$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/952f944f-b43d-3cf7-982e-842c95d833f8.roa File: 952f944f-b43d-3cf7-982e-842c95d833f8.roa (raw, json) Hash identifier: gjPrwVFxkEn00e72IkgIPjdoy8+o0iQMZmIKA4JZdqk= Subject key identifier: 26:AA:0E:0B:2B:4F:2F:A4:EC:B2:81:20:CD:0D:8E:40:C3:B6:47:D8 Certificate issuer: /CN=937a6fc8-35c3-4151-aa2e-2513420f9344 Certificate serial: 010D0C9F4328584F4973CB071FFB65B092E395C0 Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/952f944f-b43d-3cf7-982e-842c95d833f8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13720 IP address blocks: 64.37.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:cb:07:1f:fb:65:b0:92:e3:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ecb297bd-74e0-48aa-805a-f7683cdfa86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:ce:84:15:29:5c:c2:53:2a:56:93:91:ac: 84:f8:f5:ed:38:91:60:9f:b5:39:08:e3:94:e5:11: d2:d3:0a:e3:20:19:ee:11:a0:ae:3e:af:08:29:00: 42:e7:03:84:54:31:4f:c6:db:66:f1:5a:bd:e9:c9: 31:5c:f3:3d:31:90:fb:f9:31:74:d2:72:f7:1d:b7: 69:b5:8b:ed:6f:d5:31:99:69:cf:5a:e8:eb:60:28: e3:e5:ed:dd:ba:8e:d6:6c:24:53:37:7c:30:ee:ea: 90:a4:bb:73:f2:f9:c2:41:8a:e5:69:ba:2e:81:e8: c2:66:76:5f:a6:67:0d:80:3f:a3:04:3d:57:6c:f0: 32:27:90:ba:c5:26:7a:d2:ef:18:a0:3c:2b:92:a9: 62:49:1b:74:4a:87:3a:7a:01:8a:e7:76:e9:8b:ee: 81:52:ca:21:13:5c:d6:af:53:6c:b5:4c:97:e5:ce: f6:b7:05:c2:63:ec:90:a8:1e:07:b7:2d:d0:76:73: b3:a4:be:13:9e:a5:ce:3f:9e:84:19:37:41:79:86: 91:ff:34:9f:5a:85:fa:8f:84:87:5e:d3:eb:17:f2: 92:fa:a3:c6:47:dd:43:40:25:34:96:77:82:68:14: 4c:a0:39:2e:44:2a:4e:37:83:6e:6f:85:96:b7:09: 89:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AA:0E:0B:2B:4F:2F:A4:EC:B2:81:20:CD:0D:8E:40:C3:B6:47:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/952f944f-b43d-3cf7-982e-842c95d833f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl X509v3 Authority Key Identifier: keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer sbgp-ipAddrBlock: critical IPv4: 64.37.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:97:d1:d9:03:7e:dd:9b:67:dc:f9:ba:5f:20:b6:aa:e4:56: 34:ca:75:c6:4e:fe:05:4c:f0:15:9a:42:b4:1c:0c:c4:b7:b7: 46:bf:82:54:59:cc:dc:e8:b9:1d:f2:40:3e:b1:5b:17:dc:f0: 6f:4b:14:cd:3d:d6:aa:11:58:e8:3b:46:3c:02:a7:b3:14:8c: 52:1b:e5:39:84:4e:9a:0c:bf:3a:37:a1:37:f8:54:14:fe:66: 4d:9d:ab:ec:ef:7c:f6:e2:a0:e8:25:5a:1d:8b:39:2a:bc:1c: 67:2a:98:6b:af:40:96:5f:31:0c:3a:75:6b:ac:bf:55:fa:f4: 31:71:fa:fc:96:d0:7b:e3:4d:f7:07:2e:e2:7f:9c:9a:f1:cb: 10:bc:7d:a5:a7:04:55:aa:29:bb:df:c6:85:12:57:2c:af:82: e1:13:08:b8:30:a6:45:30:29:d3:df:72:ba:f9:d9:50:19:26: 78:0d:39:aa:77:e6:27:04:39:7a:0e:01:ba:e8:1a:40:64:55: bb:db:2a:70:da:30:73:6b:3b:21:b9:eb:b3:eb:d6:cd:00:af: 41:81:c4:65:62:8e:b7:1c:a6:00:8a:63:4f:43:92:2c:f8:fc: c0:c8:5d:c7:76:49:91:1c:ca:48:ce:ec:e3:fa:d2:ec:39:31: 04:77:ea:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8sHH/tlsJLjlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM3YTZmYzgtMzVjMy00MTUxLWFhMmUtMjUxMzQyMGY5 MzQ0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWNiMjk3YmQtNzRlMC00OGFhLTgwNWEtZjc2ODNjZGZhODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBXOhBUpXMJTKlaTkayE+PXtOJFgn7U5COOU 5RHS0wrjIBnuEaCuPq8IKQBC5wOEVDFPxttm8Vq96ckxXPM9MZD7+TF00nL3Hbdp tYvtb9UxmWnPWujrYCjj5e3duo7WbCRTN3ww7uqQpLtz8vnCQYrlabougejCZnZf pmcNgD+jBD1XbPAyJ5C6xSZ60u8YoDwrkqliSRt0Soc6egGK53bpi+6BUsohE1zW r1NstUyX5c72twXCY+yQqB4Hty3QdnOzpL4TnqXOP56EGTdBeYaR/zSfWoX6j4SH XtPrF/KS+qPGR91DQCU0lneCaBRMoDkuRCpON4Nub4WWtwmJ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaqDgsrTy+k7LKBIM0NjkDDtkfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Mzdh NmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEzNDIwZjkzNDQvOTUyZjk0NGYtYjQzZC0z Y2Y3LTk4MmUtODQyYzk1ZDgzM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTM3YTZmYzgtMzVjMy00MTUxLWFh MmUtMjUxMzQyMGY5MzQ0LzkzN2E2ZmM4LTM1YzMtNDE1MS1hYTJlLTI1MTM0MjBm OTM0NC5jcmwwHwYDVR0jBBgwFoAUah/mTh0WOW2Gbpk7qGQprsNO/HgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzdhNmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEz NDIwZjkzNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyX0dkDft2bZ9z5ul8gtqrkVjTKdcZO/gVM8BWaQrQcDMS3t0a/glRZ zNzouR3yQD6xWxfc8G9LFM091qoRWOg7RjwCp7MUjFIb5TmETpoMvzo3oTf4VBT+ Zk2dq+zvfPbioOglWh2LOSq8HGcqmGuvQJZfMQw6dWusv1X69DFx+vyW0HvjTfcH LuJ/nJrxyxC8faWnBFWqKbvfxoUSVyyvguETCLgwpkUwKdPfcrr52VAZJngNOap3 5icEOXoOAbroGkBkVbvbKnDaMHNrOyG567Pr1s0Ar0GBxGVijrccpgCKY09Dkiz4 /MDIXcd2SZEcykjO7OP60uw5MQR36h8= -----END CERTIFICATE-----Generated at Sat Oct 10 10:53:33 2026 by rpki-client