$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a806b4f3-267c-3ac8-8979-398b486f27b2.roa File: a806b4f3-267c-3ac8-8979-398b486f27b2.roa (raw, json) Hash identifier: Gg+IVvN6CXzmJfXvTukpjbeiPObH5TYDvfvxQi7Owdc= Subject key identifier: 4A:87:A1:19:9D:7B:D2:6B:47:61:BA:A8:4C:67:E0:F0:8E:5D:34:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E302665F80CB7AD0B5400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a806b4f3-267c-3ac8-8979-398b486f27b2.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 67.160.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:30:26:65:f8:0c:b7:ad:0b:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=4f03ae9a-bdc3-482f-8e7b-a2fb8314b651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5c:9f:83:6c:69:05:4e:a2:e0:0d:71:5d:2a: 27:31:0e:55:49:8a:d1:41:13:ea:c2:83:17:4a:8b: 17:8c:01:d2:0a:fc:c6:44:62:a8:6a:ab:a9:4d:29: c9:7b:a5:9d:f3:d6:a7:e9:e7:76:28:d3:37:c6:30: 45:1e:8f:43:f6:91:f3:1d:f8:c5:17:ed:f6:71:90: f5:ce:8b:a6:3a:6c:b3:95:24:26:3d:97:d4:6f:8f: 89:75:01:30:22:25:d9:c6:fe:1e:2f:73:46:71:c5: 8c:6f:e7:01:3c:c4:02:0e:a3:2f:85:ad:ae:86:5a: 5e:4b:e6:fe:cc:2e:4a:25:26:df:18:b4:16:c9:8b: 41:db:f7:53:5f:32:5d:79:85:03:41:81:d3:cf:d9: ab:aa:f5:bf:07:bf:4e:22:ef:cb:b6:5a:2e:96:ac: 75:96:98:8f:41:ba:f9:f9:9c:e1:7c:32:85:1e:c1: 16:ff:f9:96:a3:cd:ad:f8:bd:31:56:53:b9:a1:75: 59:b8:da:05:da:0f:f2:6c:04:1d:a4:a0:48:2b:9c: b1:ce:84:23:74:6c:1a:5d:47:5b:dd:ff:2b:d1:f2: 65:09:02:cb:90:75:73:d7:df:34:78:64:ee:8c:01: 8d:56:65:08:a7:44:14:96:2b:4b:c5:63:f6:13:e2: 64:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:87:A1:19:9D:7B:D2:6B:47:61:BA:A8:4C:67:E0:F0:8E:5D:34:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a806b4f3-267c-3ac8-8979-398b486f27b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.160.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:4f:07:fc:a7:4b:bc:52:5d:77:ea:0a:37:96:1a:52:cb:eb: 05:49:bd:1e:4b:cf:11:5a:51:ff:77:87:fa:ed:69:de:47:b7: c3:cd:cd:2d:1a:7f:94:b3:db:28:3e:6c:36:a5:4b:16:29:dd: 23:1f:51:72:76:89:76:ee:37:86:07:b6:58:47:16:9e:d2:dc: 65:20:6d:35:8c:c9:26:40:2f:10:a4:fe:d8:76:5a:d0:9e:57: 55:0f:46:f1:d2:7f:bd:60:0f:72:82:45:a5:79:4a:3b:69:08: d8:dc:08:59:e5:13:b1:63:a3:50:bd:43:1d:e3:1d:8c:6b:50: bd:bb:5c:ea:16:1c:c4:11:6e:7c:9b:53:0e:31:04:1d:1f:0e: 72:1c:8f:89:3d:d6:fb:b3:0c:62:36:4e:21:50:6b:45:72:2e: 03:0b:4e:65:ca:e1:f9:1f:c9:0b:83:c9:d0:ee:00:bb:47:70: 0e:9a:af:98:2f:ad:53:a9:6e:8f:63:0c:97:44:0d:cf:21:f4: 4e:55:bc:41:17:dc:82:ed:42:8b:0a:69:3c:7d:90:1d:98:4c: 33:2c:fe:b0:a3:18:85:c9:31:9c:f8:06:b9:9f:69:58:57:28: c8:1f:26:0d:57:18:56:ae:c3:00:30:79:96:e5:ca:10:4b:0d: 3e:83:24:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnjAmZfgMt60LVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NGYwM2FlOWEtYmRjMy00ODJmLThlN2ItYTJmYjgzMTRiNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFyfg2xpBU6i4A1xXSonMQ5VSYrRQRPqwoMX SosXjAHSCvzGRGKoaqupTSnJe6Wd89an6ed2KNM3xjBFHo9D9pHzHfjFF+32cZD1 zoumOmyzlSQmPZfUb4+JdQEwIiXZxv4eL3NGccWMb+cBPMQCDqMvha2uhlpeS+b+ zC5KJSbfGLQWyYtB2/dTXzJdeYUDQYHTz9mrqvW/B79OIu/Ltloulqx1lpiPQbr5 +ZzhfDKFHsEW//mWo82t+L0xVlO5oXVZuNoF2g/ybAQdpKBIK5yxzoQjdGwaXUdb 3f8r0fJlCQLLkHVz1980eGTujAGNVmUIp0QUlitLxWP2E+JkzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqHoRmde9JrR2G6qExn4PCOXTSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTgwNmI0ZjMtMjY3Yy0z YWM4LTg5NzktMzk4YjQ4NmYyN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6DQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClPB/ynS7xSXXfqCjeWGlLL6wVJvR5LzxFaUf93h/rtad5Ht8PNzS0a f5Sz2yg+bDalSxYp3SMfUXJ2iXbuN4YHtlhHFp7S3GUgbTWMySZALxCk/th2WtCe V1UPRvHSf71gD3KCRaV5SjtpCNjcCFnlE7Fjo1C9Qx3jHYxrUL27XOoWHMQRbnyb Uw4xBB0fDnIcj4k91vuzDGI2TiFQa0VyLgMLTmXK4fkfyQuDydDuALtHcA6ar5gv rVOpbo9jDJdEDc8h9E5VvEEX3ILtQosKaTx9kB2YTDMs/rCjGIXJMZz4BrmfaVhX KMgfJg1XGFauwwAweZblyhBLDT6DJFg= -----END CERTIFICATE-----Generated at Sun Sep 27 23:56:19 2026 by rpki-client