$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b56fe78-4ec1-3407-a33e-a23c8434205c.roa File: 8b56fe78-4ec1-3407-a33e-a23c8434205c.roa (raw, json) Hash identifier: WoLK8EGa15/pneysxKbVmnl6vxt0D07/7HS099YuoPg= Subject key identifier: B8:BE:B0:0D:C1:94:4A:20:5E:CD:E5:0A:B8:13:43:D6:A4:DA:B3:58 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D35C45F873C3A02A87480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b56fe78-4ec1-3407-a33e-a23c8434205c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33660 IP address blocks: 174.162.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:35:c4:5f:87:3c:3a:02:a8:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=96c5e7e3-6ba5-4864-a1f6-132d37b3f8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:20:aa:4b:32:3e:f6:e1:4b:5d:5b:08:ad:29: ef:5f:f3:ae:a1:41:2d:9b:24:b1:19:97:5c:a0:c7: 75:9c:97:3c:36:6a:c0:cc:e9:a0:74:fe:a4:2e:3c: 37:2b:dc:8c:53:79:05:60:7d:58:8a:85:15:df:02: c8:99:e5:f1:45:f5:8a:03:24:20:47:37:e3:38:d8: ff:9c:bb:73:37:00:ed:9b:22:cc:9b:82:08:04:42: a3:79:62:c9:aa:8e:b3:f2:9c:71:34:2c:aa:88:cc: 8d:cb:88:a3:ea:bf:4d:4c:b3:f1:18:58:49:07:b4: 4b:9e:57:df:b2:07:81:d3:42:16:87:a7:7a:3a:67: cb:ba:6c:59:29:66:a0:de:d0:72:85:6d:09:b9:b9: a4:1a:f3:1d:8c:fa:1e:d6:6c:6f:a4:a3:e6:e7:41: 39:52:fb:1b:59:8f:bb:86:23:63:7e:65:0b:ac:5f: 3c:55:2e:68:d3:30:51:dd:06:fc:e2:2f:39:bc:58: 75:62:92:02:47:9f:b9:95:e9:2f:a3:2d:37:1f:23: 5b:96:10:62:f4:a5:32:c8:37:29:de:bb:56:7c:e2: e5:f9:14:ae:a0:9b:55:7e:77:3a:72:c0:58:93:0a: 95:68:56:75:96:24:b0:3c:82:05:2f:2b:09:5a:71: 33:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BE:B0:0D:C1:94:4A:20:5E:CD:E5:0A:B8:13:43:D6:A4:DA:B3:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b56fe78-4ec1-3407-a33e-a23c8434205c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.162.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b4:70:fd:d7:be:e9:36:8b:a9:2d:bd:3e:7e:02:8b:4c:bb: 41:c6:59:1e:a2:99:7e:ae:69:2f:e5:6d:3f:09:1e:b1:4e:ee: a0:e0:08:c0:fd:46:4a:52:70:2a:ce:83:cc:bd:0d:dc:5d:56: ff:72:9c:37:02:be:6e:7c:78:c0:84:ca:5e:46:08:36:8b:cd: 33:39:ac:66:a5:d4:3c:b5:86:5c:fc:3f:f5:c6:90:57:e5:cc: 33:5b:89:5c:3c:0e:8e:73:b0:6c:f7:c5:92:f3:6d:ea:4e:ff: b3:5b:63:42:75:40:90:d9:cb:02:72:ec:4b:9e:1e:ee:32:d6: 47:ef:48:3f:41:23:ad:13:3e:bd:1b:24:b5:e6:68:b7:3a:ad: c7:9e:d7:a9:86:56:f8:dc:bb:2b:7f:c0:48:4e:70:d1:38:e0: 65:de:e3:9e:69:ff:fd:ef:9b:6b:8d:3b:7e:54:b6:19:08:56: 15:4c:98:2a:93:be:1f:8a:c4:06:47:f5:9e:68:9e:07:8f:71: fd:06:79:68:e4:e9:a6:8f:cd:53:65:a0:6b:9f:69:59:d1:ed: e9:d9:f4:a3:67:80:f2:f1:b3:5a:65:21:4f:02:9b:69:ad:86: 2a:9c:0b:0b:cb:0f:f3:6a:4d:1d:64:b5:a7:7a:7e:ff:5f:51: 1b:81:70:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnTXEX4c8OgKodIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OTZjNWU3ZTMtNmJhNS00ODY0LWExZjYtMTMyZDM3YjNmOGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCCqSzI+9uFLXVsIrSnvX/OuoUEtmySxGZdc oMd1nJc8NmrAzOmgdP6kLjw3K9yMU3kFYH1YioUV3wLImeXxRfWKAyQgRzfjONj/ nLtzNwDtmyLMm4IIBEKjeWLJqo6z8pxxNCyqiMyNy4ij6r9NTLPxGFhJB7RLnlff sgeB00IWh6d6OmfLumxZKWag3tByhW0JubmkGvMdjPoe1mxvpKPm50E5UvsbWY+7 hiNjfmULrF88VS5o0zBR3Qb84i85vFh1YpICR5+5lekvoy03HyNblhBi9KUyyDcp 3rtWfOLl+RSuoJtVfnc6csBYkwqVaFZ1liSwPIIFLysJWnEz1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi+sA3BlEogXs3lCrgTQ9ak2rNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGI1NmZlNzgtNGVjMS0z NDA3LWEzM2UtYTIzYzg0MzQyMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqLEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK0cP3Xvuk2i6ktvT5+AotMu0HGWR6imX6uaS/lbT8JHrFO7qDgCMD9 RkpScCrOg8y9DdxdVv9ynDcCvm58eMCEyl5GCDaLzTM5rGal1Dy1hlz8P/XGkFfl zDNbiVw8Do5zsGz3xZLzbepO/7NbY0J1QJDZywJy7EueHu4y1kfvSD9BI60TPr0b JLXmaLc6rcee16mGVvjcuyt/wEhOcNE44GXe455p//3vm2uNO35UthkIVhVMmCqT vh+KxAZH9Z5ongePcf0GeWjk6aaPzVNloGufaVnR7enZ9KNngPLxs1plIU8Cm2mt hiqcCwvLD/NqTR1ktad6fv9fURuBcFk= -----END CERTIFICATE-----Generated at Sun Sep 27 00:22:55 2026 by rpki-client