$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3674919e-74c5-30ae-b377-1653dc7d9b9e.roa File: 3674919e-74c5-30ae-b377-1653dc7d9b9e.roa (raw, json) Hash identifier: 1yexAsRO6znv8B9NakN2B82myEX9mutUAQhMof+L+is= Subject key identifier: DE:29:6B:C7:C8:0C:9A:72:1A:48:A4:87:35:58:23:AC:1E:13:68:76 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E39B4E26B84C9C56F24C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3674919e-74c5-30ae-b377-1653dc7d9b9e.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 71.202.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:39:b4:e2:6b:84:c9:c5:6f:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=4aa1f59c-ad8c-4ad8-8d7d-3dab5cef404b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5d:89:57:18:a2:1a:ca:42:ee:5d:d2:92:1d: 8d:23:24:d0:2c:0d:37:4c:36:86:c5:f3:7b:c8:98: 06:97:69:83:2e:18:18:e3:f2:f5:fd:6a:23:91:e3: 25:5c:65:1c:1e:f0:ea:6d:54:c0:9d:2a:69:94:23: 81:1f:ea:fe:74:4d:17:7b:fd:05:8c:79:17:ef:2c: 06:49:ed:5d:e2:f5:1d:24:76:8a:d7:4b:b9:02:34: 16:a8:22:7c:7c:93:47:0d:54:8a:d9:96:b2:e0:7f: aa:0d:9e:20:92:cf:bf:2f:38:35:63:7a:7d:46:fa: 12:51:1b:06:9a:18:cb:ba:2b:4a:6c:bb:a8:57:c0: ff:0e:c4:c2:1f:97:00:35:8c:c6:5f:f1:d4:80:4f: 6f:a0:0d:dc:26:6b:b8:66:2f:41:f7:be:5e:49:30: 31:0b:f8:47:2c:9e:c5:bf:2e:3c:a0:d3:04:3b:d4: 4f:9f:ae:36:9d:39:29:6c:7e:c8:4c:54:20:c4:e8: b8:58:a9:a7:ea:11:0f:ad:e3:97:2e:1f:5a:a2:2f: 45:50:2d:c8:cc:04:cb:86:74:24:17:c4:0b:22:8a: d7:b0:1a:d6:70:be:99:4b:2a:a9:2a:78:a8:ef:b4: 3c:0b:22:cd:ed:89:01:8e:05:6f:eb:54:a4:61:fe: 44:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:29:6B:C7:C8:0C:9A:72:1A:48:A4:87:35:58:23:AC:1E:13:68:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3674919e-74c5-30ae-b377-1653dc7d9b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.202.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:4d:14:be:0c:ae:e2:12:83:1a:48:6a:4a:cd:ae:38:a9:69: cf:8c:41:67:2e:3b:b3:a1:4b:01:eb:bb:0d:11:34:e3:dd:4e: 93:b4:d8:2a:22:07:ea:0c:63:5b:48:ae:31:ec:a9:1d:60:93: 73:7a:1d:a0:59:77:ad:29:5a:74:e7:71:bc:04:f5:64:44:aa: 2f:27:cb:43:2e:83:49:f6:56:82:49:64:25:ac:38:a7:c8:20: 54:36:4c:b5:13:f7:1d:d5:ab:3d:41:44:86:c5:2b:d3:c3:66: 13:94:03:72:b5:f0:73:08:5a:f3:d8:6a:3e:11:2b:98:06:dd: 86:ab:d3:10:be:31:ab:4c:37:af:9c:f5:6f:fa:1e:c0:b4:8f: 81:44:58:49:5a:66:ef:22:db:66:ec:43:d1:f3:47:31:b1:a2: ac:c6:4f:85:46:3b:3e:ee:13:00:71:6b:49:4a:5e:48:9d:d9: 87:79:bc:9c:07:96:5c:cf:07:17:53:db:20:7b:7b:82:6d:14: cc:04:75:32:51:51:fa:1b:cc:09:89:6a:37:8a:4a:4f:c1:de: c8:ff:71:46:f8:27:6b:11:c4:56:6a:57:34:dc:45:67:58:90: ed:70:8a:5c:f1:b2:b1:5e:4e:34:e5:90:b4:75:5c:42:6d:57: bd:f6:47:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnjm04muEycVvJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NGFhMWY1OWMtYWQ4Yy00YWQ4LThkN2QtM2RhYjVjZWY0MDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF2JVxiiGspC7l3Skh2NIyTQLA03TDaGxfN7 yJgGl2mDLhgY4/L1/WojkeMlXGUcHvDqbVTAnSpplCOBH+r+dE0Xe/0FjHkX7ywG Se1d4vUdJHaK10u5AjQWqCJ8fJNHDVSK2Zay4H+qDZ4gks+/Lzg1Y3p9RvoSURsG mhjLuitKbLuoV8D/DsTCH5cANYzGX/HUgE9voA3cJmu4Zi9B975eSTAxC/hHLJ7F vy48oNMEO9RPn642nTkpbH7ITFQgxOi4WKmn6hEPreOXLh9aoi9FUC3IzATLhnQk F8QLIorXsBrWcL6ZSyqpKnio77Q8CyLN7YkBjgVv61SkYf5EnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4pa8fIDJpyGkikhzVYI6weE2h2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzY3NDkxOWUtNzRjNS0z MGFlLWIzNzctMTY1M2RjN2Q5YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8r+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5NFL4MruISgxpIakrNrjipac+MQWcuO7OhSwHruw0RNOPdTpO02Coi B+oMY1tIrjHsqR1gk3N6HaBZd60pWnTncbwE9WREqi8ny0Mug0n2VoJJZCWsOKfI IFQ2TLUT9x3Vqz1BRIbFK9PDZhOUA3K18HMIWvPYaj4RK5gG3Yar0xC+MatMN6+c 9W/6HsC0j4FEWElaZu8i22bsQ9HzRzGxoqzGT4VGOz7uEwBxa0lKXkid2Yd5vJwH llzPBxdT2yB7e4JtFMwEdTJRUfobzAmJajeKSk/B3sj/cUb4J2sRxFZqVzTcRWdY kO1wilzxsrFeTjTlkLR1XEJtV732R24= -----END CERTIFICATE-----Generated at Mon Sep 28 21:15:08 2026 by rpki-client