$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3f61d3c-52d1-3663-a998-7f3d0e54528b.roa File: a3f61d3c-52d1-3663-a998-7f3d0e54528b.roa (raw, json) Hash identifier: INpLwTTG+nzJCEFWTr/4Vjehc/LWQdKPvw80rXffMIE= Subject key identifier: F1:2E:38:6D:9D:72:29:74:22:22:94:87:0D:9B:CD:A4:EE:65:35:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F06724DDCDB5E775172E10E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3f61d3c-52d1-3663-a998-7f3d0e54528b.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 33490 IP address blocks: 174.174.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:4d:dc:db:5e:77:51:72:e1:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=63707521-035d-4a57-94f5-f8efef9989d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:61:62:14:3d:8f:a1:fd:5e:87:68:36:68:e0: f5:49:7d:73:6a:ef:43:9e:ea:8e:d3:f2:23:07:9b: 9f:9c:0d:aa:6e:33:53:8c:f0:6e:24:68:de:2a:69: 4a:73:d2:70:43:71:fe:fb:23:8e:64:7f:f3:b5:45: 8b:cf:2b:e7:35:fa:63:68:b9:cd:d4:41:46:87:b7: f5:78:a6:bb:04:19:ce:0f:27:04:98:19:4d:09:ec: ac:3a:d8:d6:87:d7:24:46:30:b9:90:b1:10:b5:8e: 6b:cb:ee:45:29:cb:f3:12:d4:6b:55:63:a2:ef:89: 25:fe:f9:df:fa:17:32:37:c5:af:ff:e3:6c:2b:a6: 10:c0:5a:17:61:4d:bf:eb:2e:3f:3e:8f:76:f8:bd: 71:fb:75:fb:e8:88:e5:75:53:9d:1c:0f:06:bd:38: 94:11:2a:8b:f1:05:ed:8a:ac:1d:59:ed:82:8b:00: 62:15:53:1d:13:3e:5d:13:79:fd:fc:4e:24:4b:4d: df:8c:47:f5:a5:8b:a9:40:36:ff:eb:4c:3b:da:17: b4:00:54:12:b5:ce:61:ab:d8:b3:a0:39:12:36:0a: c2:4a:b4:15:a6:0f:0d:a7:09:e8:fa:59:9d:74:2c: e1:18:75:2f:c7:9d:74:99:cb:89:09:9c:b8:73:2e: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2E:38:6D:9D:72:29:74:22:22:94:87:0D:9B:CD:A4:EE:65:35:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3f61d3c-52d1-3663-a998-7f3d0e54528b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.174.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:36:b2:bc:1b:0c:4d:ed:74:6a:b5:43:18:86:e4:b3:cd:c0: 6b:2e:5d:a0:18:10:32:03:10:0c:d9:f6:0a:30:72:df:87:2a: 7a:86:eb:b4:5f:10:d0:d4:80:b6:35:69:d6:d1:9b:d6:66:cb: 08:48:25:59:7c:1b:f2:b4:e5:65:d9:70:cf:3b:4f:6d:2e:26: 75:ec:3c:92:d5:fc:40:c6:f9:28:eb:35:a4:f2:0b:14:66:e6: b8:67:cb:d0:80:86:5d:80:05:06:3a:bf:58:08:4d:99:6e:53: 52:42:b9:fd:83:e6:80:6a:d1:b2:3e:7e:65:72:73:49:ec:00: 45:10:8d:1c:59:ce:de:61:bd:6f:28:4f:68:38:f7:44:83:c5: b2:0a:3c:4b:76:95:c9:88:f6:48:bf:74:07:ef:17:d4:ff:4b: e0:a0:cd:9c:99:36:81:63:44:2d:4b:90:43:74:b5:70:b6:7e: 94:9e:c0:99:5b:3c:5e:e6:58:db:f6:76:33:ff:fa:d9:41:9c: ef:d7:d4:f8:27:92:ed:48:ab:4a:d4:48:fc:93:a4:13:25:a9: 99:5a:21:e3:5c:2a:84:58:dc:52:b0:39:02:f2:21:e9:d5:5a: 0b:cc:7f:50:f6:45:4e:17:1d:11:85:61:23:1f:cc:80:d6:22: d6:1c:67:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gck3c2153UXLhDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NjM3MDc1MjEtMDM1ZC00YTU3LTk0ZjUtZjhlZmVmOTk4OWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWFiFD2Pof1eh2g2aOD1SX1zau9DnuqO0/Ij B5ufnA2qbjNTjPBuJGjeKmlKc9JwQ3H++yOOZH/ztUWLzyvnNfpjaLnN1EFGh7f1 eKa7BBnODycEmBlNCeysOtjWh9ckRjC5kLEQtY5ry+5FKcvzEtRrVWOi74kl/vnf +hcyN8Wv/+NsK6YQwFoXYU2/6y4/Po92+L1x+3X76IjldVOdHA8GvTiUESqL8QXt iqwdWe2CiwBiFVMdEz5dE3n9/E4kS03fjEf1pYupQDb/60w72he0AFQStc5hq9iz oDkSNgrCSrQVpg8Npwno+lmddCzhGHUvx510mcuJCZy4cy42GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEuOG2dcil0IiKUhw2bzaTuZTW3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNmNjFkM2MtNTJkMS0z NjYzLWE5OTgtN2YzZDBlNTQ1MjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrq4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALc2srwbDE3tdGq1QxiG5LPNwGsuXaAYEDIDEAzZ9gowct+HKnqG67Rf ENDUgLY1adbRm9ZmywhIJVl8G/K05WXZcM87T20uJnXsPJLV/EDG+SjrNaTyCxRm 5rhny9CAhl2ABQY6v1gITZluU1JCuf2D5oBq0bI+fmVyc0nsAEUQjRxZzt5hvW8o T2g490SDxbIKPEt2lcmI9ki/dAfvF9T/S+CgzZyZNoFjRC1LkEN0tXC2fpSewJlb PF7mWNv2djP/+tlBnO/X1Pgnku1Iq0rUSPyTpBMlqZlaIeNcKoRY3FKwOQLyIenV WgvMf1D2RU4XHRGFYSMfzIDWItYcZ9g= -----END CERTIFICATE-----Generated at Sat Sep 5 10:16:56 2026 by rpki-client