$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12bd57f7-1970-3650-8b1d-14c8a1e723b6.roa File: 12bd57f7-1970-3650-8b1d-14c8a1e723b6.roa (raw, json) Hash identifier: ZSE/F0pfgmLtsImFHVPqeGfbaDU/xB93MJb1O+HoUEo= Subject key identifier: 02:9E:AD:C6:34:FF:8A:4E:2B:64:6A:AB:F0:89:E6:65:98:20:49:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F06724E245D54368168CF755C Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12bd57f7-1970-3650-8b1d-14c8a1e723b6.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 33668 IP address blocks: 174.174.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:4e:24:5d:54:36:81:68:cf:75:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=e8a7219f-be00-4dd6-b9dc-a61d215ad069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:d8:02:ae:e6:db:48:2b:15:d9:a9:ba:d1: e1:fd:1a:61:6a:17:f9:d5:ed:12:4a:86:55:7e:bf: bb:14:d2:93:d6:71:e5:63:47:15:3d:cb:00:16:0d: 1e:43:0a:14:aa:2e:e8:4f:14:63:7d:59:ba:6f:c8: 92:99:c3:ee:a8:62:e9:60:aa:ab:f2:ed:f5:07:41: e8:f7:46:e5:5f:75:bd:b5:d9:8b:38:8a:b9:fe:62: 77:65:82:37:2d:ef:00:de:a8:08:a0:37:4b:b8:57: f6:de:68:8a:ef:27:7a:91:1d:da:b2:92:b5:7f:18: 2e:5c:d6:9c:1a:92:32:49:ad:27:e6:76:a7:1b:fa: 2f:31:58:d5:75:32:d9:47:d1:59:2d:25:a3:a9:d1: 08:d2:ab:82:7a:4e:2f:4b:78:39:f7:f3:61:06:bf: 1f:f6:e7:f1:b1:a1:55:3f:53:ac:f9:0c:55:ed:10: 6f:cd:8a:b7:97:7d:26:02:a8:10:51:ca:d6:ec:98: 8a:e1:97:25:6b:7f:65:02:ed:13:dc:55:c9:a3:aa: 66:87:40:24:05:de:66:e8:7e:c6:60:81:56:57:3e: 61:b4:ba:dd:88:a7:c4:1b:77:69:bb:11:31:a9:ee: c2:86:a7:66:7e:3c:7a:ac:23:4b:31:b5:7b:a2:8a: 70:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9E:AD:C6:34:FF:8A:4E:2B:64:6A:AB:F0:89:E6:65:98:20:49:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12bd57f7-1970-3650-8b1d-14c8a1e723b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.174.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:8f:34:f0:f7:44:a9:3e:ad:0b:73:d3:a5:47:3b:9c:14:3c: 0e:af:9f:6d:6a:ba:f8:a9:15:cb:b4:81:bb:fc:62:8f:70:bb: 5f:18:51:5e:1b:36:35:54:49:d4:e0:9a:42:a3:47:d2:e7:07: 43:ed:45:55:29:fd:e1:3d:04:22:f0:a9:64:2c:2f:bf:6b:29: 82:65:96:ba:31:a6:95:93:54:27:6b:80:5f:72:e3:e6:5a:9a: 9f:a1:4a:c1:ed:d2:f7:ee:0e:9c:37:72:57:62:51:0c:15:c0: 0b:e1:5d:6d:bb:10:1f:02:82:c2:2e:31:69:0d:7e:c2:87:2a: 6a:6f:4c:05:82:10:6b:e9:b2:1b:d6:d0:4f:38:3c:9e:ec:2f: 65:97:63:75:a0:62:87:c4:6a:f9:2e:75:ec:96:ce:3e:19:0b: 4c:e9:1c:49:a9:03:51:a2:7e:2d:5c:b9:b6:d7:aa:cc:e5:d7: 83:d5:69:c6:3f:a6:3e:b3:d3:17:de:db:6a:66:3c:7f:fe:1a: 81:7b:1c:87:2d:39:ff:6d:a5:04:d6:5e:6d:02:fe:e0:aa:76: a0:da:9c:20:97:dd:85:c9:33:8a:dc:b2:28:22:24:7c:65:74: 9f:8e:f9:3a:a9:01:9a:a8:d0:2c:f5:0a:c9:52:cf:9e:0d:58: 80:d2:f4:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gck4kXVQ2gWjPdVwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZThhNzIxOWYtYmUwMC00ZGQ2LWI5ZGMtYTYxZDIxNWFkMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RHYAq7m20grFdmputHh/Rphahf51e0SSoZV fr+7FNKT1nHlY0cVPcsAFg0eQwoUqi7oTxRjfVm6b8iSmcPuqGLpYKqr8u31B0Ho 90blX3W9tdmLOIq5/mJ3ZYI3Le8A3qgIoDdLuFf23miK7yd6kR3aspK1fxguXNac GpIySa0n5nanG/ovMVjVdTLZR9FZLSWjqdEI0quCek4vS3g59/NhBr8f9ufxsaFV P1Os+QxV7RBvzYq3l30mAqgQUcrW7JiK4Zcla39lAu0T3FXJo6pmh0AkBd5m6H7G YIFWVz5htLrdiKfEG3dpuxExqe7Chqdmfjx6rCNLMbV7oopwywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKercY0/4pOK2Rqq/CJ5mWYIEnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTJiZDU3ZjctMTk3MC0z NjUwLThiMWQtMTRjOGExZTcyM2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrq6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMmPNPD3RKk+rQtz06VHO5wUPA6vn21quvipFcu0gbv8Yo9wu18YUV4b NjVUSdTgmkKjR9LnB0PtRVUp/eE9BCLwqWQsL79rKYJllroxppWTVCdrgF9y4+Za mp+hSsHt0vfuDpw3cldiUQwVwAvhXW27EB8CgsIuMWkNfsKHKmpvTAWCEGvpshvW 0E84PJ7sL2WXY3WgYofEavkudeyWzj4ZC0zpHEmpA1Gifi1cubbXqszl14PVacY/ pj6z0xfe22pmPH/+GoF7HIctOf9tpQTWXm0C/uCqdqDanCCX3YXJM4rcsigiJHxl dJ+O+TqpAZqo0Cz1CslSz54NWIDS9FY= -----END CERTIFICATE-----Generated at Fri Sep 4 22:26:55 2026 by rpki-client