$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/04695c33-b0a3-3704-a5b6-180c9efa6484.roa File: 04695c33-b0a3-3704-a5b6-180c9efa6484.roa (raw, json) Hash identifier: ECnL3jGnKa1TdLvcEnRdsAXqdRoVXDZ7gtK6GomvDs4= Subject key identifier: 43:C8:62:95:AF:6D:12:ED:4D:6E:7D:F1:16:FF:9F:4A:E3:12:3B:03 Certificate issuer: /CN=b9227650-f65a-47df-b36e-587872f9eb35 Certificate serial: 010D0C9F4328584EAFE6EE35C3657554BF838A80 Authority key identifier: 24:95:F0:A3:A0:F8:75:BB:4C:98:BF:21:E0:60:F3:F0:5C:8E:53:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/04695c33-b0a3-3704-a5b6-180c9efa6484.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 402128 IP address blocks: 167.254.192.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/b9227650-f65a-47df-b36e-587872f9eb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/b9227650-f65a-47df-b36e-587872f9eb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:ee:35:c3:65:75:54:bf:83:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9227650-f65a-47df-b36e-587872f9eb35 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=d9f1b2c9-8f73-4e6a-b041-46395a813d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3a:70:e3:fa:67:87:0c:f3:61:21:e9:95:98: b1:ea:7b:41:6a:34:bd:6c:13:15:78:cc:1e:43:cc: 94:56:91:ee:01:64:67:a7:74:00:c0:30:a9:c4:7b: 6d:ce:a3:84:58:c3:ed:4f:c6:f1:5e:9b:dc:f7:18: a2:b7:53:c6:8a:26:43:53:66:4f:90:bc:8c:ba:71: c8:1f:ff:86:59:30:fe:ce:08:0a:f4:b3:55:9e:1b: a6:a0:03:5e:a0:92:00:a2:11:66:3e:83:50:48:ff: 1b:63:a5:ce:e5:31:0b:00:21:34:e6:8b:e6:6a:37: 83:43:9f:96:37:83:1e:d1:bb:33:85:ea:58:97:2e: 05:ad:eb:a4:74:4b:a7:a1:44:aa:42:71:69:20:96: 3b:7c:56:be:75:03:1c:da:8f:9d:f4:30:25:08:dc: 6b:24:73:d1:3b:ee:42:ec:a5:81:bd:78:15:41:48: ad:2c:64:c0:02:1a:21:0a:7d:54:b6:88:5d:34:c7: b7:aa:83:6c:cd:65:8c:f4:4c:b7:54:2a:91:6d:60: 95:f9:4d:a5:9f:3b:8f:d6:bb:09:ba:c1:e8:ba:b9: 25:ff:36:cd:86:66:8d:d1:94:eb:ff:7c:5e:bc:c3: f3:b5:a3:c6:17:d2:3f:87:3a:a1:b4:2a:56:31:2b: 20:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C8:62:95:AF:6D:12:ED:4D:6E:7D:F1:16:FF:9F:4A:E3:12:3B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/04695c33-b0a3-3704-a5b6-180c9efa6484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35/b9227650-f65a-47df-b36e-587872f9eb35.crl X509v3 Authority Key Identifier: keyid:24:95:F0:A3:A0:F8:75:BB:4C:98:BF:21:E0:60:F3:F0:5C:8E:53:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9227650-f65a-47df-b36e-587872f9eb35.cer sbgp-ipAddrBlock: critical IPv4: 167.254.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d4:8d:e1:39:a6:32:08:a4:35:a7:85:83:d5:11:6d:82:ca: 6b:62:c3:f7:36:22:ba:16:e4:6f:97:7d:67:6a:74:31:78:e8: 3c:39:aa:82:40:36:91:fd:68:fc:13:69:e7:21:75:30:6f:f0: a5:87:79:a6:59:8e:e2:36:67:28:af:36:1a:78:42:fb:18:9d: a9:6e:d8:3e:f8:cd:92:63:f4:3b:c5:26:3a:df:12:f6:6d:f2: ce:ba:82:86:8b:18:c7:a0:0a:48:b9:23:39:98:06:7e:16:b1: b1:24:aa:3b:9c:da:18:ec:f0:31:e6:f3:a9:02:6a:fa:68:88: 4a:f8:b9:b6:a3:05:48:20:46:25:78:f9:2d:e1:7a:4a:0a:7f: fd:64:74:9e:dd:2b:3e:8a:97:e0:f5:a4:5b:9a:0f:29:be:7f: 72:3e:af:53:36:df:9a:de:b5:c1:a7:b5:cc:0b:a2:0e:d0:8d: d0:7c:c0:2a:a7:0d:44:45:c0:93:c8:6f:e3:97:fb:35:9d:44: 22:26:7b:f9:90:17:69:ac:b3:2c:91:e7:1f:d8:4d:f4:4f:f9: c6:2b:99:07:55:29:8f:19:61:61:c8:8a:fb:4d:36:36:6d:a5: 6e:8e:83:cd:93:38:ce:7f:11:fe:f0:74:7c:9e:9e:94:96:0a: a7:47:f4:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5u41w2V1VL+DioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkyMjc2NTAtZjY1YS00N2RmLWIzNmUtNTg3ODcyZjll YjM1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ZDlmMWIyYzktOGY3My00ZTZhLWIwNDEtNDYzOTVhODEzZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTpw4/pnhwzzYSHplZix6ntBajS9bBMVeMwe Q8yUVpHuAWRnp3QAwDCpxHttzqOEWMPtT8bxXpvc9xiit1PGiiZDU2ZPkLyMunHI H/+GWTD+zggK9LNVnhumoANeoJIAohFmPoNQSP8bY6XO5TELACE05ovmajeDQ5+W N4Me0bszhepYly4FreukdEunoUSqQnFpIJY7fFa+dQMc2o+d9DAlCNxrJHPRO+5C 7KWBvXgVQUitLGTAAhohCn1UtohdNMe3qoNszWWM9Ey3VCqRbWCV+U2lnzuP1rsJ usHourkl/zbNhmaN0ZTr/3xevMPztaPGF9I/hzqhtCpWMSsgTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPIYpWvbRLtTW598Rb/n0rjEjsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iOTIy NzY1MC1mNjVhLTQ3ZGYtYjM2ZS01ODc4NzJmOWViMzUvMDQ2OTVjMzMtYjBhMy0z NzA0LWE1YjYtMTgwYzllZmE2NDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjkyMjc2NTAtZjY1YS00N2RmLWIz NmUtNTg3ODcyZjllYjM1L2I5MjI3NjUwLWY2NWEtNDdkZi1iMzZlLTU4Nzg3MmY5 ZWIzNS5jcmwwHwYDVR0jBBgwFoAUJJXwo6D4dbtMmL8h4GDz8FyOU54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iOTIyNzY1MC1mNjVhLTQ3ZGYtYjM2ZS01ODc4 NzJmOWViMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp/7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzUjeE5pjIIpDWnhYPVEW2Cymtiw/c2IroW5G+XfWdqdDF46Dw5qoJA NpH9aPwTaechdTBv8KWHeaZZjuI2ZyivNhp4QvsYnalu2D74zZJj9DvFJjrfEvZt 8s66goaLGMegCki5IzmYBn4WsbEkqjuc2hjs8DHm86kCavpoiEr4ubajBUggRiV4 +S3hekoKf/1kdJ7dKz6Kl+D1pFuaDym+f3I+r1M235retcGntcwLog7QjdB8wCqn DURFwJPIb+OX+zWdRCIme/mQF2mssyyR5x/YTfRP+cYrmQdVKY8ZYWHIivtNNjZt pW6Og82TOM5/Ef7wdHyenpSWCqdH9GE= -----END CERTIFICATE-----Generated at Sat Sep 5 03:25:10 2026 by rpki-client