$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd4274cb-0325-3f5e-8194-7d410d2719e7.roa File: bd4274cb-0325-3f5e-8194-7d410d2719e7.roa (raw, json) Hash identifier: +rkAp4aAhyGrnUHTwHhxg/weq/gWuqJLzNfknqo0txY= Subject key identifier: 6D:DB:0C:70:F8:2E:E2:82:CA:3B:14:49:78:87:42:36:72:42:15:9A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8629BBB39A134EA18FA0F60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd4274cb-0325-3f5e-8194-7d410d2719e7.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 174.174.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:9b:bb:39:a1:34:ea:18:fa:0f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=1f72da40-afbb-46a1-b8d6-a6468e1d6ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:29:ba:01:94:af:fb:e3:c1:f6:2f:ef:8b: c3:c1:dd:61:6d:fb:76:5b:2a:6c:29:9c:58:b6:7e: 81:08:68:45:f3:41:9d:81:db:57:9d:52:3e:ae:ff: 2b:71:00:47:52:02:c0:18:08:b1:c1:dd:03:85:25: 79:4f:e2:6e:5e:68:44:a2:c6:d0:d1:df:e6:dd:ae: 82:1a:67:8f:9a:48:ad:5a:36:51:29:f6:11:99:94: 6b:73:20:fc:9e:a5:c1:42:76:63:71:83:b2:94:d6: 98:d1:a5:d7:85:32:72:87:05:05:4f:4e:b8:bf:a1: 3b:c5:a9:16:b8:6c:f0:34:5c:58:91:d5:1a:5e:6b: 0d:92:d7:3e:38:53:3c:e5:63:c8:d1:9c:1a:83:a6: 2e:58:bb:52:f7:41:99:ce:bd:a9:e6:d8:6e:8d:51: ab:7a:01:2f:ab:a7:45:59:d0:46:17:f8:a5:49:65: 54:81:a3:de:94:18:4a:9c:6a:2b:98:e4:28:34:a6: 61:9b:c9:53:c9:43:9d:a2:d2:8d:4a:fb:f7:e2:90: 9d:41:cf:e4:82:15:6d:21:66:4e:c8:57:c6:1d:96: 0f:e9:f2:f9:7d:13:6c:dd:66:cf:d4:01:75:dc:ff: b2:d8:f4:ba:d1:14:70:77:b9:bb:a6:67:8b:f5:d7: 69:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DB:0C:70:F8:2E:E2:82:CA:3B:14:49:78:87:42:36:72:42:15:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd4274cb-0325-3f5e-8194-7d410d2719e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.174.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b4:ef:27:ba:8a:23:96:fe:47:8d:fd:7e:23:00:c8:60:5a: 91:01:f2:55:7b:31:c1:15:32:07:89:26:f5:3a:e5:86:f5:e5: e2:06:36:be:2f:b9:6b:c4:43:05:55:4e:b1:14:72:5c:e3:b7: 71:f7:00:6b:58:e2:51:56:90:a2:df:a9:4a:24:12:39:17:19: 69:a8:2a:3a:cb:62:a5:2e:74:06:e2:c5:49:c1:5f:b1:a8:34: 84:de:a6:39:1f:f1:4d:b4:2a:48:08:89:67:5c:7d:44:4c:90: b9:c1:9a:2d:82:71:2c:b2:0b:2b:16:52:e9:86:ee:01:11:ab: f9:bb:a0:f2:c5:97:f8:3c:b1:d5:31:0b:a9:b4:3c:43:4d:19: 99:8c:87:24:c9:4d:49:90:d1:0d:96:5d:e1:e9:69:51:1b:63: a9:2e:00:87:4a:0f:86:c6:2e:f2:a6:4e:c1:36:75:43:cd:ae: c5:9a:df:53:72:0d:06:ac:f7:84:db:43:a5:9c:8b:8e:f1:6b: 28:98:da:ee:d1:ab:6d:80:d3:e9:79:5f:e0:ca:30:cc:e6:0e: 7b:b6:30:25:c6:84:b5:45:f1:d1:0d:5f:f1:10:81:77:2e:e8: 1d:d9:d9:49:11:7d:e1:8c:59:c1:0c:5a:72:55:85:b1:00:8b: 4c:f3:64:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYpu7OaE06hj6D2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MWY3MmRhNDAtYWZiYi00NmExLWI4ZDYtYTY0NjhlMWQ2YWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGMpugGUr/vjwfYv74vDwd1hbft2WypsKZxY tn6BCGhF80GdgdtXnVI+rv8rcQBHUgLAGAixwd0DhSV5T+JuXmhEosbQ0d/m3a6C GmePmkitWjZRKfYRmZRrcyD8nqXBQnZjcYOylNaY0aXXhTJyhwUFT064v6E7xakW uGzwNFxYkdUaXmsNktc+OFM85WPI0Zwag6YuWLtS90GZzr2p5thujVGregEvq6dF WdBGF/ilSWVUgaPelBhKnGormOQoNKZhm8lTyUOdotKNSvv34pCdQc/kghVtIWZO yFfGHZYP6fL5fRNs3WbP1AF13P+y2PS60RRwd7m7pmeL9ddptwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3bDHD4LuKCyjsUSXiHQjZyQhWaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQ0Mjc0Y2ItMDMyNS0z ZjVlLTgxOTQtN2Q0MTBkMjcxOWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrq6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm07ye6iiOW/keN/X4jAMhgWpEB8lV7McEVMgeJJvU65Yb15eIGNr4v uWvEQwVVTrEUclzjt3H3AGtY4lFWkKLfqUokEjkXGWmoKjrLYqUudAbixUnBX7Go NITepjkf8U20KkgIiWdcfURMkLnBmi2CcSyyCysWUumG7gERq/m7oPLFl/g8sdUx C6m0PENNGZmMhyTJTUmQ0Q2WXeHpaVEbY6kuAIdKD4bGLvKmTsE2dUPNrsWa31Ny DQas94TbQ6Wci47xayiY2u7Rq22A0+l5X+DKMMzmDnu2MCXGhLVF8dENX/EQgXcu 6B3Z2UkRfeGMWcEMWnJVhbEAi0zzZLA= -----END CERTIFICATE-----Generated at Sun Sep 27 19:29:24 2026 by rpki-client