$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e18a442-504b-3d9f-8667-39653efef710.roa File: 2e18a442-504b-3d9f-8667-39653efef710.roa (raw, json) Hash identifier: bXjt+v8rlZtxJLLxD+GNdXNi0QwsTso+KQVuVU/EEmI= Subject key identifier: 4D:D6:F9:22:DA:61:F2:ED:D7:5B:53:72:6C:AE:3F:A3:3D:DD:A7:4B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D350139AE8B5E8FD0AC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e18a442-504b-3d9f-8667-39653efef710.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33660 IP address blocks: 174.162.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:35:01:39:ae:8b:5e:8f:d0:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=3d31c344-f284-4de1-899c-62aa1d647bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:4b:3f:46:7d:3e:e8:98:d0:e2:dc:7a:d1: 1e:c3:2f:45:c2:4b:4a:2a:86:d5:9b:68:4a:ce:68: b5:4b:e2:68:84:17:af:47:e1:1d:c9:d5:f4:89:ce: b9:06:c9:36:ef:e9:22:45:ca:85:70:58:81:37:20: 60:3d:17:37:9e:92:4a:22:3a:18:77:e2:22:e9:5a: 03:e5:71:8c:16:19:f4:34:d2:81:02:21:d9:c0:3a: b4:ee:dc:22:02:34:53:60:58:af:6c:09:73:2f:a8: 0d:56:2f:12:95:25:78:c7:12:9c:e2:fd:c8:fb:0b: 5b:dc:9d:7c:32:f3:ab:93:9b:75:a7:34:fc:89:4e: ac:5a:7c:02:4f:73:25:09:c6:ad:93:2d:1b:27:64: 9b:44:1e:41:52:4d:4a:ef:bb:1c:64:05:c8:63:a0: a1:33:d3:23:9d:be:5d:b9:b9:27:0e:0f:cd:49:7e: a7:89:ff:cd:31:c5:29:94:43:fa:64:e6:c8:fd:6b: a4:bb:a7:98:6a:ce:97:1f:c8:f8:42:4b:9e:63:ae: 67:22:f9:ff:c6:8e:bd:99:68:78:e2:65:ab:88:96: 10:4f:34:57:d9:8b:d9:e4:11:8e:f8:2c:11:3f:45: f1:a4:70:bb:43:9c:39:cb:be:f6:8d:6e:95:5f:dc: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D6:F9:22:DA:61:F2:ED:D7:5B:53:72:6C:AE:3F:A3:3D:DD:A7:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e18a442-504b-3d9f-8667-39653efef710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.162.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:75:81:e1:1d:6a:5d:01:8a:93:36:ec:e8:6a:31:ed:83:2e: ae:26:85:11:fa:4e:f2:9b:86:59:f9:67:a0:a9:ed:9f:e0:c1: 23:d6:3d:7f:73:8d:f8:40:48:20:5f:97:bb:39:cb:d2:55:d4: 5f:28:54:eb:7b:73:3d:96:e5:fd:20:f9:37:0e:c8:cf:da:95: 90:47:ae:c2:11:2b:53:80:18:b3:fd:14:b2:76:3f:ff:64:92: 54:e5:e8:23:97:bf:f2:15:62:e8:a6:0c:23:5d:9a:b7:98:c6: 31:85:8e:d6:03:b7:9d:eb:db:de:65:ca:b8:6e:7a:63:c1:b8: 8b:e6:54:c9:e0:69:0a:1e:d2:8f:34:32:6e:fa:e1:bb:0f:3f: 1e:a5:ae:ef:40:9c:bc:00:a1:1b:bb:fb:e7:75:1c:98:ba:50: f1:34:0f:f1:43:9c:35:b4:e5:dd:91:8d:6f:e7:5d:68:ee:8f: a6:2f:a9:82:40:40:a4:6d:51:64:82:91:37:11:26:85:46:99: 82:d5:ab:1c:13:58:2b:cc:e8:98:ee:c2:f0:92:2f:df:3b:a2: 47:25:4a:9a:93:6c:69:c6:56:2c:c8:d9:c9:c9:c9:59:6b:6f: f7:f1:81:04:57:49:09:75:f8:47:2f:62:e7:80:19:78:77:d6: f8:36:32:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnTUBOa6LXo/QrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk M2QzMWMzNDQtZjI4NC00ZGUxLTg5OWMtNjJhYTFkNjQ3YmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfxLP0Z9PuiY0OLcetEewy9FwktKKobVm2hK zmi1S+JohBevR+EdydX0ic65Bsk27+kiRcqFcFiBNyBgPRc3npJKIjoYd+Ii6VoD 5XGMFhn0NNKBAiHZwDq07twiAjRTYFivbAlzL6gNVi8SlSV4xxKc4v3I+wtb3J18 MvOrk5t1pzT8iU6sWnwCT3MlCcatky0bJ2SbRB5BUk1K77scZAXIY6ChM9Mjnb5d ubknDg/NSX6nif/NMcUplEP6ZObI/Wuku6eYas6XH8j4QkueY65nIvn/xo69mWh4 4mWriJYQTzRX2YvZ5BGO+CwRP0XxpHC7Q5w5y772jW6VX9xpTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3W+SLaYfLt11tTcmyuP6M93adLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmUxOGE0NDItNTA0Yi0z ZDlmLTg2NjctMzk2NTNlZmVmNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI11geEdal0BipM27OhqMe2DLq4mhRH6TvKbhln5Z6Cp7Z/gwSPWPX9z jfhASCBfl7s5y9JV1F8oVOt7cz2W5f0g+TcOyM/alZBHrsIRK1OAGLP9FLJ2P/9k klTl6COXv/IVYuimDCNdmreYxjGFjtYDt53r295lyrhuemPBuIvmVMngaQoe0o80 Mm764bsPPx6lru9AnLwAoRu7++d1HJi6UPE0D/FDnDW05d2RjW/nXWjuj6YvqYJA QKRtUWSCkTcRJoVGmYLVqxwTWCvM6JjuwvCSL987okclSpqTbGnGVizI2cnJyVlr b/fxgQRXSQl1+EcvYueAGXh31vg2MsM= -----END CERTIFICATE-----Generated at Sat Sep 26 18:02:30 2026 by rpki-client