$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43de3c28-b80f-30c1-bd64-78347df7f7f3.roa File: 43de3c28-b80f-30c1-bd64-78347df7f7f3.roa (raw, json) Hash identifier: BRtwv2gEofzJy+ccDe0vVuei94bfQZneAVz7qCGVGRM= Subject key identifier: 38:8F:0A:02:EE:77:90:07:E4:AD:A1:39:87:DB:06:7A:94:D3:7B:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED86221E8304DB7E40AB3C900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43de3c28-b80f-30c1-bd64-78347df7f7f3.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7015 IP address blocks: 174.169.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:21:e8:30:4d:b7:e4:0a:b3:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=9c9ec0df-41c1-4a7d-89fb-1cdb408fcd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:b3:a1:98:63:47:cf:18:2b:71:23:62:32: 2b:68:6b:e7:cc:f9:86:9a:a4:16:bb:07:34:ae:6c: 1d:da:8e:e9:96:40:83:fe:b5:b2:5c:23:06:a5:d4: 74:cd:4a:46:15:4e:e2:ed:64:93:a9:fa:e8:f8:82: b7:7e:d5:46:10:7a:58:29:45:ab:a5:59:96:d8:60: c3:5f:9c:ad:f1:0d:dd:cd:11:17:09:0f:38:22:39: 56:cb:3c:b4:8b:7e:54:ee:ce:b6:db:17:8a:5b:c5: 74:ec:da:ef:f3:21:54:62:ae:44:ff:f4:56:7a:e0: 1c:50:1f:b6:91:76:65:f4:43:52:cb:1e:2e:9c:b8: be:a8:5b:1a:14:ad:17:a3:82:f2:00:27:a4:73:23: c1:7e:a1:98:ed:65:54:1f:c1:89:e7:11:a2:a7:18: cb:3f:3c:b2:f6:89:13:24:db:cc:f7:8e:ea:3e:e3: 6f:61:17:a5:ca:3c:08:c0:c1:11:22:3b:27:b6:67: 4a:41:5a:5f:91:3a:79:84:08:84:59:1c:8a:e4:ac: 3c:f7:4e:01:aa:65:ad:25:1f:c2:c2:bb:1e:ac:92: e2:76:14:0b:b8:47:c2:99:56:c8:66:5a:f8:e0:19: 3e:10:74:71:3a:bd:08:1d:e6:be:b4:24:bb:ab:1e: 04:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8F:0A:02:EE:77:90:07:E4:AD:A1:39:87:DB:06:7A:94:D3:7B:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43de3c28-b80f-30c1-bd64-78347df7f7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.169.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:f0:e9:a5:0d:c6:29:c6:ad:ef:4d:b6:e5:0d:1f:2b:b8:b9: 70:f1:69:83:5e:35:86:3e:2c:f9:9c:b6:ec:97:ed:f6:85:28: ce:c2:56:2d:0b:0c:a7:f3:9d:5b:ad:13:9b:92:30:30:36:f1: 3d:8a:9e:83:4c:5a:52:a9:1a:4f:96:f0:81:81:54:75:11:08: 2f:9f:1d:a4:4e:e0:75:fc:e6:cd:95:85:51:44:43:18:73:04: 96:bd:0d:1f:02:a2:ed:76:8c:47:e0:e5:8f:6f:9b:3e:04:a0: 1e:cf:fe:b4:76:14:24:98:6b:c0:a5:8e:20:a2:12:ef:84:fc: ea:08:41:c1:36:d1:d9:9b:4d:d8:d7:c4:ce:b6:df:54:94:ec: 04:1b:39:83:8a:ae:13:58:d7:1b:75:14:86:d9:03:f1:62:f4: fa:70:81:e5:5c:01:ab:8d:cd:88:44:75:8c:4b:6f:4e:f8:e9: e1:65:65:d7:3f:da:27:46:b6:52:fb:d0:c8:fc:21:8f:9b:af: 4b:7a:dd:3d:e7:34:f8:2e:93:96:85:03:26:d0:51:f1:47:cf: bb:b4:e7:53:2d:72:30:3c:69:cf:0d:28:d8:e3:6e:a6:f2:4c: 86:7e:9c:86:6f:53:44:24:29:06:92:8a:3f:89:02:34:14:98: 24:ea:2a:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYiHoME235AqzyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk OWM5ZWMwZGYtNDFjMS00YTdkLTg5ZmItMWNkYjQwOGZjZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsSzoZhjR88YK3EjYjIraGvnzPmGmqQWuwc0 rmwd2o7plkCD/rWyXCMGpdR0zUpGFU7i7WSTqfro+IK3ftVGEHpYKUWrpVmW2GDD X5yt8Q3dzREXCQ84IjlWyzy0i35U7s622xeKW8V07Nrv8yFUYq5E//RWeuAcUB+2 kXZl9ENSyx4unLi+qFsaFK0Xo4LyACekcyPBfqGY7WVUH8GJ5xGipxjLPzyy9okT JNvM947qPuNvYRelyjwIwMERIjsntmdKQVpfkTp5hAiEWRyK5Kw8904BqmWtJR/C wrserJLidhQLuEfCmVbIZlr44Bk+EHRxOr0IHea+tCS7qx4EPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiPCgLud5AH5K2hOYfbBnqU03sKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNkZTNjMjgtYjgwZi0z MGMxLWJkNjQtNzgzNDdkZjdmN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfw6aUNxinGre9NtuUNHyu4uXDxaYNeNYY+LPmctuyX7faFKM7CVi0L DKfznVutE5uSMDA28T2KnoNMWlKpGk+W8IGBVHURCC+fHaRO4HX85s2VhVFEQxhz BJa9DR8Cou12jEfg5Y9vmz4EoB7P/rR2FCSYa8CljiCiEu+E/OoIQcE20dmbTdjX xM6231SU7AQbOYOKrhNY1xt1FIbZA/Fi9PpwgeVcAauNzYhEdYxLb0746eFlZdc/ 2idGtlL70Mj8IY+br0t63T3nNPguk5aFAybQUfFHz7u051MtcjA8ac8NKNjjbqby TIZ+nIZvU0QkKQaSij+JAjQUmCTqKiE= -----END CERTIFICATE-----Generated at Mon Sep 14 17:39:14 2026 by rpki-client