$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b21c55a-c7f8-3c53-9985-3a68804bbe1c.roa File: 4b21c55a-c7f8-3c53-9985-3a68804bbe1c.roa (raw, json) Hash identifier: 4xY3b9fI7WrvXVaYhkRVkcR3FWwMy/IhVCqKRYQ3tRE= Subject key identifier: 9A:3D:DB:D8:87:CB:F3:00:43:6D:F9:B2:B8:0F:6E:DC:69:17:34:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F03A831E95AF0A35216BFDF68 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b21c55a-c7f8-3c53-9985-3a68804bbe1c.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 33659 IP address blocks: 174.167.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:31:e9:5a:f0:a3:52:16:bf:df:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=8b05abc3-1bbf-420d-86b4-d506f5f807b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6b:66:1f:8b:09:f6:29:98:5f:82:d1:8d:d5: 25:e1:8a:b7:2f:d4:dc:71:9b:8b:6d:54:6f:0c:7c: 9e:97:06:35:dd:93:eb:f5:2e:6b:25:8a:f2:63:44: e2:99:0c:49:e9:85:64:9f:5f:fa:e3:51:54:68:70: ac:66:65:3e:b4:e3:c7:42:2f:8e:40:3d:b2:f0:c6: 58:d7:3f:1c:f4:fb:a4:25:68:3f:6f:e3:88:d0:94: ab:97:11:e2:41:f6:6e:13:6e:b8:3d:5d:40:d0:6b: d4:45:8e:08:78:4b:56:01:95:f8:dd:f9:79:60:a0: 98:b5:01:fb:1c:2e:f4:98:4f:c6:6c:48:52:43:88: 5b:0b:97:94:35:cb:d5:2d:1d:89:01:15:51:2c:a5: 02:3b:08:54:66:a7:1d:7f:73:81:48:4f:62:7f:4b: 2b:ee:c0:04:52:4f:b5:e0:5a:23:44:92:10:7d:b5: be:1b:e1:b4:31:26:4a:46:05:90:e3:91:43:b7:9e: 51:a0:9a:7f:ef:a8:9e:93:49:4c:56:69:ae:d9:9b: 60:e7:f2:fa:8d:4f:31:12:c7:2c:bb:86:c0:d9:08: 0d:90:60:cb:e2:05:fb:6f:b6:59:85:bf:cc:c6:c3: 2e:3c:48:b0:66:4f:67:2d:4b:23:ba:8c:c7:2f:b1: 35:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3D:DB:D8:87:CB:F3:00:43:6D:F9:B2:B8:0F:6E:DC:69:17:34:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b21c55a-c7f8-3c53-9985-3a68804bbe1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.167.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a6:3c:88:a5:38:b7:85:e5:4a:da:96:ab:3e:9c:00:3c:8f: 7b:f1:29:39:cd:2c:d9:67:c2:f7:5d:c4:e2:28:c1:e8:06:2a: 2e:26:75:7a:bb:b4:01:ea:5d:62:7b:02:68:85:97:2d:08:42: 68:71:79:15:2e:b2:da:da:53:28:5a:33:ba:22:db:a6:70:e0: 4e:19:f9:90:c7:01:72:27:a7:fa:8b:5d:c4:39:e6:01:99:c1: 62:ee:a2:53:07:05:af:70:5d:fd:b7:57:7e:ca:b3:08:52:85: 87:c5:b6:0f:8c:e0:85:3b:19:f8:f5:74:d3:b0:30:f2:54:b9: c5:37:77:e7:cc:00:e6:4f:03:4d:e0:0e:ae:b2:c5:88:58:b2: 50:6b:5c:9b:7e:e8:15:ba:54:1f:1a:e5:f2:37:6e:1c:84:0e: a2:40:30:f2:24:79:75:d1:8f:0d:56:6a:a2:b5:b5:2c:2e:77: be:62:93:75:9a:b1:a1:42:18:cc:ff:b1:12:10:46:33:95:8d: d5:c7:b0:3c:a2:02:9b:17:e0:34:f0:1f:92:33:3b:25:c9:81: 13:c8:a7:2c:d5:bc:d9:1e:aa:93:d7:77:4d:50:32:09:37:5b: 53:19:21:56:e0:ea:62:19:d2:8f:0b:9f:12:13:d7:07:0e:39: eb:af:dd:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8DqDHpWvCjUha/32gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk OGIwNWFiYzMtMWJiZi00MjBkLTg2YjQtZDUwNmY1ZjgwN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWtmH4sJ9imYX4LRjdUl4Yq3L9TccZuLbVRv DHyelwY13ZPr9S5rJYryY0TimQxJ6YVkn1/641FUaHCsZmU+tOPHQi+OQD2y8MZY 1z8c9PukJWg/b+OI0JSrlxHiQfZuE264PV1A0GvURY4IeEtWAZX43fl5YKCYtQH7 HC70mE/GbEhSQ4hbC5eUNcvVLR2JARVRLKUCOwhUZqcdf3OBSE9if0sr7sAEUk+1 4FojRJIQfbW+G+G0MSZKRgWQ45FDt55RoJp/76iek0lMVmmu2Ztg5/L6jU8xEscs u4bA2QgNkGDL4gX7b7ZZhb/MxsMuPEiwZk9nLUsjuozHL7E1GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJo929iHy/MAQ235srgPbtxpFzSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGIyMWM1NWEtYzdmOC0z YzUzLTk5ODUtM2E2ODgwNGJiZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqd8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKmPIilOLeF5Uralqs+nAA8j3vxKTnNLNlnwvddxOIowegGKi4mdXq7 tAHqXWJ7AmiFly0IQmhxeRUustraUyhaM7oi26Zw4E4Z+ZDHAXInp/qLXcQ55gGZ wWLuolMHBa9wXf23V37KswhShYfFtg+M4IU7Gfj1dNOwMPJUucU3d+fMAOZPA03g Dq6yxYhYslBrXJt+6BW6VB8a5fI3bhyEDqJAMPIkeXXRjw1WaqK1tSwud75ik3Wa saFCGMz/sRIQRjOVjdXHsDyiApsX4DTwH5IzOyXJgRPIpyzVvNkeqpPXd01QMgk3 W1MZIVbg6mIZ0o8LnxIT1wcOOeuv3Qg= -----END CERTIFICATE-----Generated at Sat Sep 26 18:03:30 2026 by rpki-client