$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a39d1ddb-48ce-3f22-b315-be389b64be87.roa File: a39d1ddb-48ce-3f22-b315-be389b64be87.roa (raw, json) Hash identifier: tKrvoM6sIMfj7qII+avOn/Mj6rK+MUGAhoIEodGUc0s= Subject key identifier: 1A:F0:7D:22:66:DC:1D:8F:16:47:45:B1:95:B7:1E:76:A6:87:24:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E31E8D97CE50A5C937A1C Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a39d1ddb-48ce-3f22-b315-be389b64be87.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 67.169.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:31:e8:d9:7c:e5:0a:5c:93:7a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=3dcc6364-d9ea-4225-9fb6-a828a7432331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b8:0a:13:e7:25:af:0a:e5:1a:f4:d4:8d:5d: f4:5e:84:ec:61:a8:5b:7b:42:eb:95:d6:a3:0d:42: 08:b9:4f:11:ea:a4:de:61:06:f2:d9:de:b5:21:29: 3e:4a:f7:fc:76:7e:d8:03:cf:e8:6f:c4:80:15:a8: c1:7c:d6:33:97:ca:d9:9c:1a:81:13:63:2c:74:d0: 1c:47:9e:f9:62:b7:41:08:09:ae:37:30:4f:a3:b8: 52:4a:ff:1e:4d:12:6e:b2:3a:c7:8c:14:24:f4:a9: 18:cc:9e:30:a0:b6:c7:77:4f:6b:6f:a9:77:6e:5f: 2d:cf:7e:ef:23:82:6b:3b:78:9e:d8:41:1c:2c:e5: 8c:04:e2:e8:22:b3:2a:a6:a0:45:a3:d3:14:0b:85: 39:a0:8a:22:2e:60:0b:f8:73:44:c2:de:a3:7f:79: b8:6e:59:ed:1c:57:48:26:25:cb:df:3a:44:9f:42: 13:e2:5e:d3:3b:f6:2f:07:cd:21:a7:1a:af:4c:32: 5f:d2:dd:3d:dc:aa:c6:6d:05:ec:56:8c:d6:3d:d2: cd:6f:db:92:7b:6f:5a:48:90:1b:55:e7:e9:d3:c5: 7d:69:f1:92:46:89:5e:2d:36:16:68:d5:d9:80:47: a8:f3:be:b9:ac:32:92:c0:99:81:7b:d2:57:25:10: 9b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F0:7D:22:66:DC:1D:8F:16:47:45:B1:95:B7:1E:76:A6:87:24:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a39d1ddb-48ce-3f22-b315-be389b64be87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.169.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c1:2c:ee:ca:72:89:8b:71:bb:e7:23:ad:f9:2d:88:f5:f0: e2:75:22:1c:08:7c:9e:2d:2a:b0:9b:f8:b8:f0:18:7c:c3:58: 07:a2:a0:35:fe:78:1b:3e:69:09:2e:7b:ef:5c:e3:46:f6:78: 10:82:e3:97:f5:fb:1a:a1:70:c0:db:88:42:8a:37:27:a4:55: 70:8a:b2:dc:ec:03:c8:f4:45:9e:4f:d7:2c:c2:b0:4c:8e:b9: 44:5d:1d:76:b8:81:51:03:13:19:c3:76:8e:61:8c:bb:5d:38: a7:62:a4:f5:46:a6:cf:db:94:29:63:4b:4e:de:ae:99:6b:78: 5e:9e:73:f0:69:d9:3e:75:0c:ca:74:e8:22:ba:d7:0b:4f:40: 72:fb:3e:35:81:4d:cb:70:b8:ef:e0:a4:c2:74:3b:22:f3:b5: 22:fd:c2:e0:90:f7:a1:f4:a1:30:22:31:96:e8:4c:77:30:e0: dc:de:7e:f8:b6:2c:d4:eb:f4:45:5a:6c:14:47:61:41:13:39: 03:a6:0f:36:c6:35:32:74:1c:14:25:9d:59:01:b7:de:2d:d9: 63:1e:10:2b:9c:f4:b2:3d:2d:9d:4b:f3:cc:c4:3d:e9:32:a2: 46:f9:17:bf:f1:7c:e2:38:af:17:43:aa:2d:68:85:7a:14:fa: 4f:03:e4:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnjHo2XzlClyTehwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk M2RjYzYzNjQtZDllYS00MjI1LTlmYjYtYTgyOGE3NDMyMzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybgKE+clrwrlGvTUjV30XoTsYahbe0Lrldaj DUIIuU8R6qTeYQby2d61ISk+Svf8dn7YA8/ob8SAFajBfNYzl8rZnBqBE2MsdNAc R575YrdBCAmuNzBPo7hSSv8eTRJusjrHjBQk9KkYzJ4woLbHd09rb6l3bl8tz37v I4JrO3ie2EEcLOWMBOLoIrMqpqBFo9MUC4U5oIoiLmAL+HNEwt6jf3m4blntHFdI JiXL3zpEn0IT4l7TO/YvB80hpxqvTDJf0t093KrGbQXsVozWPdLNb9uSe29aSJAb Vefp08V9afGSRoleLTYWaNXZgEeo8765rDKSwJmBe9JXJRCbDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrwfSJm3B2PFkdFsZW3HnamhyQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTM5ZDFkZGItNDhjZS0z ZjIyLWIzMTUtYmUzODliNjRiZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPBLO7KcomLcbvnI635LYj18OJ1IhwIfJ4tKrCb+LjwGHzDWAeioDX+ eBs+aQkue+9c40b2eBCC45f1+xqhcMDbiEKKNyekVXCKstzsA8j0RZ5P1yzCsEyO uURdHXa4gVEDExnDdo5hjLtdOKdipPVGps/blCljS07erplreF6ec/Bp2T51DMp0 6CK61wtPQHL7PjWBTctwuO/gpMJ0OyLztSL9wuCQ96H0oTAiMZboTHcw4Nzefvi2 LNTr9EVabBRHYUETOQOmDzbGNTJ0HBQlnVkBt94t2WMeECuc9LI9LZ1L88zEPeky okb5F7/xfOI4rxdDqi1ohXoU+k8D5Oc= -----END CERTIFICATE-----Generated at Fri Sep 25 04:27:43 2026 by rpki-client