$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cf7838b-9685-3c78-aae8-a333272e880f.roa File: 9cf7838b-9685-3c78-aae8-a333272e880f.roa (raw, json) Hash identifier: 0TVLas9jT9gpqQrmBkoytFszhQ2LwFZ3fMcdh4lFf6I= Subject key identifier: 49:E2:20:38:68:EF:EA:69:90:C0:91:F2:E7:36:EE:2F:4E:27:DE:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4DA062D3E3FE001CDD46E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cf7838b-9685-3c78-aae8-a333272e880f.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 174.174.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:a0:62:d3:e3:fe:00:1c:dd:46:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=7b1b4631-f043-4b56-98c0-fe8b6b1026c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:dd:7f:ba:39:b8:f9:cf:f7:26:87:67:3e: f3:92:cb:7b:92:33:8a:b4:4e:5c:4a:46:ef:ff:c2: e6:ba:7e:44:19:95:c4:da:66:03:41:93:6f:67:d0: 63:9f:db:99:fa:97:25:fc:2b:ee:2a:58:f9:72:d6: 34:eb:a0:05:4a:6a:9b:1d:75:ee:9b:8c:90:92:b5: 09:a6:37:7f:22:ab:4f:69:cb:38:a5:4a:0b:7b:91: b6:2d:a2:0b:3a:be:d6:44:9e:82:c3:51:a6:8e:72: 03:01:ef:0e:fc:b9:50:8f:6b:0a:03:f3:be:42:26: ef:2d:96:21:31:be:8c:d9:78:6b:97:51:74:38:7b: a5:f3:78:d3:f6:15:29:23:98:30:8a:17:e3:97:e4: ac:cb:e2:ac:85:cc:ec:8c:f5:18:9c:6f:da:12:04: 2e:bc:8a:22:fb:a7:4d:f0:c4:82:35:ce:b8:16:16: 6e:9b:c7:90:d5:f5:8b:9c:43:5e:bf:28:f5:0f:d5: 9f:c1:50:9d:07:f7:fd:07:3b:bd:44:91:78:03:48: 84:f6:c1:e4:c3:6b:bd:58:34:af:2d:bc:2c:5f:8e: ef:5b:55:67:9e:d4:d7:0a:59:e8:07:09:a8:ba:cd: 4e:01:ab:ec:38:bf:e5:f4:7c:ad:0d:73:bf:55:35: 6d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E2:20:38:68:EF:EA:69:90:C0:91:F2:E7:36:EE:2F:4E:27:DE:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cf7838b-9685-3c78-aae8-a333272e880f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.174.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:1b:70:c0:09:75:18:fc:39:c2:b1:0b:cc:6f:47:13:a9:c1: 05:fe:bf:7f:23:a2:47:47:c1:20:46:d1:5b:29:bb:9f:27:e3: cd:f3:8a:eb:47:33:d1:30:50:f2:f7:fa:33:59:c4:4a:99:bb: ab:89:8c:af:05:7b:ba:51:a2:1d:07:3b:cd:e5:42:d3:ac:ea: fa:bd:c4:da:04:2e:c4:a9:d1:74:57:d5:66:84:26:2f:d9:96: 15:62:c2:2a:a4:0a:31:61:13:e0:04:5f:3c:0b:dd:cc:6f:ec: 15:98:0e:d0:2b:7b:03:16:c9:36:ae:7d:3a:7c:20:9f:13:0d: 37:be:20:4d:db:b2:bf:6f:20:5c:cd:d4:51:6e:b1:82:bf:54: df:89:56:c2:ae:75:25:92:8d:3f:bc:4a:e9:eb:b1:15:9b:38: 5d:0d:8b:fc:a3:45:dd:a5:b5:bc:e6:b6:a6:33:07:07:9f:fb: c5:24:23:fe:4e:49:83:84:0e:6e:3f:03:fb:4f:6c:fc:c0:49: 9f:8b:af:88:b7:78:09:a1:23:dc:62:8b:13:10:00:b2:43:d1: 12:44:dd:f5:fa:a9:de:bd:d7:01:4b:4e:18:4f:2a:65:c5:99: ea:7b:a2:c0:0c:37:e7:25:6a:3a:4b:66:60:a0:0d:72:99:69: a1:21:a6:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TaBi0+P+ABzdRuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk N2IxYjQ2MzEtZjA0My00YjU2LTk4YzAtZmU4YjZiMTAyNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnDdf7o5uPnP9yaHZz7zkst7kjOKtE5cSkbv /8Lmun5EGZXE2mYDQZNvZ9Bjn9uZ+pcl/CvuKlj5ctY066AFSmqbHXXum4yQkrUJ pjd/IqtPacs4pUoLe5G2LaILOr7WRJ6Cw1GmjnIDAe8O/LlQj2sKA/O+QibvLZYh Mb6M2Xhrl1F0OHul83jT9hUpI5gwihfjl+Ssy+KshczsjPUYnG/aEgQuvIoi+6dN 8MSCNc64FhZum8eQ1fWLnENevyj1D9WfwVCdB/f9Bzu9RJF4A0iE9sHkw2u9WDSv LbwsX47vW1VnntTXClnoBwmous1OAavsOL/l9HytDXO/VTVttwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEniIDho7+ppkMCR8uc27i9OJ94TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWNmNzgzOGItOTY4NS0z Yzc4LWFhZTgtYTMzMzI3MmU4ODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrq4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsbcMAJdRj8OcKxC8xvRxOpwQX+v38jokdHwSBG0Vspu58n483ziutH M9EwUPL3+jNZxEqZu6uJjK8Fe7pRoh0HO83lQtOs6vq9xNoELsSp0XRX1WaEJi/Z lhViwiqkCjFhE+AEXzwL3cxv7BWYDtArewMWyTaufTp8IJ8TDTe+IE3bsr9vIFzN 1FFusYK/VN+JVsKudSWSjT+8SunrsRWbOF0Ni/yjRd2ltbzmtqYzBwef+8UkI/5O SYOEDm4/A/tPbPzASZ+Lr4i3eAmhI9xiixMQALJD0RJE3fX6qd691wFLThhPKmXF mep7osAMN+clajpLZmCgDXKZaaEhpic= -----END CERTIFICATE-----Generated at Mon Oct 26 02:02:59 2026 by rpki-client