$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/94311cec-7655-3af1-8650-0a09e87349d6.roa File: 94311cec-7655-3af1-8650-0a09e87349d6.roa (raw, json) Hash identifier: ap8ITM5zoIHgqDHaREIqjEM5OAvbb/264+Wj3ytAauI= Subject key identifier: C4:5C:C1:04:48:A7:1D:3E:B5:42:25:C7:E1:E9:11:6E:FE:07:9D:CC Certificate issuer: /CN=bf895287-fee6-4682-8ac4-732f64947fe4 Certificate serial: 010D0C9F4328584F3B7D1EDA76C0FDFA170D0790 Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/94311cec-7655-3af1-8650-0a09e87349d6.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 54847 IP address blocks: 173.224.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1e:da:76:c0:fd:fa:17:0d:07:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=7f5ae44a-1a7f-4ac7-904e-0e2d05815707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ac:57:8f:b7:d1:03:66:77:a5:31:e8:7e:f9: 9e:6f:8c:83:38:d4:c5:d4:70:bd:45:a2:06:34:28: 9b:bc:e3:f6:e4:8d:bc:3e:d2:b9:9b:a3:f7:5a:c3: a2:6b:4b:01:c8:7a:0d:fc:48:f7:f3:12:c1:cc:57: 8b:ef:a6:dd:bc:39:4c:84:98:d3:49:32:71:36:b7: 5f:44:55:25:f4:c5:fc:0b:45:0a:5d:4e:60:65:34: 8a:e0:f6:4f:e5:41:b5:4f:1f:0d:88:9e:1a:b3:49: a9:55:c7:25:a8:52:67:db:27:2a:6c:83:d0:da:b9: 62:6d:af:69:1c:27:6f:de:e7:f9:c8:af:5e:fb:ae: 1b:72:98:9b:4a:3a:7f:6f:95:b1:a9:e8:7d:32:d7: 27:7b:fd:84:b6:ae:4a:26:e2:ce:06:43:84:4b:2c: 5b:af:ed:ee:11:b5:90:3b:3c:ff:ca:08:1e:06:62: 18:26:b9:8d:96:ec:c2:c2:e7:9f:19:61:02:a5:23: 62:d5:03:5a:c4:a5:ce:19:37:3a:24:39:5f:fb:fa: d8:dd:01:6a:a7:1d:dd:e6:e9:05:95:b4:b9:1f:2d: f9:38:2e:02:d6:fb:82:d6:32:f2:ea:57:63:d5:97: 6a:3a:11:d1:de:7b:d1:32:19:d7:fc:27:94:7d:93: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5C:C1:04:48:A7:1D:3E:B5:42:25:C7:E1:E9:11:6E:FE:07:9D:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/94311cec-7655-3af1-8650-0a09e87349d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl X509v3 Authority Key Identifier: keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer sbgp-ipAddrBlock: critical IPv4: 173.224.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:dd:0d:60:21:4b:6c:92:73:31:60:24:c0:f5:22:b8:4a:69: 44:f1:05:46:69:39:ab:ca:b0:c2:e5:d6:4a:62:76:90:03:7c: ad:c7:bc:b6:e3:75:89:17:f2:bc:52:3a:3d:1f:32:54:0f:b5: 43:37:37:db:4e:2a:6e:13:6a:35:c1:df:93:7c:c7:69:1c:ff: d9:65:96:cb:67:fd:ea:4c:01:bb:d6:bd:c0:bc:d0:bb:44:07: 9c:bd:8a:bd:26:ff:5d:2e:84:9f:de:18:59:2b:4c:2e:8c:44: 95:d4:3e:bf:5c:f2:08:5f:ad:43:88:4a:b6:09:75:72:c7:e0: a8:68:2f:00:3a:fe:ef:dc:f0:eb:9a:17:09:d4:bf:0f:5c:91: 1f:ed:6c:fc:ad:bb:a3:9b:7f:53:7e:6b:ac:e3:ae:2c:42:4d: 2f:6f:97:f6:d0:7b:01:73:d9:d7:91:fa:b2:79:33:d5:f7:24: 43:e3:86:84:17:2b:ab:d9:00:e4:52:7c:68:56:b2:6a:23:0d: 55:fa:59:e2:8c:92:49:53:fe:8c:e0:74:28:23:77:77:b1:e2: a2:d4:2a:c6:d9:73:d3:0b:73:2d:43:88:e9:0f:25:72:10:9c: aa:f0:5c:a3:c9:24:25:b3:d4:7e:22:a3:46:b3:52:1b:34:88: 66:cd:de:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fR7adsD9+hcNB5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY4OTUyODctZmVlNi00NjgyLThhYzQtNzMyZjY0OTQ3 ZmU0MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk N2Y1YWU0NGEtMWE3Zi00YWM3LTkwNGUtMGUyZDA1ODE1NzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKxXj7fRA2Z3pTHofvmeb4yDONTF1HC9RaIG NCibvOP25I28PtK5m6P3WsOia0sByHoN/Ej38xLBzFeL76bdvDlMhJjTSTJxNrdf RFUl9MX8C0UKXU5gZTSK4PZP5UG1Tx8NiJ4as0mpVcclqFJn2ycqbIPQ2rliba9p HCdv3uf5yK9e+64bcpibSjp/b5Wxqeh9Mtcne/2Etq5KJuLOBkOESyxbr+3uEbWQ Ozz/yggeBmIYJrmNluzCwuefGWECpSNi1QNaxKXOGTc6JDlf+/rY3QFqpx3d5ukF lbS5Hy35OC4C1vuC1jLy6ldj1ZdqOhHR3nvRMhnX/CeUfZN3lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRcwQRIpx0+tUIlx+HpEW7+B53MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5 NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJmNjQ5NDdmZTQvOTQzMTFjZWMtNzY1NS0z YWYxLTg2NTAtMGEwOWU4NzM0OWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmY4OTUyODctZmVlNi00NjgyLThh YzQtNzMyZjY0OTQ3ZmU0L2JmODk1Mjg3LWZlZTYtNDY4Mi04YWM0LTczMmY2NDk0 N2ZlNC5jcmwwHwYDVR0jBBgwFoAUdfQONwd2lIOhCT08mnfB3pf3ZsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJm NjQ5NDdmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCreC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjdDWAhS2ySczFgJMD1IrhKaUTxBUZpOavKsMLl1kpidpADfK3HvLbj dYkX8rxSOj0fMlQPtUM3N9tOKm4TajXB35N8x2kc/9lllstn/epMAbvWvcC80LtE B5y9ir0m/10uhJ/eGFkrTC6MRJXUPr9c8ghfrUOISrYJdXLH4KhoLwA6/u/c8Oua FwnUvw9ckR/tbPytu6Obf1N+a6zjrixCTS9vl/bQewFz2deR+rJ5M9X3JEPjhoQX K6vZAORSfGhWsmojDVX6WeKMkklT/ozgdCgjd3ex4qLUKsbZc9MLcy1DiOkPJXIQ nKrwXKPJJCWz1H4io0azUhs0iGbN3uE= -----END CERTIFICATE-----Generated at Sat Sep 26 11:14:56 2026 by rpki-client