$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4485d223-ca1f-320e-af91-a16438414558.roa File: 4485d223-ca1f-320e-af91-a16438414558.roa (raw, json) Hash identifier: y7oUlGlpGJrrqUpE3lDGrnsXw9X14DctvmrApCR6hLk= Subject key identifier: 10:3F:2B:37:70:B6:34:A3:F6:2E:DA:12:E5:1A:1A:83:62:72:DB:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA795706CF4C75DE1FB69B720 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4485d223-ca1f-320e-af91-a16438414558.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7922 IP address blocks: 67.174.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:70:6c:f4:c7:5d:e1:fb:69:b7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3a9a18e4-ee2a-4aca-b85e-e4c711b0eee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:b4:44:cf:e0:0e:eb:b6:b0:93:f4:0d:ba: 9a:d8:52:31:7a:de:67:f2:62:1f:b5:4b:88:dc:11: d3:dc:22:e2:cf:66:1c:f3:b8:bd:7f:56:ba:97:49: fc:81:60:60:38:1b:b4:23:7f:f3:a3:b9:ce:2b:a0: 9a:11:80:b6:f4:80:6a:b6:84:b4:09:5d:50:d7:60: 2c:06:dc:89:fb:1f:2b:51:0a:0f:a3:09:3f:40:bd: ec:09:b8:0e:6d:95:c2:f1:e3:1f:75:76:d9:5e:ad: a0:77:26:20:85:c6:4d:da:23:ec:d4:56:95:c1:03: b0:19:4f:06:d6:5f:54:d2:a5:ea:d1:42:5e:45:2f: 56:33:99:e3:0c:33:93:93:09:4c:c4:44:c4:28:f9: bd:86:47:97:f9:8e:24:68:f3:09:a0:46:55:01:27: ef:d5:94:4d:96:dc:fa:b4:ca:1c:56:8e:14:f7:4a: a1:b9:5e:6f:01:b6:bc:cc:01:62:e6:e1:45:c8:83: 7e:6b:7f:2e:18:2d:46:fb:6f:b5:16:2d:71:64:19: 45:ff:a2:00:6f:8f:1c:70:46:67:ca:1e:0a:66:40: 1c:52:d9:30:c0:fe:bb:69:40:b1:e7:dd:70:db:4b: 32:3b:66:5a:6c:59:09:bf:36:3b:59:b8:dd:c7:f4: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:2B:37:70:B6:34:A3:F6:2E:DA:12:E5:1A:1A:83:62:72:DB:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4485d223-ca1f-320e-af91-a16438414558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.174.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:de:d0:a4:75:f8:31:f8:a7:d6:e3:d9:81:56:56:5b:e8:97: 2c:fe:8d:96:43:74:57:2b:a6:59:94:fb:d3:67:63:da:60:33: 1c:0d:9b:1a:b1:a6:d7:27:22:9e:bd:a0:24:3c:65:0d:4b:06: 9a:9d:80:5d:b6:1c:f6:29:24:5d:3d:9b:cf:51:aa:cc:34:53: a3:80:88:a9:cb:cc:71:97:4f:61:af:71:67:91:49:89:c6:8c: e4:a3:85:b4:5d:c8:fb:2d:7b:de:7d:a1:42:24:de:f7:3c:38: de:91:94:d5:24:18:92:c8:d3:7a:aa:00:d4:f5:3d:53:dd:7f: ca:fa:90:9e:0d:fa:2a:a5:c8:d0:1c:68:c4:01:3b:cb:ce:02: 59:50:7a:90:20:b3:1b:3e:e7:50:7e:ae:db:f7:18:2b:21:56: 6c:16:2e:e1:0c:7e:37:66:bc:e1:eb:9f:8b:cf:df:b0:b2:a6: 59:36:09:91:32:83:fb:6d:f1:4f:93:aa:90:c1:79:68:b5:f9: c0:91:57:9d:8a:66:f1:13:89:2b:40:51:80:e8:bc:41:d1:6f: 1b:c7:7c:55:69:df:0f:39:39:e5:a8:f9:8c:c9:6d:73:20:af: 68:fa:95:85:56:ac:9c:ea:88:9d:0d:7e:5e:56:db:a6:03:7c: b6:de:54:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlXBs9Mdd4ftptyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2E5YTE4ZTQtZWUyYS00YWNhLWI4NWUtZTRjNzExYjBlZWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovC0RM/gDuu2sJP0Dbqa2FIxet5n8mIftUuI 3BHT3CLiz2Yc87i9f1a6l0n8gWBgOBu0I3/zo7nOK6CaEYC29IBqtoS0CV1Q12As BtyJ+x8rUQoPowk/QL3sCbgObZXC8eMfdXbZXq2gdyYghcZN2iPs1FaVwQOwGU8G 1l9U0qXq0UJeRS9WM5njDDOTkwlMxETEKPm9hkeX+Y4kaPMJoEZVASfv1ZRNltz6 tMocVo4U90qhuV5vAba8zAFi5uFFyIN+a38uGC1G+2+1Fi1xZBlF/6IAb48ccEZn yh4KZkAcUtkwwP67aUCx591w20syO2ZabFkJvzY7Wbjdx/T2ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA/KzdwtjSj9i7aEuUaGoNictsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDQ4NWQyMjMtY2ExZi0z MjBlLWFmOTEtYTE2NDM4NDE0NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ66IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMXe0KR1+DH4p9bj2YFWVlvolyz+jZZDdFcrplmU+9NnY9pgMxwNmxqx ptcnIp69oCQ8ZQ1LBpqdgF22HPYpJF09m89Rqsw0U6OAiKnLzHGXT2GvcWeRSYnG jOSjhbRdyPste959oUIk3vc8ON6RlNUkGJLI03qqANT1PVPdf8r6kJ4N+iqlyNAc aMQBO8vOAllQepAgsxs+51B+rtv3GCshVmwWLuEMfjdmvOHrn4vP37Cyplk2CZEy g/tt8U+TqpDBeWi1+cCRV52KZvETiStAUYDovEHRbxvHfFVp3w85OeWo+YzJbXMg r2j6lYVWrJzqiJ0Nfl5W26YDfLbeVGc= -----END CERTIFICATE-----Generated at Mon Aug 24 22:16:42 2026 by rpki-client