$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3048d3f8-a3fe-30bb-a85a-08a2bb8192a3.roa File: 3048d3f8-a3fe-30bb-a85a-08a2bb8192a3.roa (raw, json) Hash identifier: AUz5jIX8BhDtXhdvHj1flwb3BZbpG/d23veAXuiHXC4= Subject key identifier: 9C:4F:65:35:9C:AD:E7:6E:B4:32:3A:FC:68:E0:F9:91:34:F2:9D:B0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E9AAEF32E701F98C16A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3048d3f8-a3fe-30bb-a85a-08a2bb8192a3.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 71.58.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:9a:ae:f3:2e:70:1f:98:c1:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=32cd037a-fbb1-45ba-96be-f0fa99872d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:f8:46:0d:21:88:94:c2:fd:aa:a0:d1:e3: af:82:9d:52:d3:47:70:15:73:b7:66:12:44:9f:2e: f1:35:c7:77:6a:ab:2e:00:66:f4:60:c2:17:6d:03: 48:74:d4:77:7f:03:bb:93:7c:ff:84:42:e8:36:01: f2:ff:f3:21:00:d4:c5:43:31:b8:0a:30:b3:9f:60: 8b:e4:9b:8d:2a:bd:5a:4c:32:29:fa:be:32:87:4d: df:43:be:ae:6a:71:a6:a6:47:99:4e:73:e6:98:30: 23:98:5a:c9:d6:6f:f9:7d:b7:d3:fb:f3:c4:50:35: 94:37:46:9e:28:cd:56:42:f4:57:40:c8:18:e3:fb: 2b:9e:2c:14:d5:2c:81:cc:5d:ad:02:85:1b:9f:a0: 48:e8:b7:37:a4:b8:25:2a:42:ca:14:c7:bc:3a:ba: 7f:55:b6:ec:ea:00:8a:46:18:6b:cf:c0:06:af:19: 54:82:7d:00:88:f7:b8:0c:c5:71:f5:1b:0f:40:f3: d7:4d:b4:a9:3a:9b:13:6b:96:2e:23:c9:d8:26:1e: b8:fb:37:b2:18:85:9a:91:57:4b:c4:d9:cb:f7:25: 02:37:10:79:3f:97:ec:e1:da:2d:bf:f9:05:fc:ff: ec:2a:a0:55:63:71:c2:32:8a:80:68:e8:b1:96:0c: 02:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4F:65:35:9C:AD:E7:6E:B4:32:3A:FC:68:E0:F9:91:34:F2:9D:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3048d3f8-a3fe-30bb-a85a-08a2bb8192a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.58.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0e:c6:88:c5:92:bf:53:25:89:d6:e0:e3:c8:14:53:b7:1d: fa:78:92:27:3a:d6:e8:bc:07:f6:5d:62:46:c0:79:cb:d1:ea: bc:cf:e9:1e:ed:a9:09:ca:eb:90:65:ed:d5:1f:5c:c9:96:32: ce:8e:d4:d3:a9:6c:11:0e:1c:93:43:25:38:62:4b:97:c5:79: 50:6f:05:f8:71:d6:3c:80:8b:e0:5e:d3:ca:71:b3:a5:eb:da: cb:7c:7b:cc:62:93:32:c6:d9:a8:9e:1d:02:d1:10:13:1b:f6: fe:82:7d:ae:09:24:d1:78:b9:c5:82:cc:57:c5:58:fb:e2:de: ba:8c:f5:97:7c:90:dd:a0:7d:44:ad:28:03:c3:dd:a8:ba:d7: 0e:55:1b:2b:0e:82:48:85:4b:bb:36:ac:d5:bd:a6:35:6c:00: cc:59:6b:ac:e6:aa:8d:8c:e6:31:ed:6c:6f:2a:11:71:ef:60: 28:b6:74:65:7f:68:b4:0a:54:09:85:b5:bb:dd:72:63:54:bb: d0:02:fa:1b:0c:c9:58:fe:4c:ce:54:83:9f:1d:f3:0a:9c:f2: ec:a1:11:8e:f5:bb:e1:4c:b9:d8:98:ed:fa:e0:88:a4:cf:db: 78:da:ce:20:22:dd:2b:7f:b4:32:92:8f:c4:a9:c1:05:8a:36: 7b:b1:0e:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnpqu8y5wH5jBaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MzJjZDAzN2EtZmJiMS00NWJhLTk2YmUtZjBmYTk5ODcyZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrD4Rg0hiJTC/aqg0eOvgp1S00dwFXO3ZhJE ny7xNcd3aqsuAGb0YMIXbQNIdNR3fwO7k3z/hELoNgHy//MhANTFQzG4CjCzn2CL 5JuNKr1aTDIp+r4yh03fQ76uanGmpkeZTnPmmDAjmFrJ1m/5fbfT+/PEUDWUN0ae KM1WQvRXQMgY4/srniwU1SyBzF2tAoUbn6BI6Lc3pLglKkLKFMe8Orp/Vbbs6gCK Rhhrz8AGrxlUgn0AiPe4DMVx9RsPQPPXTbSpOpsTa5YuI8nYJh64+zeyGIWakVdL xNnL9yUCNxB5P5fs4dotv/kF/P/sKqBVY3HCMoqAaOixlgwCcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxPZTWcredutDI6/Gjg+ZE08p2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzA0OGQzZjgtYTNmZS0z MGJiLWE4NWEtMDhhMmJiODE5MmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRzokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4OxojFkr9TJYnW4OPIFFO3Hfp4kic61ui8B/ZdYkbAecvR6rzP6R7t qQnK65Bl7dUfXMmWMs6O1NOpbBEOHJNDJThiS5fFeVBvBfhx1jyAi+Be08pxs6Xr 2st8e8xikzLG2aieHQLREBMb9v6Cfa4JJNF4ucWCzFfFWPvi3rqM9Zd8kN2gfUSt KAPD3ai61w5VGysOgkiFS7s2rNW9pjVsAMxZa6zmqo2M5jHtbG8qEXHvYCi2dGV/ aLQKVAmFtbvdcmNUu9AC+hsMyVj+TM5Ug58d8wqc8uyhEY71u+FMudiY7frgiKTP 23jaziAi3St/tDKSj8SpwQWKNnuxDmg= -----END CERTIFICATE-----Generated at Mon Sep 21 09:35:58 2026 by rpki-client