$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e5014a5-4178-3345-9d63-4e4d4747ae4f.roa File: 4e5014a5-4178-3345-9d63-4e4d4747ae4f.roa (raw, json) Hash identifier: PtUQ2tRXYs+qqeTc8DQsuRlpoqPB39GRLTHTrHabP6U= Subject key identifier: C0:F2:C5:D1:8A:D9:08:54:DE:A8:EF:26:2C:2D:73:5E:50:5B:11:F9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49829033B947B6CC98621900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e5014a5-4178-3345-9d63-4e4d4747ae4f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 66.208.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:90:33:b9:47:b6:cc:98:62:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b7649342-7f59-4555-8dda-166d69cceeff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:03:64:8a:4a:b8:93:a5:c4:f1:b1:0a:4c: 23:90:7f:8f:29:42:5d:37:74:1f:95:2f:be:7d:55: 30:97:76:3f:d8:d9:e2:ea:64:dc:65:77:59:83:80: 68:28:71:3e:31:f4:7e:92:25:b0:60:4b:be:31:c6: f9:04:e9:e5:63:1a:bc:27:be:8c:7f:a1:49:05:63: b2:39:fd:32:00:8e:34:c7:c3:06:79:e8:3c:02:03: f4:03:94:f9:1c:b9:1b:a4:37:92:2c:de:fb:34:d5: 5f:f2:1f:94:59:ad:0b:dc:ef:9a:00:da:62:47:78: d9:f3:b9:67:ad:23:9c:8e:85:4c:02:4e:f7:77:82: d0:7d:36:49:1c:df:ad:d5:3e:42:63:f8:8c:23:59: e2:a4:3d:11:68:30:7a:e1:aa:f3:77:33:43:db:79: 07:27:a0:76:66:c4:58:6f:17:61:c3:13:67:d4:f6: 62:af:24:f7:3c:dc:8a:3b:94:95:6c:43:2b:b4:c5: 9a:2f:af:0c:17:61:93:6a:9b:db:ef:68:3d:4e:45: d1:a1:42:de:82:9a:e9:79:a1:6e:a9:bd:31:fb:d7: bc:c7:4b:0a:c2:0f:7b:c9:74:1d:8f:1e:ee:99:22: df:6e:72:5a:23:60:34:9c:67:84:b1:bc:c9:16:fa: 6e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F2:C5:D1:8A:D9:08:54:DE:A8:EF:26:2C:2D:73:5E:50:5B:11:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e5014a5-4178-3345-9d63-4e4d4747ae4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.208.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:56:9d:2b:86:88:fc:bf:af:8a:eb:c8:39:9a:3e:33:7d:1c: a7:3f:2f:49:96:f9:e5:fc:c9:5e:ed:4f:cd:5d:5f:b3:52:e3: a1:fa:ec:b0:fa:50:6c:78:ba:de:12:31:da:39:a7:e0:3c:c8: 04:c4:4c:c8:ec:84:09:dd:29:44:68:4d:69:3f:a9:26:52:58: a7:8e:6c:b2:ec:fd:4a:bf:52:5b:37:5a:06:42:9e:7c:e4:bf: 76:66:04:bb:9b:35:3d:d7:e8:9b:ef:3b:ea:c9:36:81:c5:f1: 94:e3:38:5a:b6:ba:75:0d:9a:12:77:80:80:60:0e:e9:7c:89: dd:a1:c0:f1:f0:cb:11:b9:05:b9:af:56:16:da:48:a9:8e:c2: 4a:09:a2:b5:0c:8e:e7:42:cc:c4:10:99:62:be:99:12:4d:b2: 89:d5:6d:32:4d:35:4a:a2:44:39:ff:f3:07:dd:97:78:5c:ba: 7b:9f:86:9e:16:27:e3:35:4e:63:fb:e6:63:9b:7e:d4:c8:4b: 89:cf:39:02:dc:95:f6:46:69:3b:d4:02:b6:4b:66:c2:df:fa: fd:02:95:74:e5:ab:8d:af:47:52:f7:86:fe:42:31:7a:1e:90: 33:b4:a6:07:ce:f3:95:47:8e:57:0c:55:6a:ef:27:22:44:6b: 9c:35:a9:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgpAzuUe2zJhiGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjc2NDkzNDItN2Y1OS00NTU1LThkZGEtMTY2ZDY5Y2NlZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkUDZIpKuJOlxPGxCkwjkH+PKUJdN3QflS++ fVUwl3Y/2Nni6mTcZXdZg4BoKHE+MfR+kiWwYEu+Mcb5BOnlYxq8J76Mf6FJBWOy Of0yAI40x8MGeeg8AgP0A5T5HLkbpDeSLN77NNVf8h+UWa0L3O+aANpiR3jZ87ln rSOcjoVMAk73d4LQfTZJHN+t1T5CY/iMI1nipD0RaDB64arzdzND23kHJ6B2ZsRY bxdhwxNn1PZiryT3PNyKO5SVbEMrtMWaL68MF2GTapvb72g9TkXRoULegprpeaFu qb0x+9e8x0sKwg97yXQdjx7umSLfbnJaI2A0nGeEsbzJFvpufwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDyxdGK2QhU3qjvJiwtc15QWxH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGU1MDE0YTUtNDE3OC0z MzQ1LTlkNjMtNGU0ZDQ3NDdhZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtWnSuGiPy/r4rryDmaPjN9HKc/L0mW+eX8yV7tT81dX7NS46H67LD6 UGx4ut4SMdo5p+A8yATETMjshAndKURoTWk/qSZSWKeObLLs/Uq/Uls3WgZCnnzk v3ZmBLubNT3X6JvvO+rJNoHF8ZTjOFq2unUNmhJ3gIBgDul8id2hwPHwyxG5Bbmv VhbaSKmOwkoJorUMjudCzMQQmWK+mRJNsonVbTJNNUqiRDn/8wfdl3hcunufhp4W J+M1TmP75mObftTIS4nPOQLclfZGaTvUArZLZsLf+v0ClXTlq42vR1L3hv5CMXoe kDO0pgfO85VHjlcMVWrvJyJEa5w1qZ0= -----END CERTIFICATE-----Generated at Fri Sep 25 12:44:45 2026 by rpki-client