$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f61989c8-9eb5-3f49-af95-cb7d30a0679c.roa File: f61989c8-9eb5-3f49-af95-cb7d30a0679c.roa (raw, json) Hash identifier: 1sF1om38O7SzHL4yBYxKmzjPIUoBuUXRkh3ZMLw5cqM= Subject key identifier: CD:8D:AE:B2:D1:61:D1:77:64:72:0D:4E:CB:AC:A1:17:BA:E3:CD:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4DA0FDE6335FF28FB67A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f61989c8-9eb5-3f49-af95-cb7d30a0679c.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 174.174.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:a0:fd:e6:33:5f:f2:8f:b6:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=999afbce-a7bb-4a9a-b943-8b68235db989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:fb:d0:fe:1f:52:fc:31:97:2b:7f:f4:7d: 60:45:a2:4a:5e:5b:85:a4:5f:50:6b:34:fa:17:21: d0:d2:34:f8:f4:bc:04:8a:bb:a4:47:2e:db:37:ed: 64:d1:f8:80:78:41:c4:63:bb:79:1e:ce:0f:23:1e: 12:26:22:d3:89:da:3a:c6:a1:7d:41:bc:61:84:f5: 7c:4a:4b:ba:1b:a8:cd:43:f4:cd:ab:c2:a6:1e:b3: 27:ce:b2:c6:90:6f:eb:27:a6:c3:74:e3:de:5c:05: 75:ef:88:73:a1:f0:29:c6:36:b9:7b:00:37:34:89: 38:4c:f1:2d:8b:24:8e:3a:5c:ff:d2:17:5c:d8:8b: 36:e0:54:ba:cf:8e:6a:72:f2:0b:53:cc:93:b1:7b: 68:49:18:85:03:1b:f3:fe:51:f4:7f:3b:3e:b4:5f: f9:26:9b:c0:63:a3:3e:e0:31:76:e3:89:ca:b1:05: f5:10:6c:fc:42:6f:6a:a9:18:69:d6:90:ef:c7:4c: df:9f:74:01:7d:55:2d:74:38:27:ba:e3:e5:0a:af: 1d:ce:e9:2b:99:28:db:27:02:8d:90:70:7d:b1:34: f7:38:e1:07:90:58:86:4a:bf:93:6d:19:ef:a2:6b: 4d:84:4a:58:7a:96:ac:89:6b:85:da:5e:07:63:29: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8D:AE:B2:D1:61:D1:77:64:72:0D:4E:CB:AC:A1:17:BA:E3:CD:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f61989c8-9eb5-3f49-af95-cb7d30a0679c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.174.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:01:5a:cd:55:d9:89:7e:dc:13:72:16:3c:2e:e0:40:77:26: de:5c:f9:1c:d8:b6:5f:3d:79:73:cc:c5:97:e9:b2:04:1a:9c: 26:6f:af:15:45:9d:88:5c:f3:74:dd:c6:56:5e:a3:6c:2b:71: 0a:84:07:04:dd:08:9d:fa:24:10:63:87:ad:00:26:54:9a:63: 94:b5:2e:cf:eb:4a:bc:4a:f9:20:fb:6b:7c:da:42:79:b3:25: 77:a4:52:d2:8f:80:48:a2:25:87:9c:85:8d:c3:c8:68:33:ce: 57:4e:13:d1:fd:3a:13:68:57:66:0b:b6:c3:45:a8:19:80:31: 3b:f3:d8:e4:3a:3b:90:3c:89:73:58:8c:38:58:a9:60:1a:52: 07:ba:ea:1e:94:7c:45:eb:e4:62:01:26:95:f6:4c:bf:b3:c5: cc:1b:fe:fb:d7:c3:e2:cc:27:09:e6:ac:c7:0f:4d:ac:99:54: 55:c3:13:4a:61:16:3d:76:0e:af:fe:92:24:d5:ac:60:96:8d: b8:14:69:d5:b1:45:7a:0f:21:b2:00:1b:16:0d:ef:e1:6f:b2: 55:ef:4e:8a:6f:78:a3:8b:5c:24:03:bd:f4:82:8b:3c:e4:cf: 20:bb:ac:ea:a4:d4:e2:e1:a9:d2:78:7a:a2:d5:33:da:28:09: f3:ca:ac:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TaD95jNf8o+2egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk OTk5YWZiY2UtYTdiYi00YTlhLWI5NDMtOGI2ODIzNWRiOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubT70P4fUvwxlyt/9H1gRaJKXluFpF9QazT6 FyHQ0jT49LwEirukRy7bN+1k0fiAeEHEY7t5Hs4PIx4SJiLTido6xqF9QbxhhPV8 Sku6G6jNQ/TNq8KmHrMnzrLGkG/rJ6bDdOPeXAV174hzofApxja5ewA3NIk4TPEt iySOOlz/0hdc2Is24FS6z45qcvILU8yTsXtoSRiFAxvz/lH0fzs+tF/5JpvAY6M+ 4DF244nKsQX1EGz8Qm9qqRhp1pDvx0zfn3QBfVUtdDgnuuPlCq8dzukrmSjbJwKN kHB9sTT3OOEHkFiGSr+TbRnvomtNhEpYepasiWuF2l4HYyko5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2NrrLRYdF3ZHINTsusoRe6481pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjYxOTg5YzgtOWViNS0z ZjQ5LWFmOTUtY2I3ZDMwYTA2NzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrq5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQBWs1V2Yl+3BNyFjwu4EB3Jt5c+RzYtl89eXPMxZfpsgQanCZvrxVF nYhc83TdxlZeo2wrcQqEBwTdCJ36JBBjh60AJlSaY5S1Ls/rSrxK+SD7a3zaQnmz JXekUtKPgEiiJYechY3DyGgzzldOE9H9OhNoV2YLtsNFqBmAMTvz2OQ6O5A8iXNY jDhYqWAaUge66h6UfEXr5GIBJpX2TL+zxcwb/vvXw+LMJwnmrMcPTayZVFXDE0ph Fj12Dq/+kiTVrGCWjbgUadWxRXoPIbIAGxYN7+FvslXvTopveKOLXCQDvfSCizzk zyC7rOqk1OLhqdJ4eqLVM9ooCfPKrNI= -----END CERTIFICATE-----Generated at Tue Oct 20 18:37:37 2026 by rpki-client