$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b0e68a0-a987-3e0a-856d-9c6fa6f0963d.roa File: 5b0e68a0-a987-3e0a-856d-9c6fa6f0963d.roa (raw, json) Hash identifier: i2zl0aqqEcNMykmU8beu3Bu3HwGw49S73AyXvkzKqUE= Subject key identifier: 99:88:C8:D4:C6:7A:31:4B:A7:80:F6:B8:EE:BC:7A:61:B7:72:93:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F03A7DD296FF3E09F34BD0680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b0e68a0-a987-3e0a-856d-9c6fa6f0963d.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 7015 IP address blocks: 174.168.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:dd:29:6f:f3:e0:9f:34:bd:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=cbfb84f5-1fd0-4617-8706-3725c1440dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cf:f8:e1:8a:64:86:fc:f9:13:1e:68:90:fa: 14:c5:cf:79:a1:fd:b3:00:5b:53:24:b0:19:1c:4e: 65:40:de:ff:cd:51:85:33:a4:22:55:80:16:33:28: 17:ee:ab:5c:d5:b4:f5:33:0c:37:e6:85:c9:06:42: 1b:86:79:ec:fc:11:d6:83:55:07:2f:4d:5d:36:c4: 12:56:cf:c7:55:80:7a:79:ba:d3:fd:ba:22:b8:51: a5:0c:15:33:d8:7e:bb:ac:14:41:a8:9d:31:eb:a8: a2:6f:54:45:3b:84:9b:be:43:7d:a8:ea:3d:6a:45: 6a:4d:f4:c4:33:68:5c:a5:a5:e6:e5:ac:ff:dc:a9: 48:41:84:d9:71:11:1f:b7:02:90:3c:41:8b:ee:15: f6:20:96:3f:d0:4f:2b:b4:6f:f8:32:22:b6:57:f1: 56:fa:74:2e:97:94:81:3d:c9:ec:82:10:b3:82:c8: 6a:69:4f:7b:b4:2d:db:6c:be:c1:be:9f:e5:d0:30: d4:0a:0b:4c:30:54:6f:7b:6f:7a:9d:ea:4f:d0:b1: 4b:1f:1e:35:89:62:8a:9d:5b:c1:aa:01:09:52:00: 74:5c:04:73:bd:df:fe:5e:00:00:50:69:c3:2d:8b: d5:da:18:65:4c:66:a1:7c:94:6b:35:18:7a:73:46: 73:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:88:C8:D4:C6:7A:31:4B:A7:80:F6:B8:EE:BC:7A:61:B7:72:93:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b0e68a0-a987-3e0a-856d-9c6fa6f0963d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.168.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:25:03:3c:58:25:44:4e:81:f0:db:c0:63:b5:13:77:d5:e9: 6e:2c:ba:38:d0:8e:41:fa:98:ea:39:c1:5a:2a:5c:81:14:ec: e3:0e:3e:c7:db:58:a9:85:d1:0a:fe:77:d6:0d:bd:14:8c:36: 2e:62:ff:55:5c:d7:ec:44:50:e0:58:60:b9:e7:2b:5f:55:1f: 4a:40:64:f5:44:c6:33:2d:14:58:13:d2:21:32:62:5c:8d:e8: 74:41:07:c8:23:34:88:6e:a2:78:67:ad:50:13:1b:8e:96:f2: 19:75:8f:c5:62:7b:34:a3:0b:59:09:22:ec:e8:8f:d2:c8:a2: 95:a1:26:ed:f7:ee:12:47:78:29:43:42:a2:da:5f:67:45:a3: 03:4e:2d:bc:6f:a2:92:65:e8:40:7e:02:7e:5a:be:66:f8:e5: 93:65:cc:45:f8:5c:64:83:1f:e9:bb:56:2d:51:f3:a6:34:b7: 90:ce:14:91:a4:e4:74:0e:26:9c:af:ad:e1:45:e8:67:f2:5e: 94:8d:a3:91:0c:65:5b:d8:03:5f:f7:8e:3c:5b:c6:aa:7e:a9: f8:5b:8c:c1:d1:ce:09:39:42:ff:96:d5:56:8c:73:ad:35:11: 64:8c:b2:55:65:03:27:08:69:75:fe:98:bf:5d:1b:41:34:bd: 55:33:e4:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp90pb/PgnzS9BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk Y2JmYjg0ZjUtMWZkMC00NjE3LTg3MDYtMzcyNWMxNDQwZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic/44Ypkhvz5Ex5okPoUxc95of2zAFtTJLAZ HE5lQN7/zVGFM6QiVYAWMygX7qtc1bT1Mww35oXJBkIbhnns/BHWg1UHL01dNsQS Vs/HVYB6ebrT/boiuFGlDBUz2H67rBRBqJ0x66iib1RFO4SbvkN9qOo9akVqTfTE M2hcpaXm5az/3KlIQYTZcREftwKQPEGL7hX2IJY/0E8rtG/4MiK2V/FW+nQul5SB PcnsghCzgshqaU97tC3bbL7Bvp/l0DDUCgtMMFRve296nepP0LFLHx41iWKKnVvB qgEJUgB0XARzvd/+XgAAUGnDLYvV2hhlTGahfJRrNRh6c0ZzpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmIyNTGejFLp4D2uO68emG3cpMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWIwZTY4YTAtYTk4Ny0z ZTBhLTg1NmQtOWM2ZmE2ZjA5NjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIlAzxYJUROgfDbwGO1E3fV6W4sujjQjkH6mOo5wVoqXIEU7OMOPsfb WKmF0Qr+d9YNvRSMNi5i/1Vc1+xEUOBYYLnnK19VH0pAZPVExjMtFFgT0iEyYlyN 6HRBB8gjNIhuonhnrVATG46W8hl1j8ViezSjC1kJIuzoj9LIopWhJu337hJHeClD QqLaX2dFowNOLbxvopJl6EB+An5avmb45ZNlzEX4XGSDH+m7Vi1R86Y0t5DOFJGk 5HQOJpyvreFF6GfyXpSNo5EMZVvYA1/3jjxbxqp+qfhbjMHRzgk5Qv+W1VaMc601 EWSMslVlAycIaXX+mL9dG0E0vVUz5DI= -----END CERTIFICATE-----Generated at Mon Sep 14 22:05:04 2026 by rpki-client