$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3325c872-dd06-3cc6-9e9b-8615dd26f107.roa File: 3325c872-dd06-3cc6-9e9b-8615dd26f107.roa (raw, json) Hash identifier: lK3EUFygZM1OFk+AdDxAITg+kFwWKbZFw9hPdiTgaz8= Subject key identifier: 11:E4:72:36:40:74:3A:A2:C6:55:5E:58:27:9A:1C:64:F4:28:A1:2C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED861F13D0F0EDB97391F5D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3325c872-dd06-3cc6-9e9b-8615dd26f107.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 174.174.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:f1:3d:0f:0e:db:97:39:1f:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=1a4b8ae1-a6a2-4765-817a-35205764ccd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:ee:ca:27:55:cb:ad:42:66:19:59:ce:bb: be:3c:d2:6e:37:a1:9a:f1:71:3e:a5:cc:46:73:36: ad:98:49:1f:b0:ca:5a:fb:6b:0d:b6:12:ae:76:38: 82:6b:5e:9a:e2:7c:f0:c0:c4:75:0b:99:38:00:88: 26:57:27:05:93:a6:63:a4:9a:72:d8:db:f1:12:d2: 71:89:df:72:45:88:87:20:93:4f:8e:29:d7:47:38: 7e:8c:3f:71:b3:2e:27:0d:4d:54:41:bb:18:a5:62: 65:e6:b5:31:31:c3:84:05:60:1c:89:d5:52:68:2c: 50:1f:2f:9d:09:55:6c:39:9a:6b:ab:0c:63:c2:26: 8e:25:dc:8d:63:45:7b:dc:be:09:84:86:80:41:e3: b0:d2:a6:7d:b2:29:c0:01:36:b1:75:7f:08:df:c5: c7:d3:b8:53:04:2e:34:59:f7:a2:ce:7f:5d:32:f1: e7:d7:4b:42:0f:c7:15:17:c3:2d:b5:1a:f9:fc:9d: f2:99:9e:f8:09:bc:cd:95:8f:c6:c6:35:82:85:6f: 14:a4:3f:13:0d:dd:11:0c:4e:ec:41:e4:9d:15:d0: 34:78:fd:23:88:e2:49:af:65:38:f6:25:61:3e:fe: 4e:bf:79:bf:fa:84:cb:a1:b2:5e:d9:9b:5f:46:26: 38:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E4:72:36:40:74:3A:A2:C6:55:5E:58:27:9A:1C:64:F4:28:A1:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3325c872-dd06-3cc6-9e9b-8615dd26f107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.174.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:16:38:17:e4:b8:e4:c1:d3:ea:e9:ad:21:08:34:3e:74:c9: 6d:e4:66:d2:4e:81:27:b7:40:2e:71:95:90:49:12:c6:4c:63: 66:0f:b9:a5:4b:c3:0f:d0:6b:f7:59:5b:54:c8:0e:49:b9:e1: 98:d0:a8:83:81:61:50:59:f9:1a:56:de:a6:0d:be:15:55:6e: 44:30:a4:87:28:36:f4:ad:19:01:03:5d:7f:d1:b3:1a:21:52: ef:d2:0d:38:91:7e:03:4b:65:0f:b0:c0:21:9d:d3:10:f7:23: be:59:95:f4:87:cb:67:fa:47:07:f9:8c:23:9a:19:df:e5:a7: 9b:8c:d1:32:8d:a4:49:3a:04:2a:b4:ee:57:9a:1c:7b:12:27: 82:bb:5a:cf:78:76:80:da:16:9b:52:2f:9b:b6:67:8b:7d:fa: a6:09:2b:58:88:c8:ec:b1:e4:c6:e3:8d:bb:39:67:80:96:94: e6:f2:d6:05:eb:8c:c6:eb:d5:37:a3:ff:80:f2:0d:af:50:65: bc:9e:ec:4a:6d:60:71:a3:0a:78:03:ce:63:fe:f5:87:a8:56: 5a:d5:69:4c:6a:fd:c4:05:32:45:01:84:c5:2a:a5:5d:17:b9: 28:e1:95:06:a9:81:7e:34:fa:c2:87:d6:8a:c0:36:74:6a:03: dd:92:12:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYfE9Dw7blzkfXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MWE0YjhhZTEtYTZhMi00NzY1LTgxN2EtMzUyMDU3NjRjY2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmTuyidVy61CZhlZzru+PNJuN6Ga8XE+pcxG czatmEkfsMpa+2sNthKudjiCa16a4nzwwMR1C5k4AIgmVycFk6ZjpJpy2NvxEtJx id9yRYiHIJNPjinXRzh+jD9xsy4nDU1UQbsYpWJl5rUxMcOEBWAcidVSaCxQHy+d CVVsOZprqwxjwiaOJdyNY0V73L4JhIaAQeOw0qZ9sinAATaxdX8I38XH07hTBC40 Wfeizn9dMvHn10tCD8cVF8MttRr5/J3ymZ74CbzNlY/GxjWChW8UpD8TDd0RDE7s QeSdFdA0eP0jiOJJr2U49iVhPv5Ov3m/+oTLobJe2ZtfRiY4/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHkcjZAdDqixlVeWCeaHGT0KKEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzMyNWM4NzItZGQwNi0z Y2M2LTllOWItODYxNWRkMjZmMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrq5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEWOBfkuOTB0+rprSEIND50yW3kZtJOgSe3QC5xlZBJEsZMY2YPuaVL ww/Qa/dZW1TIDkm54ZjQqIOBYVBZ+RpW3qYNvhVVbkQwpIcoNvStGQEDXX/Rsxoh Uu/SDTiRfgNLZQ+wwCGd0xD3I75ZlfSHy2f6Rwf5jCOaGd/lp5uM0TKNpEk6BCq0 7leaHHsSJ4K7Ws94doDaFptSL5u2Z4t9+qYJK1iIyOyx5Mbjjbs5Z4CWlOby1gXr jMbr1Tej/4DyDa9QZbye7EptYHGjCngDzmP+9YeoVlrVaUxq/cQFMkUBhMUqpV0X uSjhlQapgX40+sKH1orANnRqA92SEgI= -----END CERTIFICATE-----Generated at Sat Sep 5 08:50:37 2026 by rpki-client