$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f257e2-6423-3442-9857-a4c23f84fc11.roa File: 72f257e2-6423-3442-9857-a4c23f84fc11.roa (raw, json) Hash identifier: X8w1f7HKMnuKXQk1z3NhRU0PYqesCZFTAVhrLPIU1/8= Subject key identifier: 86:A8:BA:C9:8D:A4:87:04:F1:93:7D:71:40:95:2B:50:68:73:45:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E957D6E910317519C3200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f257e2-6423-3442-9857-a4c23f84fc11.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 174.170.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:95:7d:6e:91:03:17:51:9c:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=6ef7f4f0-b7d4-432f-9527-6a3e5bc84548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9b:81:82:c3:dd:0c:f4:48:fd:61:fd:af:ce: 0f:e9:d1:fa:f7:97:aa:31:a8:e1:e8:9d:4e:95:4e: e2:33:ce:d0:43:00:d9:55:5a:5a:8a:d9:e4:7e:11: 3a:88:63:74:8a:ed:81:46:0d:c5:08:ac:39:d6:bb: 1e:8a:ca:7b:ed:0b:92:75:fe:d4:c3:0a:63:50:b8: 21:df:4e:da:05:ec:cc:54:00:59:89:03:a9:37:2d: 43:58:e2:cf:14:ee:8f:cc:e7:68:4a:0c:16:e3:5d: 6e:e3:ca:fe:11:2e:8b:30:3e:05:63:9a:57:6f:92: 07:52:e1:de:0c:bc:db:41:36:e3:86:15:21:5a:d5: 80:27:9b:33:f8:d9:97:cb:ed:70:81:37:1d:18:8b: f8:20:8a:6a:18:c8:9c:d3:28:96:17:31:98:25:e2: 97:e6:b5:61:5b:dc:62:c9:9d:3f:24:9d:22:db:fd: 25:df:7c:93:da:36:58:57:4f:58:33:e8:d3:a4:31: e1:e3:c7:78:43:fb:51:07:a5:92:34:d4:5e:9d:2c: a7:3c:a0:8a:17:a4:53:c6:6d:43:4e:46:29:bb:b3: dd:ae:09:f8:6c:f1:0c:b1:07:04:f6:b9:d6:6a:0d: bd:c1:ca:dc:34:a8:13:1e:07:8a:00:81:55:48:fd: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A8:BA:C9:8D:A4:87:04:F1:93:7D:71:40:95:2B:50:68:73:45:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f257e2-6423-3442-9857-a4c23f84fc11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:85:09:dd:1a:6f:16:08:94:7f:81:47:22:e8:9a:1f:16:91: 9f:03:a3:87:cc:cd:24:6c:f6:58:45:79:da:0b:90:ba:5f:fb: 1e:3f:0a:ab:68:b2:2a:05:b0:08:63:be:a5:12:78:25:ab:ed: eb:b4:00:55:67:1c:c7:83:72:83:45:ef:e8:c2:1b:aa:23:1b: e5:af:48:4d:79:49:c4:d5:91:09:ac:d2:6c:85:04:e0:cd:f4: 03:40:59:95:dd:65:8d:17:b4:40:84:6e:0b:20:a5:f5:60:d6: 57:89:ad:5a:a1:a4:6b:77:e7:05:72:7d:4d:8e:15:7b:64:b5: 89:1f:51:e8:19:db:a9:0b:37:d4:24:b0:60:b3:16:ed:98:46: 99:b0:9b:49:02:6f:81:59:fa:ef:1d:0c:f8:3a:ea:9b:aa:68: ed:52:ca:3e:f9:8d:ec:3d:69:9c:b7:6f:b1:df:da:13:43:01: bb:33:aa:fa:38:c5:29:01:8a:52:3b:ae:4d:9d:3b:c9:e3:a9: da:8a:14:2a:a0:82:7a:88:c5:02:c3:e3:48:06:8c:5f:76:0f: aa:a0:c5:1d:af:e3:cd:7a:1a:05:af:44:2d:f5:bf:6b:f6:05: ca:80:a1:c6:6d:6f:fc:34:77:bc:2b:a2:6a:f3:6d:25:97:4b: 5e:b7:e6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TpV9bpEDF1GcMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NmVmN2Y0ZjAtYjdkNC00MzJmLTk1MjctNmEzZTViYzg0NTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15uBgsPdDPRI/WH9r84P6dH695eqMajh6J1O lU7iM87QQwDZVVpaitnkfhE6iGN0iu2BRg3FCKw51rseisp77QuSdf7UwwpjULgh 307aBezMVABZiQOpNy1DWOLPFO6PzOdoSgwW411u48r+ES6LMD4FY5pXb5IHUuHe DLzbQTbjhhUhWtWAJ5sz+NmXy+1wgTcdGIv4IIpqGMic0yiWFzGYJeKX5rVhW9xi yZ0/JJ0i2/0l33yT2jZYV09YM+jTpDHh48d4Q/tRB6WSNNRenSynPKCKF6RTxm1D TkYpu7Pdrgn4bPEMsQcE9rnWag29wcrcNKgTHgeKAIFVSP2aBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaousmNpIcE8ZN9cUCVK1Boc0WAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzJmMjU3ZTItNjQyMy0z NDQyLTk4NTctYTRjMjNmODRmYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByFCd0abxYIlH+BRyLomh8WkZ8Do4fMzSRs9lhFedoLkLpf+x4/Cqto sioFsAhjvqUSeCWr7eu0AFVnHMeDcoNF7+jCG6ojG+WvSE15ScTVkQms0myFBODN 9ANAWZXdZY0XtECEbgsgpfVg1leJrVqhpGt35wVyfU2OFXtktYkfUegZ26kLN9Qk sGCzFu2YRpmwm0kCb4FZ+u8dDPg66puqaO1Syj75jew9aZy3b7Hf2hNDAbszqvo4 xSkBilI7rk2dO8njqdqKFCqggnqIxQLD40gGjF92D6qgxR2v4816GgWvRC31v2v2 BcqAocZtb/w0d7wromrzbSWXS1635s0= -----END CERTIFICATE-----Generated at Mon Oct 26 11:29:24 2026 by rpki-client