$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e58527c-a49b-31c2-8354-5b423061f4a1.roa File: 4e58527c-a49b-31c2-8354-5b423061f4a1.roa (raw, json) Hash identifier: DNXn0TUxK7EbompPWvgtAY0j7IX503qJnVg1M09bpfw= Subject key identifier: F8:EB:F7:B4:21:DA:D7:2C:7A:AA:44:F2:7B:3A:D5:FE:BF:7F:74:6E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EF71360E394748AB44880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e58527c-a49b-31c2-8354-5b423061f4a1.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 174.182.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:f7:13:60:e3:94:74:8a:b4:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=d69460c8-bbfa-473a-a74f-1d83e0652101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d7:99:cc:dc:e2:d2:6a:76:09:1e:69:80:98: 8d:ad:b6:08:f6:c1:f5:d3:31:2f:b3:cb:63:7c:a4: 52:b8:20:f4:5b:fa:fd:66:fc:3f:8c:a4:84:19:24: 57:c8:4a:82:76:07:af:0f:38:23:52:e1:d8:ea:ca: 5e:a7:29:67:48:8b:9d:cd:6a:ec:e5:37:97:39:26: 73:35:e4:ec:da:4d:68:ef:92:11:fe:40:16:cd:98: 0a:51:4a:81:91:1c:b6:52:94:a2:bc:ac:44:98:35: 31:54:0e:39:c0:f0:e0:9c:80:84:20:3e:9f:30:ec: 27:be:f4:3c:b8:ae:14:62:5a:bf:f7:b4:c2:76:7f: 3c:ea:ea:81:ba:c3:f5:b2:f4:9b:f8:25:03:58:ab: 7d:00:34:94:a1:1a:9d:0e:80:24:a8:63:c0:1d:08: 2a:29:88:44:58:b3:2a:9d:2d:4e:7f:9f:20:f9:79: 19:40:de:d7:e4:7a:cf:e9:c4:c4:14:02:fa:54:bf: d1:6a:9d:06:7e:b3:f9:84:13:2a:f9:33:b3:dc:11: 9b:90:17:5f:90:69:2e:64:c7:4a:a5:3e:90:73:d8: 62:89:3e:36:c9:98:60:6a:61:a3:20:d9:ae:61:95: 18:dd:28:82:2c:89:63:bd:2b:57:f1:b2:e2:d8:37: 3b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EB:F7:B4:21:DA:D7:2C:7A:AA:44:F2:7B:3A:D5:FE:BF:7F:74:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e58527c-a49b-31c2-8354-5b423061f4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.182.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:62:48:56:99:95:57:30:f3:05:44:6a:16:be:86:da:20:c6: 34:45:b0:fe:83:d1:fd:e4:08:94:a1:d8:23:44:97:44:01:ce: 17:22:19:69:4d:c5:ff:63:07:2f:4a:ca:d2:0d:c1:0f:b1:e9: 3d:38:c1:62:0d:29:0e:73:e5:f2:4a:dd:04:be:76:6d:2f:86: b7:ff:75:4b:f0:38:b4:81:e0:a7:7a:53:2a:0c:c8:4e:33:a8: 00:ac:31:a2:92:74:98:e5:12:4c:69:fe:74:e6:29:74:91:a9: 3f:a6:32:9c:7e:a4:cc:08:60:5e:25:80:93:48:9f:c3:bc:48: b3:0b:04:a2:11:1d:b3:16:e9:30:67:43:3c:45:26:c0:91:1c: e8:6a:d8:5a:12:65:88:1e:47:f0:6a:eb:77:4f:ef:1e:a0:00: 7b:d6:73:1d:b3:1a:d3:75:46:66:73:3c:b7:1b:bc:87:59:b6: 3b:d2:8c:3d:90:dc:f6:7d:b5:4a:56:1a:c3:7d:90:9d:90:f9: ae:8a:fd:39:2c:7c:9d:85:54:d8:99:12:fd:4c:2a:04:a5:e6: 39:71:78:9a:78:0a:b6:d8:a7:45:d9:85:13:04:69:a1:2b:05: 68:33:80:11:b5:64:68:b5:3b:da:0c:01:07:81:a4:10:14:12: 08:f0:dc:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnvcTYOOUdIq0SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDY5NDYwYzgtYmJmYS00NzNhLWE3NGYtMWQ4M2UwNjUyMTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdeZzNzi0mp2CR5pgJiNrbYI9sH10zEvs8tj fKRSuCD0W/r9Zvw/jKSEGSRXyEqCdgevDzgjUuHY6spepylnSIudzWrs5TeXOSZz NeTs2k1o75IR/kAWzZgKUUqBkRy2UpSivKxEmDUxVA45wPDgnICEID6fMOwnvvQ8 uK4UYlq/97TCdn886uqBusP1svSb+CUDWKt9ADSUoRqdDoAkqGPAHQgqKYhEWLMq nS1Of58g+XkZQN7X5HrP6cTEFAL6VL/Rap0GfrP5hBMq+TOz3BGbkBdfkGkuZMdK pT6Qc9hiiT42yZhgamGjINmuYZUY3SiCLIljvStX8bLi2Dc7+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjr97Qh2tcseqpE8ns61f6/f3RuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGU1ODUyN2MtYTQ5Yi0z MWMyLTgzNTQtNWI0MjMwNjFmNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrrYOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRiSFaZlVcw8wVEaha+htogxjRFsP6D0f3kCJSh2CNEl0QBzhciGWlN xf9jBy9KytINwQ+x6T04wWINKQ5z5fJK3QS+dm0vhrf/dUvwOLSB4Kd6UyoMyE4z qACsMaKSdJjlEkxp/nTmKXSRqT+mMpx+pMwIYF4lgJNIn8O8SLMLBKIRHbMW6TBn QzxFJsCRHOhq2FoSZYgeR/Bq63dP7x6gAHvWcx2zGtN1RmZzPLcbvIdZtjvSjD2Q 3PZ9tUpWGsN9kJ2Q+a6K/TksfJ2FVNiZEv1MKgSl5jlxeJp4CrbYp0XZhRMEaaEr BWgzgBG1ZGi1O9oMAQeBpBAUEgjw3KE= -----END CERTIFICATE-----Generated at Sat Sep 5 14:26:34 2026 by rpki-client