$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cfcf950-12a1-3757-bc70-37970a1f5457.roa File: 0cfcf950-12a1-3757-bc70-37970a1f5457.roa (raw, json) Hash identifier: HQBYyUV3t59vv+NO63hGWm35AJ0X4KoEmmyCXDOPm+s= Subject key identifier: B2:B5:95:7F:61:2F:DD:7E:3B:0F:1E:8C:5B:A8:49:CC:22:C9:E1:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119DA712002B1FF6F743D460 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cfcf950-12a1-3757-bc70-37970a1f5457.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 67.173.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:a7:12:00:2b:1f:f6:f7:43:d4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=de6d628f-a771-44f6-b57e-703540c2dcda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:ec:d3:20:7a:5d:a4:a8:c9:68:a2:13:0f: 82:c5:de:7f:6e:0a:7a:48:52:af:b0:84:a7:94:0c: e0:d0:eb:af:b8:5a:b2:e1:70:b3:e8:a9:67:d5:94: 0f:87:ce:54:f8:f9:42:eb:d2:63:b1:b0:84:8c:ba: 39:e7:c3:7e:a3:1a:45:8b:14:d9:9d:e0:ed:58:d3: 6b:0f:1f:1f:51:de:e9:a4:3b:24:49:76:f0:6d:e9: 74:da:5c:44:c1:af:b2:91:07:78:dc:a1:00:0e:88: 77:f0:04:6c:55:dd:70:5f:66:11:c3:b8:ac:f4:32: fd:90:26:48:f2:10:a8:dc:d4:18:24:5f:cf:98:5b: e0:4d:75:4d:77:76:a6:d8:c1:d0:10:76:e8:f9:e9: 9e:1a:63:94:d8:e2:c7:45:06:8d:94:a5:5c:6a:28: 1c:18:63:27:4f:50:fc:03:2d:ca:f5:dd:5e:87:47: 2b:11:69:22:87:a5:be:fc:8b:2d:78:ee:f1:00:c9: bf:ee:71:e2:4e:ee:08:42:59:c6:97:f7:73:cc:5d: af:8a:3b:42:33:87:11:06:93:cd:04:38:3e:a6:ed: 9e:0a:2e:b7:7a:95:7e:30:12:87:f8:de:47:37:b1: 49:8b:0d:f1:50:87:28:07:ae:94:f1:a0:bc:7b:e5: 64:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B5:95:7F:61:2F:DD:7E:3B:0F:1E:8C:5B:A8:49:CC:22:C9:E1:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cfcf950-12a1-3757-bc70-37970a1f5457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.173.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:62:7d:90:d9:87:f0:b4:7c:cc:b3:b8:49:08:31:a5:99:16: 3a:46:cf:61:c2:df:83:ef:75:4a:04:c3:ff:24:48:1d:3c:ae: 5f:ca:de:60:67:25:3f:5d:3e:3f:f6:e7:5c:53:83:4b:a2:8d: d7:ab:b3:02:57:af:09:32:bc:68:51:39:d0:54:2d:ad:dd:dd: 67:47:4a:c9:2b:e1:a2:36:9d:ac:d8:4d:11:d8:50:b1:b0:df: a3:ae:29:65:2c:b6:2d:36:35:a7:ed:70:62:9d:a1:b5:07:d0: b9:f4:fe:c4:23:0b:eb:b1:bd:45:ea:94:33:7f:e5:dc:21:0c: ce:b5:4e:ed:23:55:35:52:60:7e:51:9e:31:07:68:51:5c:01: 27:1a:1a:bc:80:8a:86:e4:fd:43:ab:0e:13:6e:12:56:a3:81: 89:fd:45:61:16:4a:f7:b0:41:49:75:16:8a:73:b8:ec:89:95: a1:21:3b:79:55:8a:81:87:4e:4a:24:59:d3:7c:73:77:9b:54: 2d:33:76:9c:d4:18:14:48:ac:5f:81:fc:85:c8:99:1f:cb:2b: bc:0a:35:b8:4a:4f:c1:17:fc:5d:52:d2:4e:90:20:3a:25:5a: cc:e8:2d:95:82:c3:5a:ca:8b:3e:e6:d1:03:37:b2:5b:91:6c: 3e:9b:1d:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnacSACsf9vdD1GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGU2ZDYyOGYtYTc3MS00NGY2LWI1N2UtNzAzNTQwYzJkY2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3vs0yB6XaSoyWiiEw+Cxd5/bgp6SFKvsISn lAzg0OuvuFqy4XCz6Kln1ZQPh85U+PlC69JjsbCEjLo558N+oxpFixTZneDtWNNr Dx8fUd7ppDskSXbwbel02lxEwa+ykQd43KEADoh38ARsVd1wX2YRw7is9DL9kCZI 8hCo3NQYJF/PmFvgTXVNd3am2MHQEHbo+emeGmOU2OLHRQaNlKVcaigcGGMnT1D8 Ay3K9d1eh0crEWkih6W+/IsteO7xAMm/7nHiTu4IQlnGl/dzzF2vijtCM4cRBpPN BDg+pu2eCi63epV+MBKH+N5HN7FJiw3xUIcoB66U8aC8e+VkBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLK1lX9hL91+Ow8ejFuoScwiyeHNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGNmY2Y5NTAtMTJhMS0z NzU3LWJjNzAtMzc5NzBhMWY1NDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ62KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1ifZDZh/C0fMyzuEkIMaWZFjpGz2HC34PvdUoEw/8kSB08rl/K3mBn JT9dPj/251xTg0uijderswJXrwkyvGhROdBULa3d3WdHSskr4aI2nazYTRHYULGw 36OuKWUsti02NaftcGKdobUH0Ln0/sQjC+uxvUXqlDN/5dwhDM61Tu0jVTVSYH5R njEHaFFcAScaGryAiobk/UOrDhNuElajgYn9RWEWSvewQUl1FopzuOyJlaEhO3lV ioGHTkokWdN8c3ebVC0zdpzUGBRIrF+B/IXImR/LK7wKNbhKT8EX/F1S0k6QIDol WszoLZWCw1rKiz7m0QM3sluRbD6bHcQ= -----END CERTIFICATE-----Generated at Sat Sep 5 13:29:42 2026 by rpki-client