$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87c8595a-c29b-365d-86a9-ad2d02c53b92.roa File: 87c8595a-c29b-365d-86a9-ad2d02c53b92.roa (raw, json) Hash identifier: IjLLmIYmRRYbPdQZoQtcXEjot/bjktevxd3ewhlWRzY= Subject key identifier: 7A:4D:2F:5A:98:8F:C7:A2:E9:16:0B:45:29:25:82:00:9E:E8:BA:40 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E962EADEC56ED143B1780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87c8595a-c29b-365d-86a9-ad2d02c53b92.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 174.171.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:96:2e:ad:ec:56:ed:14:3b:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=936a1d9c-088c-4a34-b5b9-8e063d21c17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:62:c6:ee:f8:c1:e2:0b:ee:cc:f6:b6:1c:c2: 2b:b5:71:c6:0e:28:51:b2:31:84:79:fe:e7:09:51: 05:2c:5f:6d:6b:55:a1:c0:e2:4f:22:a0:17:a6:c9: 49:22:71:d9:54:d7:32:5e:91:0c:41:38:de:a4:8b: 47:30:77:20:38:59:58:36:4f:cf:62:bc:c5:96:e1: 28:f1:7b:0e:b7:08:b4:1d:20:0f:76:51:d9:e3:29: e6:20:0c:32:e5:fb:7b:a5:84:cd:71:cb:5f:22:ec: bf:21:46:f7:08:c8:79:a9:56:b4:df:fb:9f:27:ea: f4:6a:ab:ac:d2:f9:64:73:0d:dd:12:a4:04:5a:f5: 6c:b8:62:4d:f8:14:f2:89:c0:ad:67:c8:64:e8:11: 51:26:68:73:90:24:3a:df:97:0c:c9:38:86:4f:a2: f6:8e:f9:48:13:be:af:18:f7:da:88:65:b3:81:e3: d7:f1:78:76:d3:ab:78:6d:42:bf:75:9f:84:9c:d0: ad:87:85:da:0c:73:e8:69:6a:d3:6c:7f:38:07:2b: 56:05:5f:20:86:b1:58:ed:25:71:16:30:3e:2f:57: a2:42:fd:8d:4b:4f:ac:3d:71:6c:0c:89:af:49:bf: e5:93:df:0a:84:2d:aa:a9:31:05:1b:6f:a2:4f:a7: cd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4D:2F:5A:98:8F:C7:A2:E9:16:0B:45:29:25:82:00:9E:E8:BA:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87c8595a-c29b-365d-86a9-ad2d02c53b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:fa:20:d1:04:3a:1d:75:0a:80:e3:a1:34:ed:6b:9c:f5:3f: 0f:0b:04:a0:f4:f6:2c:81:78:a1:c9:5d:3e:4c:5a:bb:ae:33: 6f:e1:cb:32:18:10:fc:41:50:56:ef:98:c8:95:d7:4f:e1:f1: ee:5e:79:e2:40:12:42:39:10:8b:f6:e4:54:a3:39:22:1e:ea: 6a:d0:ba:27:dc:fb:4e:7d:84:37:65:93:db:7a:c3:da:fe:9f: 26:7a:db:71:e0:78:12:47:6e:5b:59:56:f2:e9:96:1c:11:77: 4a:f8:1c:8c:d2:22:b5:67:b5:34:c6:ff:92:cf:f5:8a:cf:87: 94:94:2f:e3:53:0e:2e:fa:9c:fa:86:d5:83:1f:a5:5d:27:d2: 8f:c1:d3:90:f8:79:1c:f3:01:64:db:72:b7:6c:48:54:3c:e7: 9b:cd:48:b0:f7:78:eb:7c:6a:c4:61:54:0d:df:05:c0:ba:5a: 3f:06:fa:78:41:25:a7:cd:d3:56:09:47:d0:d5:cd:5b:2f:d0: a6:da:b1:f1:bb:47:25:65:21:16:14:d3:84:77:9a:3b:54:46: 65:5c:f7:f9:e7:ab:13:60:fc:0f:6e:74:bd:81:fe:84:3f:65: ec:5b:0d:27:f9:d6:29:b3:96:8f:6e:25:aa:e6:31:85:4a:87: 52:33:20:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TpYurexW7RQ7F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk OTM2YTFkOWMtMDg4Yy00YTM0LWI1YjktOGUwNjNkMjFjMTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGLG7vjB4gvuzPa2HMIrtXHGDihRsjGEef7n CVEFLF9ta1WhwOJPIqAXpslJInHZVNcyXpEMQTjepItHMHcgOFlYNk/PYrzFluEo 8XsOtwi0HSAPdlHZ4ynmIAwy5ft7pYTNcctfIuy/IUb3CMh5qVa03/ufJ+r0aqus 0vlkcw3dEqQEWvVsuGJN+BTyicCtZ8hk6BFRJmhzkCQ635cMyTiGT6L2jvlIE76v GPfaiGWzgePX8Xh206t4bUK/dZ+EnNCth4XaDHPoaWrTbH84BytWBV8ghrFY7SVx FjA+L1eiQv2NS0+sPXFsDImvSb/lk98KhC2qqTEFG2+iT6fNfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpNL1qYj8ei6RYLRSklggCe6LpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdjODU5NWEtYzI5Yi0z NjVkLTg2YTktYWQyZDAyYzUzYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz6INEEOh11CoDjoTTta5z1Pw8LBKD09iyBeKHJXT5MWruuM2/hyzIY EPxBUFbvmMiV10/h8e5eeeJAEkI5EIv25FSjOSIe6mrQuifc+059hDdlk9t6w9r+ nyZ623HgeBJHbltZVvLplhwRd0r4HIzSIrVntTTG/5LP9YrPh5SUL+NTDi76nPqG 1YMfpV0n0o/B05D4eRzzAWTbcrdsSFQ855vNSLD3eOt8asRhVA3fBcC6Wj8G+nhB JafN01YJR9DVzVsv0KbasfG7RyVlIRYU04R3mjtURmVc9/nnqxNg/A9udL2B/oQ/ ZexbDSf51imzlo9uJarmMYVKh1IzIMY= -----END CERTIFICATE-----Generated at Wed Oct 21 23:22:13 2026 by rpki-client