$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f236ff4f-109f-3d7f-8354-cf9be7e211f8.roa File: f236ff4f-109f-3d7f-8354-cf9be7e211f8.roa (raw, json) Hash identifier: BAduFgc2LBDZVSG956+btA4+yBqgEkO8XykrvLM+8Ho= Subject key identifier: C3:8B:AC:BB:FC:E7:E7:C7:3E:92:9C:CB:F3:D8:27:14:EF:97:A8:27 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8629C27245051A07B48E000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f236ff4f-109f-3d7f-8354-cf9be7e211f8.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 174.174.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:9c:27:24:50:51:a0:7b:48:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=7ff99757-ab3e-4bd3-ba0e-e5ed134a59e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:a6:35:0e:41:17:46:fd:cb:8b:16:fb:40: b9:b1:c0:89:4e:9f:f7:e4:c1:7c:41:b1:55:a3:ce: e4:7b:3c:8e:61:a0:76:ea:cf:58:d5:19:4b:b7:6d: 76:e1:52:93:30:f8:07:88:a7:2b:af:fe:5a:6f:b7: 7e:1e:d4:0e:df:82:fc:26:67:b2:8a:61:b3:1e:2a: f0:85:5f:cb:25:e4:d0:9f:c7:bb:31:7b:83:de:c2: 23:c2:66:8d:62:04:c5:34:88:f4:fc:d9:7c:f8:be: 43:25:1f:2b:2c:b7:45:79:25:75:5b:b1:8c:b9:9c: d0:33:19:90:46:97:0d:55:73:51:29:3a:57:5f:e1: 55:08:0b:f7:3c:4d:8c:3d:46:04:a3:1a:fc:12:b2: da:29:42:5c:df:75:ff:ab:8b:f6:a1:78:f0:1e:a3: 93:a0:64:8c:f0:34:29:39:2a:34:59:e1:f8:00:4a: 5e:59:94:70:54:1e:eb:4f:ce:0a:05:6c:4f:c0:6b: 9a:5e:88:38:87:85:8e:58:af:01:55:43:86:61:d2: 8e:68:44:ee:3f:9a:3d:da:2e:92:47:e0:38:a4:5c: 25:88:5e:2d:90:c1:5c:ee:a1:8c:3f:c3:e6:ab:7b: 4b:67:88:a8:63:67:60:24:19:c4:3a:f3:32:83:c5: b6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8B:AC:BB:FC:E7:E7:C7:3E:92:9C:CB:F3:D8:27:14:EF:97:A8:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f236ff4f-109f-3d7f-8354-cf9be7e211f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.174.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:fb:5b:74:a8:8d:cb:63:f2:c0:08:39:1b:45:ed:5c:f0:11: 46:95:14:59:5f:8e:b2:a9:68:d9:2c:4f:4d:90:6e:0d:0e:aa: 7f:c6:ab:7c:97:4d:37:64:db:32:0b:b1:70:dc:ae:b4:da:6a: fb:89:79:e2:19:79:0d:34:fe:5c:08:f3:97:82:ec:e2:a6:e1: ce:ba:93:09:d8:15:10:9f:64:37:7b:3b:04:f0:74:e5:16:33: ba:10:57:40:57:6a:8e:3b:cd:a7:5c:e5:22:ea:87:ea:76:fa: ce:94:d8:fa:8a:fd:c9:7a:1a:2d:a8:cc:a6:d2:18:99:07:e3: bf:eb:84:4c:5e:7b:c6:3e:c9:13:05:5c:1f:02:a0:78:0b:60: 9c:a7:7d:2c:3c:74:7a:2f:94:8b:b9:36:34:c3:2a:07:0e:71: 1b:03:c4:30:5e:c7:88:ca:8b:13:f6:e5:6d:99:f9:ac:58:a0: df:9f:0d:1c:fa:95:09:f5:59:4d:8e:32:b9:63:8d:aa:aa:3c: c3:91:67:d9:e3:21:75:29:9b:f6:e7:99:2f:3a:c5:27:ce:45: b2:5c:7f:b9:fa:c8:10:62:84:d3:ea:f1:85:24:16:df:ac:dd: f5:ce:7b:1f:60:90:05:fe:9d:61:d1:2c:97:3d:cf:a9:33:6f: 46:74:a7:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYpwnJFBRoHtI4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk N2ZmOTk3NTctYWIzZS00YmQzLWJhMGUtZTVlZDEzNGE1OWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquGmNQ5BF0b9y4sW+0C5scCJTp/35MF8QbFV o87kezyOYaB26s9Y1RlLt2124VKTMPgHiKcrr/5ab7d+HtQO34L8JmeyimGzHirw hV/LJeTQn8e7MXuD3sIjwmaNYgTFNIj0/Nl8+L5DJR8rLLdFeSV1W7GMuZzQMxmQ RpcNVXNRKTpXX+FVCAv3PE2MPUYEoxr8ErLaKUJc33X/q4v2oXjwHqOToGSM8DQp OSo0WeH4AEpeWZRwVB7rT84KBWxPwGuaXog4h4WOWK8BVUOGYdKOaETuP5o92i6S R+A4pFwliF4tkMFc7qGMP8Pmq3tLZ4ioY2dgJBnEOvMyg8W2ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOLrLv85+fHPpKcy/PYJxTvl6gnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjIzNmZmNGYtMTA5Zi0z ZDdmLTgzNTQtY2Y5YmU3ZTIxMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrq7IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/7W3Sojctj8sAIORtF7VzwEUaVFFlfjrKpaNksT02Qbg0Oqn/Gq3yX TTdk2zILsXDcrrTaavuJeeIZeQ00/lwI85eC7OKm4c66kwnYFRCfZDd7OwTwdOUW M7oQV0BXao47zadc5SLqh+p2+s6U2PqK/cl6Gi2ozKbSGJkH47/rhExee8Y+yRMF XB8CoHgLYJynfSw8dHovlIu5NjTDKgcOcRsDxDBex4jKixP25W2Z+axYoN+fDRz6 lQn1WU2OMrljjaqqPMORZ9njIXUpm/bnmS86xSfORbJcf7n6yBBihNPq8YUkFt+s 3fXOex9gkAX+nWHRLJc9z6kzb0Z0pxM= -----END CERTIFICATE-----Generated at Tue Sep 1 05:30:28 2026 by rpki-client