq3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8754kkgnEBgpe5b6+2psy8ltbrDZZEVInOaR/JEzATh11y4F5rSWd5 vBDTJCIqr3EnFYDEYGIrwvCFbaYDuUs0HJtGPBhg9Q1FIHiZc4o9Qn9HemKVR+of eA/7CwQLgejPuuKY9Yn2d5zW4IDPffaj9QA6XNfq7qmDtNnSau966sA2G1X0n/Y4 L0OPqzfYt/Uuv/8tSkXOogkVJj6xUKA1zL2QpdWBcbReosGijBY4v/RKe/OY2rqh uwjojEuan3epSDir6glLTkLSSVI44+3hQR3J4hIfilnTKS4/bQZMo9Pd0yA8NFK7 fwqSDCz3ZEna66NZ52BOpGWrBlG1m6Q= -----END CERTIFICATE-----Generated at Tue Jul 21 21:32:42 2026 by rpki-client