$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09e28ba-fe6d-341e-a943-aa48a8252436.roa File: a09e28ba-fe6d-341e-a943-aa48a8252436.roa (raw, json) Hash identifier: v3yhUc71PigN4jVd/evUjTmqy0gTSMOD9dE16Dz7LZE= Subject key identifier: 85:33:05:D3:29:C9:88:28:23:58:CC:46:15:92:3F:F5:30:E4:DB:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3B58B1DC646D0D251E2380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09e28ba-fe6d-341e-a943-aa48a8252436.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33651 IP address blocks: 67.188.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:58:b1:dc:64:6d:0d:25:1e:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=1b5560e5-017a-4196-9b40-2eeed38771a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:de:f2:10:19:1d:8f:d5:27:f4:df:c0:b9: a1:ab:17:97:39:f6:f7:e9:46:37:c0:ff:a0:79:78: 4f:ec:9f:f7:c9:99:91:75:69:10:38:12:2c:6c:3d: ba:08:c5:17:91:b8:59:43:4d:e2:6d:ac:5e:4f:b7: 15:a9:55:5e:35:83:ce:a5:02:53:2e:4c:e6:75:c2: 60:b8:da:5a:da:85:4d:e6:85:e2:5b:7c:19:2e:d9: 60:13:c9:7e:35:19:7f:9b:21:a6:77:8e:14:2f:15: 29:f2:36:25:de:e4:3e:cd:b9:87:eb:3b:23:bf:55: 00:ef:e9:55:ba:85:44:cf:4b:05:7a:f5:19:5f:c0: b7:d9:d8:6b:c2:98:38:af:2f:58:7b:e7:4c:5d:2e: 07:59:7c:c8:c8:aa:8b:f9:4c:e9:76:10:c0:19:7d: 6b:3e:d3:80:09:f4:6d:17:0f:80:e1:c0:77:2b:80: 5c:ba:6b:b4:24:09:3f:a4:98:5b:54:87:b1:81:05: 15:8a:21:b7:03:a4:0f:a4:a6:fd:cd:84:44:f1:cf: 9a:9d:81:5e:0f:46:8a:2d:5f:05:0d:21:af:63:ea: 4f:2a:71:1c:8c:9e:5e:57:1f:9c:b0:c9:68:e9:bb: 0b:9b:bb:24:e4:df:38:58:4f:a7:6f:7e:45:2d:7c: c3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:33:05:D3:29:C9:88:28:23:58:CC:46:15:92:3F:F5:30:E4:DB:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09e28ba-fe6d-341e-a943-aa48a8252436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:96:9d:4b:18:67:0d:99:eb:97:e6:06:c2:8a:37:40:6f:53: f3:af:2f:d4:ec:1c:7b:6f:3c:70:96:b8:77:4e:bc:58:54:b3: 3b:2a:2a:bf:fd:c5:8f:51:e5:4d:ee:69:25:78:09:fd:cc:2a: 79:93:4a:25:2c:e0:b1:f2:e1:52:fc:fc:1f:bc:f5:0e:fb:16: 37:99:e1:71:24:27:b7:ca:0b:d7:65:9e:37:48:c0:66:c8:40: 74:2d:3d:62:e6:59:d3:23:f9:4f:71:a7:33:8c:b5:39:b4:cb: 06:38:21:d7:2f:8b:70:00:bc:f0:3b:84:bf:2b:9b:86:15:e8: bb:6e:91:8e:77:a9:e2:bf:55:c2:79:f5:d1:fe:14:83:8c:98: e8:0a:a4:cd:4d:b4:21:91:1f:b1:ec:2e:45:a6:88:38:1b:c2: d2:7d:59:5e:90:98:2b:af:48:d0:c9:de:21:c7:e4:2a:6e:32: d5:2a:4a:ac:85:ec:2c:cf:fd:99:53:7b:5c:79:1b:db:8c:c6: 70:12:9d:2a:86:4e:76:a4:67:49:84:fb:56:8f:e1:d4:22:b0: 1c:16:9c:a7:ff:64:04:a1:4a:44:8d:b7:56:1b:40:0a:fe:ca: 48:a4:90:16:75:ac:a9:4e:02:77:24:d7:2d:5c:57:9a:1e:3d: f9:e8:26:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO1ix3GRtDSUeI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MWI1NTYwZTUtMDE3YS00MTk2LTliNDAtMmVlZWQzODc3MWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiDe8hAZHY/VJ/TfwLmhqxeXOfb36UY3wP+g eXhP7J/3yZmRdWkQOBIsbD26CMUXkbhZQ03ibaxeT7cVqVVeNYPOpQJTLkzmdcJg uNpa2oVN5oXiW3wZLtlgE8l+NRl/myGmd44ULxUp8jYl3uQ+zbmH6zsjv1UA7+lV uoVEz0sFevUZX8C32dhrwpg4ry9Ye+dMXS4HWXzIyKqL+UzpdhDAGX1rPtOACfRt Fw+A4cB3K4Bcumu0JAk/pJhbVIexgQUViiG3A6QPpKb9zYRE8c+anYFeD0aKLV8F DSGvY+pPKnEcjJ5eVx+csMlo6bsLm7sk5N84WE+nb35FLXzDHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUzBdMpyYgoI1jMRhWSP/Uw5NtNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA5ZTI4YmEtZmU2ZC0z NDFlLWE5NDMtYWE0OGE4MjUyNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7wIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyWnUsYZw2Z65fmBsKKN0BvU/OvL9TsHHtvPHCWuHdOvFhUszsqKr/9 xY9R5U3uaSV4Cf3MKnmTSiUs4LHy4VL8/B+89Q77FjeZ4XEkJ7fKC9dlnjdIwGbI QHQtPWLmWdMj+U9xpzOMtTm0ywY4Idcvi3AAvPA7hL8rm4YV6LtukY53qeK/VcJ5 9dH+FIOMmOgKpM1NtCGRH7HsLkWmiDgbwtJ9WV6QmCuvSNDJ3iHH5CpuMtUqSqyF 7CzP/ZlTe1x5G9uMxnASnSqGTnakZ0mE+1aP4dQisBwWnKf/ZAShSkSNt1YbQAr+ ykikkBZ1rKlOAnck1y1cV5oePfnoJuw= -----END CERTIFICATE-----Generated at Tue Jul 21 20:08:41 2026 by rpki-client