$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/324b3e61-d664-384d-a5b9-8b90c073dd44.roa File: 324b3e61-d664-384d-a5b9-8b90c073dd44.roa (raw, json) Hash identifier: rn+9k2A3DAPcL4/HvziA1bH5yujt1r5Hx36wL54D/+0= Subject key identifier: 41:5C:5C:20:D0:AD:E8:E3:81:FA:A7:AB:D7:5C:9C:C1:9E:5F:3E:2D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E3A777AEA593C20AA0742 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/324b3e61-d664-384d-a5b9-8b90c073dd44.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 71.204.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:3a:77:7a:ea:59:3c:20:aa:07:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=3c4c6c88-e2ec-4039-b2f9-6ace8d4a2944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:0b:4f:ab:bb:0f:f2:e8:f1:87:cb:35:28: 06:2c:42:71:bd:f1:6c:2f:d8:6c:17:a2:fe:e1:da: c8:91:60:a4:62:f5:aa:cc:50:5f:bc:f1:1a:d9:ba: 02:9a:83:39:5c:3d:38:81:b3:29:1c:f6:2c:dc:e8: 8d:d2:8d:c2:91:4e:2a:2a:5c:48:32:e5:38:9a:3e: 53:5f:cd:b9:d5:bb:08:47:03:ad:36:4f:37:da:b6: ef:c5:f8:50:80:74:fa:73:90:69:18:6d:3c:d2:4e: ff:15:1e:36:52:80:2c:3e:0c:96:f5:a9:9f:64:4b: 92:de:67:c5:0d:84:80:61:1a:3b:11:68:58:61:57: 63:6a:31:d0:d7:41:bc:f3:1c:10:71:49:9a:8f:19: 5a:0a:20:a0:a6:61:a0:11:d4:09:9d:65:c7:a2:0d: 63:42:b8:5f:ca:bc:28:b6:ad:ea:79:ca:ae:5c:12: 53:c2:de:f6:91:62:f7:f1:96:87:c4:1b:82:52:08: 28:3f:7a:64:26:59:ca:af:ec:31:84:c4:d0:52:07: c3:0f:ce:34:3a:25:05:63:6c:40:9d:be:ff:5b:60: c1:cf:20:79:73:f2:c4:1c:fb:ad:d9:fd:3f:6f:88: 8f:06:0c:6c:e5:ab:f0:58:ca:0d:f7:75:88:45:a9: ed:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5C:5C:20:D0:AD:E8:E3:81:FA:A7:AB:D7:5C:9C:C1:9E:5F:3E:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/324b3e61-d664-384d-a5b9-8b90c073dd44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:af:47:c4:0e:84:4d:68:83:c2:15:4a:cb:74:f3:76:ec:cb: 67:16:b3:5f:9b:c7:c6:f1:b8:2a:a9:65:da:42:37:7d:db:39: ba:84:a2:56:08:39:17:29:f8:19:57:ca:96:d2:ed:92:85:fc: 31:a8:a0:52:1c:2a:45:7e:ca:23:d5:5f:b5:e0:98:01:1c:fd: bd:eb:de:05:70:2a:c5:f7:05:ca:6d:6f:97:23:13:93:ea:e5: 84:95:59:4e:44:f6:c5:dd:a5:86:32:64:aa:53:8d:cc:81:09: 39:91:6b:dc:fa:f7:27:23:a1:a0:19:ab:75:73:36:94:f5:78: fc:9f:87:2e:23:69:4b:40:74:ac:44:7c:ed:ae:a5:b3:19:1d: ba:c1:54:d9:c7:d8:4b:c2:e4:71:4a:cc:05:39:37:16:63:74: 84:ba:28:a1:b0:a5:af:90:de:26:07:4d:d3:36:e2:42:c5:30: de:00:94:30:5a:aa:0b:d7:91:dd:f6:62:87:87:d0:a8:07:35: 38:0f:38:6f:69:c0:ba:7e:4c:64:71:5a:93:9a:ef:73:f3:d4: f2:41:4f:1d:64:c4:4a:26:48:d7:72:5d:e0:1c:2e:f1:de:33: 51:a6:ca:bc:96:99:27:e9:d7:fe:85:84:2f:4a:b0:5f:b4:eb: 0b:ba:2e:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnjp3eupZPCCqB0IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk M2M0YzZjODgtZTJlYy00MDM5LWIyZjktNmFjZThkNGEyOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU4LT6u7D/Lo8YfLNSgGLEJxvfFsL9hsF6L+ 4drIkWCkYvWqzFBfvPEa2boCmoM5XD04gbMpHPYs3OiN0o3CkU4qKlxIMuU4mj5T X8251bsIRwOtNk832rbvxfhQgHT6c5BpGG080k7/FR42UoAsPgyW9amfZEuS3mfF DYSAYRo7EWhYYVdjajHQ10G88xwQcUmajxlaCiCgpmGgEdQJnWXHog1jQrhfyrwo tq3qecquXBJTwt72kWL38ZaHxBuCUggoP3pkJlnKr+wxhMTQUgfDD840OiUFY2xA nb7/W2DBzyB5c/LEHPut2f0/b4iPBgxs5avwWMoN93WIRantSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFcXCDQrejjgfqnq9dcnMGeXz4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI0YjNlNjEtZDY2NC0z ODRkLWE1YjktOGI5MGMwNzNkZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8y8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByvR8QOhE1og8IVSst083bsy2cWs1+bx8bxuCqpZdpCN33bObqEolYI ORcp+BlXypbS7ZKF/DGooFIcKkV+yiPVX7XgmAEc/b3r3gVwKsX3Bcptb5cjE5Pq 5YSVWU5E9sXdpYYyZKpTjcyBCTmRa9z69ycjoaAZq3VzNpT1ePyfhy4jaUtAdKxE fO2upbMZHbrBVNnH2EvC5HFKzAU5NxZjdIS6KKGwpa+Q3iYHTdM24kLFMN4AlDBa qgvXkd32YoeH0KgHNTgPOG9pwLp+TGRxWpOa73Pz1PJBTx1kxEomSNdyXeAcLvHe M1GmyryWmSfp1/6FhC9KsF+06wu6LuU= -----END CERTIFICATE-----Generated at Sun Sep 20 17:27:26 2026 by rpki-client