$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/132bdfca-908a-373e-94f1-acedba809c54.roa File: 132bdfca-908a-373e-94f1-acedba809c54.roa (raw, json) Hash identifier: f4dGaVeVsUIL66A+AVnameotdGeWsb+uNne5kOj+o8Q= Subject key identifier: 29:D3:FB:B9:E0:DB:BF:3F:17:A5:F5:2C:4D:E5:92:4F:A7:4B:08:EF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4978ED98FE3B5F4FF513E680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/132bdfca-908a-373e-94f1-acedba809c54.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33668 IP address blocks: 70.88.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:ed:98:fe:3b:5f:4f:f5:13:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1339b272-8b03-4416-983d-0e6d4d863608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c8:ab:01:f9:07:20:bc:29:73:e1:a5:3d:68: 87:91:af:3b:c2:05:b1:54:df:3c:e5:b4:c8:3f:15: 02:34:68:8f:22:4b:5e:e1:f7:d9:23:ce:5f:7b:9d: 26:32:61:18:e0:74:82:0a:77:23:51:bb:62:45:9d: fb:62:9d:97:7d:f4:8d:51:23:7e:51:f8:f7:da:af: 62:77:07:01:e1:a8:87:8f:5e:10:d4:c6:fc:3f:6f: fe:f3:6c:74:6d:bf:63:54:b8:c9:fc:83:b0:b4:6e: 35:57:4a:e9:c7:d9:0b:45:6e:a0:79:ec:e4:6c:e1: f1:ee:78:30:60:32:74:09:ee:a6:c5:b8:40:f0:00: 3d:29:9e:3a:b3:5e:51:71:41:c1:59:76:20:3c:a6: 5b:11:52:95:f8:08:77:99:fc:6e:74:3b:7c:43:20: 2a:64:7b:4b:8a:b9:99:26:75:43:fc:06:81:d1:d7: 64:49:ce:67:e0:bb:32:ef:37:e2:61:12:92:bb:16: ec:1e:04:1c:0b:6e:ed:23:d7:cd:ed:a1:5d:b5:ae: 7e:75:18:c6:e8:c3:cf:df:03:cc:f8:7d:bd:9e:b5: 28:24:f2:38:e8:90:8b:d8:67:f1:aa:70:bd:c3:bb: 34:27:99:37:43:13:a5:25:2c:a1:75:c1:57:c7:eb: bf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D3:FB:B9:E0:DB:BF:3F:17:A5:F5:2C:4D:E5:92:4F:A7:4B:08:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/132bdfca-908a-373e-94f1-acedba809c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.88.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:cc:a7:4c:17:10:d9:ad:6e:be:80:f6:e2:fd:e7:00:bd:eb: 9d:04:4c:80:b0:ea:e2:59:0e:fb:f1:35:7d:f2:b0:29:cf:24: 47:eb:16:02:59:44:c8:de:ba:53:73:87:8c:f8:60:21:24:ed: a5:37:c0:e3:22:ab:91:8b:8d:a6:37:ce:2d:f4:1d:bf:e9:d0: 7d:36:33:07:a0:85:ab:49:d9:bf:b3:6d:3c:37:9f:78:29:16: b6:f5:8a:75:53:53:77:a4:24:40:f7:46:df:0d:ba:0b:57:b7: a3:4f:88:3e:e7:02:ee:48:73:4d:4d:92:50:b1:8b:31:6b:a3: 54:f2:4c:0e:73:d2:80:58:0a:54:bc:08:44:dc:83:c7:5f:51: 20:4f:12:6e:56:85:10:cf:d4:f4:39:40:48:49:7d:22:d2:d6: 68:64:cc:d8:56:a0:74:11:fe:05:d8:92:b1:7a:29:4f:8e:29: a7:c8:03:ea:78:fb:48:50:f6:73:f1:64:66:11:02:ce:df:5a: 06:db:38:16:3c:07:a7:2f:80:b0:ee:86:62:98:13:5a:24:b4: 11:cf:10:1c:d2:74:be:f5:c7:df:8e:6e:6a:eb:83:53:ab:b3: 9b:5c:6f:45:6a:00:ca:bf:25:ed:2c:2c:e3:b3:d6:05:e0:66: 80:fd:30:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeO2Y/jtfT/UT5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTMzOWIyNzItOGIwMy00NDE2LTk4M2QtMGU2ZDRkODYzNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcirAfkHILwpc+GlPWiHka87wgWxVN885bTI PxUCNGiPIkte4ffZI85fe50mMmEY4HSCCncjUbtiRZ37Yp2XffSNUSN+Ufj32q9i dwcB4aiHj14Q1Mb8P2/+82x0bb9jVLjJ/IOwtG41V0rpx9kLRW6geezkbOHx7ngw YDJ0Ce6mxbhA8AA9KZ46s15RcUHBWXYgPKZbEVKV+Ah3mfxudDt8QyAqZHtLirmZ JnVD/AaB0ddkSc5n4Lsy7zfiYRKSuxbsHgQcC27tI9fN7aFdta5+dRjG6MPP3wPM +H29nrUoJPI46JCL2GfxqnC9w7s0J5k3QxOlJSyhdcFXx+u/uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnT+7ng278/F6X1LE3lkk+nSwjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTMyYmRmY2EtOTA4YS0z NzNlLTk0ZjEtYWNlZGJhODA5YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRlimMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjMp0wXENmtbr6A9uL95wC9650ETICw6uJZDvvxNX3ysCnPJEfrFgJZ RMjeulNzh4z4YCEk7aU3wOMiq5GLjaY3zi30Hb/p0H02MweghatJ2b+zbTw3n3gp Frb1inVTU3ekJED3Rt8NugtXt6NPiD7nAu5Ic01NklCxizFro1TyTA5z0oBYClS8 CETcg8dfUSBPEm5WhRDP1PQ5QEhJfSLS1mhkzNhWoHQR/gXYkrF6KU+OKafIA+p4 +0hQ9nPxZGYRAs7fWgbbOBY8B6cvgLDuhmKYE1oktBHPEBzSdL71x9+Obmrrg1Or s5tcb0VqAMq/Je0sLOOz1gXgZoD9MGI= -----END CERTIFICATE-----Generated at Fri Sep 25 21:56:40 2026 by rpki-client