$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d52188-ac75-3ed4-be18-9f2d7b2a201b.roa File: a7d52188-ac75-3ed4-be18-9f2d7b2a201b.roa (raw, json) Hash identifier: 9r698zRavvrvzxRprsaiX2+iGMEcanOV18Euit7S0uw= Subject key identifier: 48:34:92:0C:F9:7F:9C:57:1A:B5:DA:7D:C2:8A:12:2E:4F:11:3E:58 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862A542AC25E6B46F1616F0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d52188-ac75-3ed4-be18-9f2d7b2a201b.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 67.172.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:a5:42:ac:25:e6:b4:6f:16:16:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=6d74cb82-c4d2-41c0-8cde-a1ec01ffd417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:27:c0:b3:21:95:24:87:56:94:ff:e1:5c:74: a6:ff:96:89:45:c3:4c:20:07:86:ab:b8:cb:66:cc: 84:d1:28:43:e0:ee:3b:c7:b9:7b:b4:f3:2c:a4:f3: ac:af:72:34:a8:e5:24:98:87:66:7c:d9:05:41:8c: 2e:4b:25:d9:bb:01:61:a4:ec:50:de:25:d3:4b:38: 23:c1:c7:ac:49:32:15:8c:c2:82:53:46:58:f5:de: 0f:c1:02:d3:99:82:50:55:10:6f:b6:0b:77:91:4e: e1:42:fa:6d:bf:d8:1b:39:33:ed:31:fd:b4:bc:bc: 80:40:bd:07:23:82:bb:9e:d2:e1:7b:d0:36:79:16: 1a:fd:92:63:84:eb:0a:d8:26:04:75:cf:68:5f:10: 49:c1:7d:c0:e7:6b:55:fb:c7:84:39:0c:11:48:35: f8:5d:7d:e5:f8:25:74:8e:15:0d:b3:72:27:ed:fe: 2c:ec:52:d2:7d:16:47:6e:1e:67:4a:dc:3b:d7:3d: bc:42:a2:b0:46:cd:78:92:7e:27:45:11:96:98:41: b7:41:4b:72:fd:2d:78:eb:89:0c:fb:7c:17:14:95: a0:7e:f5:1e:11:2d:41:bb:f5:0d:6d:ed:b1:f4:85: 2f:1a:1e:49:48:11:de:15:e9:1c:88:47:be:d1:50: a8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:34:92:0C:F9:7F:9C:57:1A:B5:DA:7D:C2:8A:12:2E:4F:11:3E:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d52188-ac75-3ed4-be18-9f2d7b2a201b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.172.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:92:64:21:66:8f:37:84:f6:b6:de:1e:5b:74:fc:a7:56:da: 5f:1a:b7:50:44:09:a0:ab:8e:8e:11:00:27:44:93:11:3f:d3: 87:b3:ce:a3:1b:26:c7:c5:c5:25:b3:af:e7:4a:25:46:df:32: df:49:c2:8e:7a:b5:48:73:e4:3e:9c:23:a5:d7:e6:ee:9c:48: 74:2a:bc:a6:96:b4:28:22:02:ea:b3:45:c9:e1:35:89:34:34: c8:2f:87:60:c6:b3:b6:d8:52:f5:70:23:0a:51:61:13:e3:b9: 33:f3:ef:17:15:88:07:f7:c5:c7:d0:17:a3:a7:04:94:84:37: 9f:32:de:02:eb:89:30:8e:0f:4d:12:14:52:a3:3a:6d:5a:51: 1d:86:1a:40:bf:9f:ff:ad:47:00:bb:c2:f9:fe:41:72:e6:a7: 9a:43:88:a9:ec:fc:01:83:00:1b:64:b7:01:41:52:65:31:42: d6:1c:3c:04:f7:86:d6:48:41:3f:65:9e:c7:f5:6f:a6:ac:78: a4:1f:64:de:f9:ab:0d:e5:39:90:e5:fb:e8:ea:3e:04:fe:14: da:7e:2c:56:75:87:77:7e:28:d3:9e:82:79:fc:a2:e5:36:6b: e1:e0:e1:9b:75:2b:96:5a:a8:e1:a3:06:a3:b1:0b:b0:da:02: 79:f9:2c:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYqVCrCXmtG8WFvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NmQ3NGNiODItYzRkMi00MWMwLThjZGUtYTFlYzAxZmZkNDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ifAsyGVJIdWlP/hXHSm/5aJRcNMIAeGq7jL ZsyE0ShD4O47x7l7tPMspPOsr3I0qOUkmIdmfNkFQYwuSyXZuwFhpOxQ3iXTSzgj wcesSTIVjMKCU0ZY9d4PwQLTmYJQVRBvtgt3kU7hQvptv9gbOTPtMf20vLyAQL0H I4K7ntLhe9A2eRYa/ZJjhOsK2CYEdc9oXxBJwX3A52tV+8eEOQwRSDX4XX3l+CV0 jhUNs3In7f4s7FLSfRZHbh5nStw71z28QqKwRs14kn4nRRGWmEG3QUty/S1464kM +3wXFJWgfvUeES1Bu/UNbe2x9IUvGh5JSBHeFekciEe+0VCo8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEg0kgz5f5xXGrXafcKKEi5PET5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdkNTIxODgtYWM3NS0z ZWQ0LWJlMTgtOWYyZDdiMmEyMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6xYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2SZCFmjzeE9rbeHlt0/KdW2l8at1BECaCrjo4RACdEkxE/04ezzqMb JsfFxSWzr+dKJUbfMt9Jwo56tUhz5D6cI6XX5u6cSHQqvKaWtCgiAuqzRcnhNYk0 NMgvh2DGs7bYUvVwIwpRYRPjuTPz7xcViAf3xcfQF6OnBJSEN58y3gLriTCOD00S FFKjOm1aUR2GGkC/n/+tRwC7wvn+QXLmp5pDiKns/AGDABtktwFBUmUxQtYcPAT3 htZIQT9lnsf1b6aseKQfZN75qw3lOZDl++jqPgT+FNp+LFZ1h3d+KNOegnn8ouU2 a+Hg4Zt1K5ZaqOGjBqOxC7DaAnn5LCs= -----END CERTIFICATE-----Generated at Tue Sep 1 05:13:49 2026 by rpki-client