$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/590b2804-9210-39bb-b6f6-10e82d6f4488.roa File: 590b2804-9210-39bb-b6f6-10e82d6f4488.roa (raw, json) Hash identifier: tzzqN/ufWhK0k1vzh7L+ea04fXBcTrLlygtp83ognPs= Subject key identifier: 1F:F7:F1:3E:3B:C1:62:0F:83:F6:3D:5C:AB:42:12:E3:1A:D0:93:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497AA65B02C5E166EAD6D100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/590b2804-9210-39bb-b6f6-10e82d6f4488.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33661 IP address blocks: 173.12.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:a6:5b:02:c5:e1:66:ea:d6:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=351b8b7d-10cf-486a-907c-0123ec123760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:61:5b:24:73:4d:52:27:32:be:12:8c:3a:83: a4:a7:ac:84:b1:4c:a5:56:7a:01:20:d7:89:b9:b2: 91:79:16:81:a4:d2:7b:da:09:18:9e:70:ed:2b:6b: 39:e0:60:e6:f2:4d:94:2d:38:79:c3:14:15:e9:0a: 39:43:bf:16:33:04:08:ed:be:da:ee:a2:88:52:4d: 00:d5:9d:90:4e:00:93:af:0f:31:ac:a1:19:a3:ee: 9e:fe:86:40:ab:b6:f1:17:84:76:de:b1:36:64:fa: 1b:d0:d4:19:d3:18:33:14:7c:2e:ca:25:25:25:96: 04:25:0e:ab:85:4e:f7:ce:e6:67:cc:64:c6:19:2c: 21:5a:7b:4a:0e:56:66:c3:dc:93:b4:3b:02:21:72: ef:ce:78:3a:70:2d:6d:81:bd:ae:0a:a1:33:68:2b: 43:6b:28:65:8e:b0:5c:74:05:75:eb:30:65:d3:14: 73:8c:81:48:34:c5:ac:e5:11:f5:9f:d8:f8:77:77: 35:2c:15:b7:35:eb:2f:b1:a3:93:a2:5b:5c:93:01: 49:cd:97:0b:ae:a3:e0:25:58:5d:0e:af:57:d8:e4: 61:d8:0c:61:b2:e4:fd:e6:c1:b9:d2:e8:5b:40:a3: 78:c8:71:d6:97:e3:a4:2a:fd:12:0d:eb:bb:54:48: 14:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F7:F1:3E:3B:C1:62:0F:83:F6:3D:5C:AB:42:12:E3:1A:D0:93:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/590b2804-9210-39bb-b6f6-10e82d6f4488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 173.12.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:91:a7:8c:8f:30:bf:75:64:00:ec:5f:96:50:1f:e7:5a:37: 81:88:ce:bc:d2:9f:6f:6b:98:05:0c:ae:93:cf:97:3b:df:81: 4f:de:36:02:ff:7d:a8:cf:b3:e9:3b:0d:ba:4c:8c:da:44:83: 23:bd:1a:25:a4:55:8a:b4:11:03:9b:75:66:09:bb:05:23:03: bf:aa:bd:68:0c:af:01:80:32:93:ef:4f:3c:c6:6e:7d:88:01: d2:e7:0f:d3:b3:b7:18:16:e3:13:6f:94:e0:9b:17:70:15:38: dc:df:ef:26:f4:2a:94:4d:77:79:5e:ba:4d:24:f1:dd:c8:0e: 46:3a:ff:26:3f:08:25:68:03:1a:7a:78:3f:6c:5b:28:76:ea: ce:32:77:16:6d:55:bc:f2:53:51:63:d3:ab:c4:74:56:17:b4: e6:33:80:cd:5f:bf:c3:c1:42:4c:8a:c7:cd:2b:31:4a:c5:48: ee:a0:a1:dd:41:4e:5c:51:7e:13:43:df:87:7e:30:ff:b9:c6: fb:89:e5:47:38:1f:ce:66:8c:87:2c:4a:1e:a8:de:dc:bf:30: 67:dc:c6:c8:de:28:d1:c1:e2:05:25:5a:1e:51:c4:ae:ee:36: a4:ab:f4:fc:ef:89:75:9c:46:57:4b:9d:f7:48:18:9f:08:79: ae:9c:53:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeqZbAsXhZurW0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzUxYjhiN2QtMTBjZi00ODZhLTkwN2MtMDEyM2VjMTIzNzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmFbJHNNUicyvhKMOoOkp6yEsUylVnoBINeJ ubKReRaBpNJ72gkYnnDtK2s54GDm8k2ULTh5wxQV6Qo5Q78WMwQI7b7a7qKIUk0A 1Z2QTgCTrw8xrKEZo+6e/oZAq7bxF4R23rE2ZPob0NQZ0xgzFHwuyiUlJZYEJQ6r hU73zuZnzGTGGSwhWntKDlZmw9yTtDsCIXLvzng6cC1tgb2uCqEzaCtDayhljrBc dAV16zBl0xRzjIFINMWs5RH1n9j4d3c1LBW3NesvsaOToltckwFJzZcLrqPgJVhd Dq9X2ORh2AxhsuT95sG50uhbQKN4yHHWl+OkKv0SDeu7VEgUQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/38T47wWIPg/Y9XKtCEuMa0JNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTkwYjI4MDQtOTIxMC0z OWJiLWI2ZjYtMTBlODJkNmY0NDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrQzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaRp4yPML91ZADsX5ZQH+daN4GIzrzSn29rmAUMrpPPlzvfgU/eNgL/ fajPs+k7DbpMjNpEgyO9GiWkVYq0EQObdWYJuwUjA7+qvWgMrwGAMpPvTzzGbn2I AdLnD9OztxgW4xNvlOCbF3AVONzf7yb0KpRNd3leuk0k8d3IDkY6/yY/CCVoAxp6 eD9sWyh26s4ydxZtVbzyU1Fj06vEdFYXtOYzgM1fv8PBQkyKx80rMUrFSO6god1B TlxRfhND34d+MP+5xvuJ5Uc4H85mjIcsSh6o3ty/MGfcxsjeKNHB4gUlWh5RxK7u NqSr9PzviXWcRldLnfdIGJ8Iea6cU6A= -----END CERTIFICATE-----Generated at Fri Sep 25 19:45:33 2026 by rpki-client