$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2cd00d3-e91d-3a13-bbff-22a67da2189c.roa File: b2cd00d3-e91d-3a13-bbff-22a67da2189c.roa (raw, json) Hash identifier: lS+nihL/OkmgoKIhkWJfwnRT3iwd1LHKHt7+P5cDZT4= Subject key identifier: 1F:02:1A:58:E5:93:B8:78:E7:D3:78:22:1F:63:B1:D1:9F:B3:F0:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F1EAD6B9C711B8DB02E20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2cd00d3-e91d-3a13-bbff-22a67da2189c.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7015 IP address blocks: 67.189.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:1e:ad:6b:9c:71:1b:8d:b0:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=dfbafbe6-08ac-4a6e-ab83-520dfeecb5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:d3:76:51:0a:76:42:82:e4:dc:db:0b:a1: 69:fd:42:9e:85:da:3b:bb:03:04:e7:c4:be:bd:ce: bc:76:9b:44:15:d5:77:20:c8:6b:6c:1c:93:50:94: e2:9d:62:25:89:82:f7:65:60:3e:76:c3:a3:e1:27: 7f:2b:07:b1:76:7d:eb:41:80:96:61:89:d7:c0:0c: b5:9e:4b:db:ba:19:5d:90:4a:80:58:38:54:59:86: 6c:7e:bf:ce:bb:e4:89:ab:97:41:f1:f9:c5:7c:46: 1f:4d:b1:3c:9a:97:3a:73:54:75:b5:b8:73:2d:58: 94:1d:2c:e4:4c:28:fe:d7:2b:ef:6d:7a:92:b4:94: e1:72:9e:09:4a:c6:6b:ca:64:c9:e2:6f:b2:a2:59: 66:3b:e1:01:12:59:a8:05:ac:d9:bc:81:96:c2:f3: d5:7d:6a:e5:10:b8:ae:06:76:6f:4f:a8:2e:02:98: 3d:43:e7:11:aa:81:a5:05:0e:d9:59:1c:08:16:ad: 59:c9:fa:23:b2:98:25:78:18:7f:70:61:72:9c:03: 7d:2c:93:61:21:d4:8d:48:e5:9a:60:18:4e:da:88: 4f:52:84:82:6b:19:21:c2:6a:2f:08:77:25:02:3e: cb:fc:37:a0:9f:ed:d4:b4:8d:95:77:c1:29:a4:dc: d0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:02:1A:58:E5:93:B8:78:E7:D3:78:22:1F:63:B1:D1:9F:B3:F0:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2cd00d3-e91d-3a13-bbff-22a67da2189c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.189.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:32:ce:58:23:de:51:72:e9:ed:ba:ab:2e:c5:1a:d6:0b:5b: 1e:2b:85:a6:ee:b5:db:8c:5b:a1:f6:20:9a:e5:f6:f3:3c:df: d1:b7:b7:ad:3a:5f:a8:89:fa:1c:a4:ab:c6:65:5a:78:f9:ce: 10:6f:36:f4:73:1e:db:e6:e5:27:69:0e:a2:5b:69:9e:cb:7b: db:07:4e:f1:4b:69:da:0e:fa:2a:ea:42:14:73:0a:0a:35:fc: 84:30:58:d6:e2:b9:5c:96:04:97:4f:64:cc:e0:4f:6d:20:73: 5f:9c:c7:f1:e5:e8:81:ca:34:6a:5f:56:1a:62:a7:3d:f4:9c: 1e:dd:7f:6b:64:18:e8:f2:83:3d:7f:15:fd:4e:40:a4:a7:cf: e0:2a:bf:bc:18:c9:19:ee:99:e5:f7:92:4d:9a:4f:96:f6:f0: 53:73:f5:c1:24:c8:03:3a:98:f6:15:30:24:b5:73:00:08:f6: 2d:2c:11:ba:4a:2a:50:f6:4c:13:8d:41:8e:59:a9:d1:41:d3: 73:b2:09:8d:c8:04:c3:a0:2b:30:ff:be:c8:8d:53:a8:30:54: a5:e1:52:2b:11:43:68:02:11:e7:57:21:cf:19:26:c4:d0:3e: c7:4b:ae:f8:06:48:49:67:09:9a:c3:7f:34:8a:22:83:3a:9a: 36:8d:3f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tx6ta5xxG42wLiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZGZiYWZiZTYtMDhhYy00YTZlLWFiODMtNTIwZGZlZWNiNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwzTdlEKdkKC5NzbC6Fp/UKehdo7uwME58S+ vc68dptEFdV3IMhrbByTUJTinWIliYL3ZWA+dsOj4Sd/Kwexdn3rQYCWYYnXwAy1 nkvbuhldkEqAWDhUWYZsfr/Ou+SJq5dB8fnFfEYfTbE8mpc6c1R1tbhzLViUHSzk TCj+1yvvbXqStJThcp4JSsZrymTJ4m+yollmO+EBElmoBazZvIGWwvPVfWrlELiu BnZvT6guApg9Q+cRqoGlBQ7ZWRwIFq1ZyfojspgleBh/cGFynAN9LJNhIdSNSOWa YBhO2ohPUoSCaxkhwmovCHclAj7L/Degn+3UtI2Vd8EppNzQhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8CGljlk7h459N4Ih9jsdGfs/ApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjJjZDAwZDMtZTkxZC0z YTEzLWJiZmYtMjJhNjdkYTIxODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ73kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwyzlgj3lFy6e26qy7FGtYLWx4rhabutduMW6H2IJrl9vM839G3t606 X6iJ+hykq8ZlWnj5zhBvNvRzHtvm5SdpDqJbaZ7Le9sHTvFLadoO+irqQhRzCgo1 /IQwWNbiuVyWBJdPZMzgT20gc1+cx/Hl6IHKNGpfVhpipz30nB7df2tkGOjygz1/ Ff1OQKSnz+Aqv7wYyRnumeX3kk2aT5b28FNz9cEkyAM6mPYVMCS1cwAI9i0sEbpK KlD2TBONQY5ZqdFB03OyCY3IBMOgKzD/vsiNU6gwVKXhUisRQ2gCEedXIc8ZJsTQ PsdLrvgGSElnCZrDfzSKIoM6mjaNP5o= -----END CERTIFICATE-----Generated at Thu Nov 5 13:42:40 2026 by rpki-client