$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b43faee-9fe5-37c9-9265-08162b1d9b1a.roa File: 3b43faee-9fe5-37c9-9265-08162b1d9b1a.roa (raw, json) Hash identifier: 5xUGdJ7GtmuiCeboyadRiEtOmUQsugXAyOOWqb2ZAus= Subject key identifier: 63:D5:D2:16:60:7F:C3:89:FE:12:F9:F7:53:3C:3F:86:16:B6:5B:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F498772E4014C18F350762F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b43faee-9fe5-37c9-9265-08162b1d9b1a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 67.167.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:72:e4:01:4c:18:f3:50:76:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ba5ca8ca-736b-46bf-99a7-326e38e8c179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:45:4e:33:11:58:a6:04:24:8b:86:72:85:f0: 87:e2:76:bf:b7:ae:41:ee:ff:0d:7c:4a:1c:c5:53: c1:3f:06:7a:95:07:20:d6:58:14:ca:46:5d:53:b4: 76:3d:28:f6:f6:0e:ac:11:a2:11:9f:e8:09:7d:92: 09:1b:39:a8:63:ed:b6:4e:15:3d:ec:d6:7d:05:e2: 8e:0a:da:98:bd:03:bf:a6:a4:dc:0a:61:97:ef:46: 83:4a:bb:07:37:ce:14:0d:43:7f:f7:45:87:65:e2: 56:81:ec:ec:80:b8:b1:63:3e:57:d3:9f:95:cb:97: fc:3e:00:3c:05:a2:84:8e:16:a7:ef:a5:a9:3b:d5: 04:db:9a:58:29:a1:0a:4c:5a:05:cc:2a:74:dc:4f: 3d:bc:d7:a7:d1:5c:5a:75:c1:11:09:38:d1:d2:d3: 1f:c9:fe:f8:46:f4:a3:3a:df:2f:32:93:c6:6f:b8: b4:25:80:36:93:fd:ee:d6:3d:ba:5a:db:57:5a:4b: 67:d3:22:64:ce:21:62:7f:0a:15:86:79:d0:08:e0: 86:66:35:b8:44:c4:49:52:a2:10:6b:15:6e:32:bb: b4:2b:13:d7:d4:ff:b2:d4:f6:06:a7:98:0b:4f:69: bd:bf:e6:13:7a:8d:f2:f2:18:8d:42:20:10:9b:86: 87:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D5:D2:16:60:7F:C3:89:FE:12:F9:F7:53:3C:3F:86:16:B6:5B:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b43faee-9fe5-37c9-9265-08162b1d9b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.167.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:20:d0:4e:89:be:6d:c8:af:4b:c0:7c:48:49:b5:45:1f:07: 4f:35:bb:c6:da:b7:06:e5:18:23:9a:92:8e:0b:1b:82:7c:83: f5:14:d7:79:d4:f0:cf:20:ff:5b:e1:3e:cf:c9:ac:70:12:b2: 65:c9:a1:2a:d7:ee:b2:0c:de:30:5e:2c:e9:41:a2:88:89:5d: af:7a:fc:be:f8:2b:ce:4b:28:a2:a9:b4:90:9a:4a:87:38:b2: 5f:4b:3e:86:45:51:ce:c3:5e:ba:ea:7e:43:ed:c3:64:cf:1a: 88:35:cf:cc:34:2a:3b:80:e4:02:7a:9c:59:ee:3b:13:40:50: e9:c8:40:92:d2:3f:5d:ef:3b:68:e7:45:e8:df:39:e8:5f:ea: 8e:be:5a:37:7f:e7:11:92:4e:07:e0:74:50:db:d1:70:14:26: 3b:78:43:25:ac:2c:68:d8:54:0e:b6:e5:ac:62:6f:13:af:f7: 76:68:67:9c:fc:80:e0:25:f3:68:1e:03:ab:cd:7b:77:09:21: 32:6b:c5:4a:b9:a4:76:fb:17:58:1f:1e:3b:f6:ac:5c:ff:79: 99:b1:ac:fd:db:44:47:dc:0a:54:88:68:42:86:6f:20:52:af: 65:4a:4b:18:74:55:7f:6a:5b:e8:56:8d:09:d0:8e:bd:5c:05: 70:14:3d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh3LkAUwY81B2L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmE1Y2E4Y2EtNzM2Yi00NmJmLTk5YTctMzI2ZTM4ZThjMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kVOMxFYpgQki4ZyhfCH4na/t65B7v8NfEoc xVPBPwZ6lQcg1lgUykZdU7R2PSj29g6sEaIRn+gJfZIJGzmoY+22ThU97NZ9BeKO CtqYvQO/pqTcCmGX70aDSrsHN84UDUN/90WHZeJWgezsgLixYz5X05+Vy5f8PgA8 BaKEjhan76WpO9UE25pYKaEKTFoFzCp03E89vNen0VxadcERCTjR0tMfyf74RvSj Ot8vMpPGb7i0JYA2k/3u1j26WttXWktn0yJkziFifwoVhnnQCOCGZjW4RMRJUqIQ axVuMru0KxPX1P+y1PYGp5gLT2m9v+YTeo3y8hiNQiAQm4aHxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPV0hZgf8OJ/hL591M8P4YWtls/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2I0M2ZhZWUtOWZlNS0z N2M5LTkyNjUtMDgxNjJiMWQ5YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6dIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsg0E6Jvm3Ir0vAfEhJtUUfB081u8batwblGCOako4LG4J8g/UU13nU 8M8g/1vhPs/JrHASsmXJoSrX7rIM3jBeLOlBooiJXa96/L74K85LKKKptJCaSoc4 sl9LPoZFUc7DXrrqfkPtw2TPGog1z8w0KjuA5AJ6nFnuOxNAUOnIQJLSP13vO2jn RejfOehf6o6+Wjd/5xGSTgfgdFDb0XAUJjt4QyWsLGjYVA625axibxOv93ZoZ5z8 gOAl82geA6vNe3cJITJrxUq5pHb7F1gfHjv2rFz/eZmxrP3bREfcClSIaEKGbyBS r2VKSxh0VX9qW+hWjQnQjr1cBXAUPQo= -----END CERTIFICATE-----Generated at Sun Sep 27 08:11:54 2026 by rpki-client