$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1082a8e4-80bc-357e-aa1b-a76d733509fb.roa File: 1082a8e4-80bc-357e-aa1b-a76d733509fb.roa (raw, json) Hash identifier: i5Chk+D1JoDEQLZZRdH5CKEBGMxkaXbbsbRcXYQSTLc= Subject key identifier: F8:8A:5F:5D:58:A9:3F:95:E9:52:C1:00:13:25:EA:19:96:F9:5D:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E37D7D19033A8D63538C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1082a8e4-80bc-357e-aa1b-a76d733509fb.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 71.198.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:37:d7:d1:90:33:a8:d6:35:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=d70d2d01-634a-4f6d-9aa5-e88172faa07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:99:3d:58:ab:b0:f1:86:66:48:55:8c:61:06: 00:d2:e3:63:6f:d4:ef:21:e3:bf:72:c0:57:8d:db: 80:a1:c7:d6:de:04:b0:69:41:58:70:73:dc:c1:8d: 77:1c:60:c9:d7:cd:8b:17:86:b9:1d:ee:cf:0b:21: 0f:2b:2b:7e:da:fa:71:a7:bb:f0:96:56:09:e4:d1: 5e:b8:ab:2c:d1:4e:d2:5e:9d:49:1c:01:d0:0e:ab: d9:05:92:1e:80:43:fb:3f:70:a9:68:72:ca:5c:75: 23:48:0c:46:b5:32:f4:90:ac:19:0f:19:8a:2a:28: f1:db:3b:19:1a:a9:0c:72:e5:3f:9a:9e:90:7b:16: 5d:91:2d:7c:3c:17:58:48:a1:e9:ce:a5:fb:80:f0: a9:2a:d3:4b:c8:f9:ce:da:10:1c:b1:47:fe:73:e2: da:cc:dd:30:f1:7d:85:2d:09:91:9a:57:c5:be:3c: 2e:bd:82:c5:f2:b1:16:e0:9d:f5:f0:9d:ef:f4:d0: 30:61:d5:09:bc:fa:56:d0:28:66:32:13:26:cc:7d: 10:4c:9e:4f:56:2d:99:ab:ee:9f:bf:82:30:ec:22: f5:a3:c1:ea:14:71:f7:92:1e:46:f7:b5:83:51:b0: e6:34:79:4a:23:c0:43:03:ed:cd:a4:fb:f1:72:d2: cb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8A:5F:5D:58:A9:3F:95:E9:52:C1:00:13:25:EA:19:96:F9:5D:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1082a8e4-80bc-357e-aa1b-a76d733509fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8f:ce:02:3b:59:f7:45:9f:21:c4:d5:a0:12:c6:f6:82:1d: 73:dc:9b:03:52:55:35:ac:24:66:3c:f0:dd:e6:3e:67:a2:0b: 5e:30:ac:e4:0b:8c:b2:ee:14:2a:ba:9f:bf:09:cd:80:a9:cf: 06:cd:82:8e:84:ef:67:bf:81:88:21:29:64:54:5b:eb:3f:3c: 64:62:0b:a3:9f:90:2f:7f:87:c2:53:ce:9e:a5:1a:a8:52:f1: 28:c3:ac:0e:f3:5f:15:e7:c0:7d:4d:4f:8f:e7:d1:66:ab:5b: 90:53:6c:c0:33:5c:1c:95:9d:e1:26:e4:a6:f5:8c:85:f8:07: b4:9d:16:99:d6:5f:1f:1b:09:4d:ad:92:c5:81:ed:08:7b:82: 70:15:4c:01:86:d1:6f:af:79:91:ab:6a:3c:fb:c6:e9:9d:fc: 2e:8b:d8:8a:c3:9b:76:22:1f:a1:64:cc:30:a4:ac:47:f0:ae: 99:57:cc:80:f5:81:22:51:32:2c:79:37:92:34:21:a9:6d:e7: 2c:88:e4:d5:f9:9b:d7:ef:32:57:b3:18:6a:01:d2:55:00:46: 71:27:9d:d8:3d:a4:7c:75:cc:8a:9d:c6:27:7d:3f:82:6c:c3: f9:47:b6:66:c0:a0:45:d0:d6:11:89:eb:29:ea:02:7d:b9:0f: 04:38:56:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnjfX0ZAzqNY1OMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDcwZDJkMDEtNjM0YS00ZjZkLTlhYTUtZTg4MTcyZmFhMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Zk9WKuw8YZmSFWMYQYA0uNjb9TvIeO/csBX jduAocfW3gSwaUFYcHPcwY13HGDJ182LF4a5He7PCyEPKyt+2vpxp7vwllYJ5NFe uKss0U7SXp1JHAHQDqvZBZIegEP7P3CpaHLKXHUjSAxGtTL0kKwZDxmKKijx2zsZ GqkMcuU/mp6QexZdkS18PBdYSKHpzqX7gPCpKtNLyPnO2hAcsUf+c+LazN0w8X2F LQmRmlfFvjwuvYLF8rEW4J318J3v9NAwYdUJvPpW0ChmMhMmzH0QTJ5PVi2Zq+6f v4Iw7CL1o8HqFHH3kh5G97WDUbDmNHlKI8BDA+3NpPvxctLLDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiKX11YqT+V6VLBABMl6hmW+V13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTA4MmE4ZTQtODBiYy0z NTdlLWFhMWItYTc2ZDczMzUwOWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8aKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSPzgI7WfdFnyHE1aASxvaCHXPcmwNSVTWsJGY88N3mPmeiC14wrOQL jLLuFCq6n78JzYCpzwbNgo6E72e/gYghKWRUW+s/PGRiC6OfkC9/h8JTzp6lGqhS 8SjDrA7zXxXnwH1NT4/n0WarW5BTbMAzXByVneEm5Kb1jIX4B7SdFpnWXx8bCU2t ksWB7Qh7gnAVTAGG0W+veZGrajz7xumd/C6L2IrDm3YiH6FkzDCkrEfwrplXzID1 gSJRMix5N5I0Ialt5yyI5NX5m9fvMlezGGoB0lUARnEnndg9pHx1zIqdxid9P4Js w/lHtmbAoEXQ1hGJ6ynqAn25DwQ4Vrc= -----END CERTIFICATE-----Generated at Mon Sep 21 20:19:23 2026 by rpki-client