$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a33834-89bc-3c55-8d7f-4ca39e62f632.roa File: 35a33834-89bc-3c55-8d7f-4ca39e62f632.roa (raw, json) Hash identifier: 2guu+W4KwVCa2NEj/czDDUGEUVpcEVqxWaJCWVq0d1Y= Subject key identifier: 8C:2C:81:06:4A:BB:F2:93:EE:D5:BC:D3:43:3D:13:E7:F5:7E:55:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D77ECA7493396F7D3B5EA Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a33834-89bc-3c55-8d7f-4ca39e62f632.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 71.59.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:77:ec:a7:49:33:96:f7:d3:b5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=97f38db5-0b15-426e-bc41-680d400c84ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:15:23:d7:45:a4:89:60:74:3d:ac:cf:3d:bd: 1b:f0:5e:74:03:e6:ff:86:e2:7f:ee:3e:98:b5:67: 34:ae:49:68:d5:45:38:7d:a1:6e:9e:69:2f:c8:d3: 65:4a:a3:03:3e:42:da:14:68:52:49:77:7a:9a:bf: 8d:f5:29:0c:26:f3:c1:a6:3a:39:f3:04:7e:33:4e: f0:36:07:40:2f:6a:18:c8:ce:cb:52:d7:a0:76:83: d3:6a:5b:7d:16:ea:12:0a:9f:87:8f:94:ca:af:6b: 7a:bc:9c:02:eb:ae:15:ca:b3:3e:c7:40:bf:86:ae: 76:f4:1a:f9:db:c7:6a:e7:0a:63:76:49:1d:56:7e: 0d:22:5e:72:14:3f:44:9c:c9:95:fc:cf:14:b5:0c: 53:89:18:40:1d:62:b6:39:da:20:5f:62:2b:dd:3e: 0e:c9:71:0d:6f:29:14:f3:8b:e8:8b:25:f0:26:a1: 5a:c8:a1:74:12:d1:70:63:e6:4c:80:d1:12:81:7f: b1:7d:9f:9f:f0:ad:ef:e0:05:27:97:82:04:0f:28: 3d:2c:8a:0e:d6:e9:25:b1:5b:29:79:0e:20:ac:c3: 32:da:ab:03:ff:92:a1:4d:82:8b:7f:42:c5:22:12: ff:6b:5e:3e:92:21:2e:e5:df:d9:c2:a9:bf:01:33: 34:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2C:81:06:4A:BB:F2:93:EE:D5:BC:D3:43:3D:13:E7:F5:7E:55:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a33834-89bc-3c55-8d7f-4ca39e62f632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.59.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:24:af:23:b0:8e:bd:34:18:2c:38:2d:e8:f2:c2:03:80:43: fb:ed:fc:98:31:bd:71:9f:88:d3:23:4f:75:01:97:76:f9:58: 60:6c:db:74:e3:5d:7f:d1:cc:6b:7a:ae:dd:52:44:5a:c0:d0: 7e:ce:a3:5b:e2:4e:6f:ef:40:d2:32:e7:e2:94:4e:b5:1d:f9: 5f:52:ce:28:b1:1b:2e:dd:d1:da:85:81:c4:b3:92:28:e5:c3: e5:f3:22:9d:43:6b:31:d1:cf:25:50:55:5f:d5:c5:95:5a:ad: 3f:d4:f1:62:c3:76:a6:09:2d:ea:44:bd:e6:f9:66:11:04:34: 69:56:14:c8:8a:8a:34:94:ee:2e:a4:e6:f9:80:e5:5f:d6:26: c2:d2:5e:aa:3a:ad:f3:84:2d:9c:18:d4:5c:ea:a7:8d:b3:d5: 35:90:03:8c:c6:04:a7:16:e5:c8:51:01:e2:a0:ba:c3:77:73: 38:16:66:a4:9c:0d:10:79:4f:23:c7:48:43:0d:3f:8c:19:8d: 48:98:9a:5a:77:86:cc:6d:69:75:f4:fd:5c:29:15:65:ba:26: 4c:ac:84:8f:42:9b:06:27:0f:da:41:de:c7:f1:d7:d2:ae:06: 4c:3f:f8:ce:fd:4a:34:8c:83:00:a3:67:2e:cb:28:79:8d:a2: da:11:f6:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnXfsp0kzlvfTteowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OTdmMzhkYjUtMGIxNS00MjZlLWJjNDEtNjgwZDQwMGM4NGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BUj10WkiWB0PazPPb0b8F50A+b/huJ/7j6Y tWc0rklo1UU4faFunmkvyNNlSqMDPkLaFGhSSXd6mr+N9SkMJvPBpjo58wR+M07w NgdAL2oYyM7LUtegdoPTalt9FuoSCp+Hj5TKr2t6vJwC664VyrM+x0C/hq529Br5 28dq5wpjdkkdVn4NIl5yFD9EnMmV/M8UtQxTiRhAHWK2OdogX2Ir3T4OyXENbykU 84voiyXwJqFayKF0EtFwY+ZMgNESgX+xfZ+f8K3v4AUnl4IEDyg9LIoO1uklsVsp eQ4grMMy2qsD/5KhTYKLf0LFIhL/a14+kiEu5d/Zwqm/ATM0FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwsgQZKu/KT7tW800M9E+f1flXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzVhMzM4MzQtODliYy0z YzU1LThkN2YtNGNhMzllNjJmNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRztAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgkryOwjr00GCw4LejywgOAQ/vt/JgxvXGfiNMjT3UBl3b5WGBs23Tj XX/RzGt6rt1SRFrA0H7Oo1viTm/vQNIy5+KUTrUd+V9SziixGy7d0dqFgcSzkijl w+XzIp1DazHRzyVQVV/VxZVarT/U8WLDdqYJLepEveb5ZhEENGlWFMiKijSU7i6k 5vmA5V/WJsLSXqo6rfOELZwY1Fzqp42z1TWQA4zGBKcW5chRAeKgusN3czgWZqSc DRB5TyPHSEMNP4wZjUiYmlp3hsxtaXX0/VwpFWW6JkyshI9CmwYnD9pB3sfx19Ku Bkw/+M79SjSMgwCjZy7LKHmNotoR9kE= -----END CERTIFICATE-----Generated at Sat Sep 26 19:26:14 2026 by rpki-client