$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eb4e2d8-d5cf-3bc2-812a-d724f6b4b420.roa File: 4eb4e2d8-d5cf-3bc2-812a-d724f6b4b420.roa (raw, json) Hash identifier: N930XZIZVS6LVFqFUEBn1d+Ew/qqVOqfPyCXguPoyK0= Subject key identifier: EF:A0:9E:6A:E0:B2:24:EC:8F:EB:A7:87:F2:9C:1D:1E:0E:21:34:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E7E261FAF9B5F2ACEA000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eb4e2d8-d5cf-3bc2-812a-d724f6b4b420.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33660 IP address blocks: 67.171.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:7e:26:1f:af:9b:5f:2a:ce:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=873806cc-fbf9-4e8f-bcbd-0fb9fa4a56c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:d7:bd:a2:70:cf:e3:f7:f5:e4:bb:6c:5a: ba:95:53:40:a5:a2:e9:b0:c6:fb:d6:2e:e7:48:e9: 73:c6:3d:50:ab:79:2f:1f:40:93:9e:d5:dd:7e:03: 4e:0a:b9:43:c9:81:2c:37:e2:56:59:bf:e6:57:9b: 5c:f1:49:92:33:aa:52:26:2a:68:4e:6e:db:d2:35: d7:f6:74:c8:01:25:48:a3:37:5b:f2:44:31:29:2b: a0:c1:29:65:82:31:25:ef:3b:5d:41:bc:99:b4:b4: 1e:8d:df:e5:78:1c:e9:9b:79:eb:60:28:54:e1:60: e8:64:67:31:f3:d6:10:2e:78:1f:49:25:ca:6c:f7: ae:92:04:4f:96:bc:11:84:3b:2b:be:ea:67:4e:bf: bb:66:49:25:45:36:41:a8:d5:8e:5f:5e:22:38:b1: 3d:7b:cb:ad:0b:11:f5:17:f8:f9:93:02:4f:4b:d0: 18:1b:22:11:97:95:89:ba:ee:67:c4:56:54:9c:c2: ea:7e:89:80:60:a5:58:f6:22:cb:75:5f:58:3f:a0: 6b:95:bb:58:d2:43:1b:e3:dd:b5:aa:1c:11:d4:de: 32:ff:17:82:97:ca:17:10:45:07:a5:d4:53:75:61: 8e:e0:4f:04:37:a6:f8:65:29:3f:b0:a6:3c:63:30: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A0:9E:6A:E0:B2:24:EC:8F:EB:A7:87:F2:9C:1D:1E:0E:21:34:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eb4e2d8-d5cf-3bc2-812a-d724f6b4b420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.171.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d8:e0:00:66:e2:e7:e0:d3:17:f6:d3:ed:70:f9:03:89:7b: ca:e2:4f:aa:04:3f:d8:9c:3e:63:44:da:f5:e7:b7:07:8f:b7: 1e:98:0a:b0:86:e0:3a:25:89:a4:54:81:5a:a9:af:9f:ba:86: bc:0d:33:42:65:35:c4:79:40:cf:a2:2d:3d:b6:3a:dc:10:95: 1c:05:a3:30:6a:96:c3:c6:b2:06:41:ab:1f:da:2f:93:b5:09: 41:bf:8a:37:8f:c5:cb:a0:23:77:9b:04:06:d9:41:27:39:fb: 07:90:ce:d9:09:05:0b:1c:85:32:88:09:f2:e3:23:b2:18:75: 61:37:66:1e:20:84:07:9e:cd:cb:5d:23:f5:68:81:9a:39:e4: 0f:86:e5:81:61:79:e2:0e:d7:f6:ed:0a:ec:ce:1a:22:4e:c7: 44:04:45:12:f6:c8:40:40:34:d8:7f:bb:8e:e9:a4:41:73:6c: 08:68:78:55:bd:08:7a:ed:fb:51:f3:5f:d0:cc:c1:17:86:a2: 16:c8:54:25:1c:c8:a8:07:43:4d:6f:6e:dd:6d:f9:49:9d:99: dd:c6:9f:94:cd:bc:38:4f:79:fb:21:4a:b2:19:60:26:8f:c2: d1:6d:d3:2b:0f:f7:bd:96:08:30:39:34:ee:c6:e6:d5:6d:24: 32:91:05:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnn4mH6+bXyrOoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ODczODA2Y2MtZmJmOS00ZThmLWJjYmQtMGZiOWZhNGE1NmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTDXvaJwz+P39eS7bFq6lVNApaLpsMb71i7n SOlzxj1Qq3kvH0CTntXdfgNOCrlDyYEsN+JWWb/mV5tc8UmSM6pSJipoTm7b0jXX 9nTIASVIozdb8kQxKSugwSllgjEl7ztdQbyZtLQejd/leBzpm3nrYChU4WDoZGcx 89YQLngfSSXKbPeukgRPlrwRhDsrvupnTr+7ZkklRTZBqNWOX14iOLE9e8utCxH1 F/j5kwJPS9AYGyIRl5WJuu5nxFZUnMLqfomAYKVY9iLLdV9YP6BrlbtY0kMb4921 qhwR1N4y/xeCl8oXEEUHpdRTdWGO4E8EN6b4ZSk/sKY8YzCpoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+gnmrgsiTsj+unh/KcHR4OITSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGViNGUyZDgtZDVjZi0z YmMyLTgxMmEtZDcyNGY2YjRiNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6twMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTY4ABm4ufg0xf20+1w+QOJe8riT6oEP9icPmNE2vXntwePtx6YCrCG 4DoliaRUgVqpr5+6hrwNM0JlNcR5QM+iLT22OtwQlRwFozBqlsPGsgZBqx/aL5O1 CUG/ijePxcugI3ebBAbZQSc5+weQztkJBQschTKICfLjI7IYdWE3Zh4ghAeezctd I/VogZo55A+G5YFheeIO1/btCuzOGiJOx0QERRL2yEBANNh/u47ppEFzbAhoeFW9 CHrt+1HzX9DMwReGohbIVCUcyKgHQ01vbt1t+Umdmd3Gn5TNvDhPefshSrIZYCaP wtFt0ysP972WCDA5NO7G5tVtJDKRBbo= -----END CERTIFICATE-----Generated at Thu Sep 24 20:38:29 2026 by rpki-client