$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5a0fa44-3c51-38f7-a0a7-1a2b4900ec88.roa File: b5a0fa44-3c51-38f7-a0a7-1a2b4900ec88.roa (raw, json) Hash identifier: NV/P2U3e02Af7JOYHGgedPEaeyvfHgJLJLGdsO+I0iI= Subject key identifier: F0:2C:F0:12:A0:86:7B:55:D2:0D:42:9F:26:E1:2D:77:B5:4D:43:E2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497878ADF0710E0D38F9A320 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5a0fa44-3c51-38f7-a0a7-1a2b4900ec88.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33650 IP address blocks: 67.168.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:78:ad:f0:71:0e:0d:38:f9:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ae525efd-e854-4a4e-8511-4b5be0dc5eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:da:70:36:e8:71:7f:f2:b2:38:33:01:c1:fd: 49:34:01:dc:08:11:04:01:07:f2:62:bc:eb:e7:2d: cf:44:e2:08:29:c9:ad:de:23:1a:58:7e:26:0f:66: 9b:c7:ac:2e:79:09:8f:60:c2:a1:5b:fe:74:e3:8f: 2c:68:43:fe:f3:45:aa:fe:58:af:9e:2f:35:36:eb: ce:ca:19:48:da:88:7e:d7:7d:eb:4c:dd:26:d7:5d: 35:56:82:86:4a:75:ff:d6:55:02:cd:e3:27:0b:0a: 2f:0f:98:a8:5d:96:8a:89:58:01:93:79:33:06:85: af:f2:db:7b:bd:8f:55:1a:25:8d:7d:63:bc:cb:22: 4e:c7:4a:16:13:e0:bf:b9:f9:91:ac:37:34:84:00: 73:a0:b0:45:41:a1:b3:88:51:08:31:9a:55:e5:56: d9:c5:be:f5:cb:5a:70:0c:ec:3e:e2:bd:72:61:5f: 1f:4a:04:85:52:de:aa:3d:35:4a:4e:ca:45:21:e5: 6d:4a:20:c6:e9:65:09:b7:af:3a:34:fe:86:d0:43: 33:4c:2a:27:50:4b:d8:3a:a6:e7:68:42:5f:1a:28: d0:45:8e:24:ca:79:e4:8a:6b:cb:22:2e:3b:81:d3: eb:37:94:79:dd:cd:55:fa:61:8a:e3:51:d9:fd:c7: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2C:F0:12:A0:86:7B:55:D2:0D:42:9F:26:E1:2D:77:B5:4D:43:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5a0fa44-3c51-38f7-a0a7-1a2b4900ec88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.168.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:25:03:1f:e6:ea:ca:c6:0a:0a:de:a9:1c:9b:27:dc:59:b5: 0b:e5:d6:9b:e6:ff:0d:dc:34:ba:f8:62:1e:f7:4c:a4:a7:0c: 64:de:19:83:84:a4:3a:f7:9f:9a:2e:65:e7:c5:6a:dc:d7:64: 5d:f1:29:ba:d8:92:4c:ba:e1:db:9e:44:99:b7:38:33:0c:fd: 04:0c:d3:1e:4e:1f:ce:ee:fb:53:61:e0:61:d1:52:52:9e:fb: cd:d0:5e:20:e0:14:77:d8:61:eb:51:b6:99:8e:c1:a8:8a:31: f8:49:61:68:1c:ac:66:be:a8:35:d3:80:8e:f5:25:2d:c8:fd: 53:19:e9:0d:1a:a1:31:fe:ef:a3:be:16:d7:43:58:af:6b:08: 43:1a:e9:36:4b:81:f2:b4:51:cb:61:d7:4e:f7:09:5e:f2:a9: e2:d3:91:c2:c9:af:bd:d9:fd:4d:0b:09:94:9a:1d:22:89:2c: 5d:65:5f:19:c4:be:36:aa:ae:cf:e5:d8:35:9f:aa:0f:eb:2c: 80:fb:49:b7:45:0f:05:fc:47:f5:71:60:8f:b2:f9:97:d4:45: 8b:ef:29:1f:10:7d:bb:5f:70:e3:44:d2:23:4b:44:6e:3d:22: 13:26:8b:a3:70:25:b3:ab:76:a6:bd:4a:24:86:38:fe:c6:4a: ef:a9:54:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeHit8HEODTj5oyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWU1MjVlZmQtZTg1NC00YTRlLTg1MTEtNGI1YmUwZGM1ZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NpwNuhxf/KyODMBwf1JNAHcCBEEAQfyYrzr 5y3PROIIKcmt3iMaWH4mD2abx6wueQmPYMKhW/50448saEP+80Wq/livni81NuvO yhlI2oh+133rTN0m1101VoKGSnX/1lUCzeMnCwovD5ioXZaKiVgBk3kzBoWv8tt7 vY9VGiWNfWO8yyJOx0oWE+C/ufmRrDc0hABzoLBFQaGziFEIMZpV5VbZxb71y1pw DOw+4r1yYV8fSgSFUt6qPTVKTspFIeVtSiDG6WUJt686NP6G0EMzTConUEvYOqbn aEJfGijQRY4kynnkimvLIi47gdPrN5R53c1V+mGK41HZ/ccZnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAs8BKghntV0g1CnybhLXe1TUPiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjVhMGZhNDQtM2M1MS0z OGY3LWEwYTctMWEyYjQ5MDBlYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQ6gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQlAx/m6srGCgreqRybJ9xZtQvl1pvm/w3cNLr4Yh73TKSnDGTeGYOE pDr3n5ouZefFatzXZF3xKbrYkky64dueRJm3ODMM/QQM0x5OH87u+1Nh4GHRUlKe +83QXiDgFHfYYetRtpmOwaiKMfhJYWgcrGa+qDXTgI71JS3I/VMZ6Q0aoTH+76O+ FtdDWK9rCEMa6TZLgfK0Ucth1073CV7yqeLTkcLJr73Z/U0LCZSaHSKJLF1lXxnE vjaqrs/l2DWfqg/rLID7SbdFDwX8R/VxYI+y+ZfURYvvKR8QfbtfcONE0iNLRG49 IhMmi6NwJbOrdqa9SiSGOP7GSu+pVOM= -----END CERTIFICATE-----Generated at Sat Sep 26 07:11:36 2026 by rpki-client