$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d45f5eac-1bd9-334c-8c77-70a141935177.roa File: d45f5eac-1bd9-334c-8c77-70a141935177.roa (raw, json) Hash identifier: HY6RX8E1emlOcykMG5npxhCnjo9ERp5LtY4qCmq6UaY= Subject key identifier: EC:F6:E8:6F:BE:3B:5A:D4:E4:79:11:73:7B:C9:45:84:5B:82:20:67 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584F31B7C42AB6752C773BFFD660 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d45f5eac-1bd9-334c-8c77-70a141935177.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 396356 IP address blocks: 167.100.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c4:2a:b6:75:2c:77:3b:ff:d6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=2c4f862d-23c2-47ad-a122-a33627c10e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:f3:47:eb:ea:a4:99:fb:e2:71:c0:d8:bc: 95:bc:22:0e:3c:7a:b8:f2:27:b5:0d:d9:12:f2:2e: e3:3a:7a:61:3d:c7:ae:f9:c7:6d:94:7f:fa:8c:02: 40:26:0c:ab:82:2e:37:4a:9a:34:0e:cb:55:0f:3a: 2a:e7:c6:56:05:37:97:82:cc:e0:10:ad:af:4e:76: 91:d1:45:84:97:40:13:ee:26:62:06:61:a4:e5:7f: 00:4b:9b:fb:52:8e:64:0e:ed:d2:9f:42:c7:ce:3a: 38:83:2b:2f:6e:25:b4:2f:b3:ad:98:9a:f3:45:ab: 81:a9:13:d0:1b:73:a4:b0:2d:41:9b:5e:b1:82:6a: 9c:17:cb:8a:2b:56:87:54:d4:f7:e1:46:1d:42:af: 7a:d6:86:26:87:38:1f:d1:dc:02:68:01:12:ff:61: 7e:17:8b:49:e6:7a:f0:c2:c1:21:fa:79:45:bd:ab: 26:a1:6a:dd:88:20:fc:0c:5b:1a:15:9e:da:16:af: dc:2e:56:25:19:04:49:8a:9d:11:ad:4c:24:53:d8: ad:49:d8:cc:ad:89:50:55:05:94:30:a4:5c:0b:ca: a0:94:ff:d0:07:cd:69:bd:e4:b8:f8:f1:8c:69:c6: af:c6:26:4f:be:42:23:c0:0e:8b:48:11:01:db:49: 4b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F6:E8:6F:BE:3B:5A:D4:E4:79:11:73:7B:C9:45:84:5B:82:20:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d45f5eac-1bd9-334c-8c77-70a141935177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 167.100.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:13:4b:0c:17:89:e2:76:ea:95:cb:95:3b:59:12:bc:d2:d8: d1:a5:cb:8a:b5:98:e5:04:d7:b3:49:bc:7e:a4:a8:e0:5a:2e: 17:19:7e:88:8c:78:66:9a:bb:ed:97:37:16:e0:af:5c:84:92: 10:35:e9:6e:7c:c3:75:e8:10:a6:79:60:22:77:18:24:73:17: 27:12:f0:bd:6c:09:d6:94:0a:2c:e0:5f:e8:29:ba:f8:15:9c: 57:a3:1d:bb:06:a9:c4:81:75:b0:cc:85:63:b8:b9:5a:0f:79: f4:c2:2f:f6:f9:9f:a6:bd:5c:d9:c5:56:e8:59:a8:05:ee:71: d4:a7:e4:68:58:c2:83:b8:2e:ad:2a:eb:95:00:0d:5f:36:9b: 6a:cb:44:d1:ba:b7:b0:b1:53:86:dc:47:71:70:72:6a:6b:46: 56:89:5e:85:31:ec:3f:6f:83:f0:b8:57:b1:f5:04:2e:59:70: 26:c9:6d:35:6c:9e:51:33:24:26:fa:a7:7e:94:04:c1:d2:80: d5:ab:7c:5d:c9:36:db:cb:6d:62:5f:6f:1a:ab:40:92:85:5d: c2:f6:01:0c:46:d4:36:14:09:d3:05:90:50:7b:bc:7d:57:ed: df:2a:f5:71:79:9f:37:2e:a9:1e:d4:2a:bf:6d:e0:b6:6f:5d: fb:63:81:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8QqtnUsdzv/1mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk MmM0Zjg2MmQtMjNjMi00N2FkLWExMjItYTMzNjI3YzEwZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxTzR+vqpJn74nHA2LyVvCIOPHq48ie1DdkS 8i7jOnphPceu+cdtlH/6jAJAJgyrgi43Spo0DstVDzoq58ZWBTeXgszgEK2vTnaR 0UWEl0AT7iZiBmGk5X8AS5v7Uo5kDu3Sn0LHzjo4gysvbiW0L7OtmJrzRauBqRPQ G3OksC1Bm16xgmqcF8uKK1aHVNT34UYdQq961oYmhzgf0dwCaAES/2F+F4tJ5nrw wsEh+nlFvasmoWrdiCD8DFsaFZ7aFq/cLlYlGQRJip0RrUwkU9itSdjMrYlQVQWU MKRcC8qglP/QB81pveS4+PGMacavxiZPvkIjwA6LSBEB20lLdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOz26G++O1rU5HkRc3vJRYRbgiBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvZDQ1ZjVlYWMtMWJkOS0z MzRjLThjNzctNzBhMTQxOTM1MTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp2RoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0TSwwXieJ26pXLlTtZErzS2NGly4q1mOUE17NJvH6kqOBaLhcZfoiM eGaau+2XNxbgr1yEkhA16W58w3XoEKZ5YCJ3GCRzFycS8L1sCdaUCizgX+gpuvgV nFejHbsGqcSBdbDMhWO4uVoPefTCL/b5n6a9XNnFVuhZqAXucdSn5GhYwoO4Lq0q 65UADV82m2rLRNG6t7CxU4bcR3FwcmprRlaJXoUx7D9vg/C4V7H1BC5ZcCbJbTVs nlEzJCb6p36UBMHSgNWrfF3JNtvLbWJfbxqrQJKFXcL2AQxG1DYUCdMFkFB7vH1X 7d8q9XF5nzcuqR7UKr9t4LZvXftjgT8= -----END CERTIFICATE-----Generated at Tue Sep 22 00:00:40 2026 by rpki-client