$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3abf88e4-aac4-31c2-9b69-63b8d9efa472.roa File: 3abf88e4-aac4-31c2-9b69-63b8d9efa472.roa (raw, json) Hash identifier: 7Ldp7/ZGQ/5+sFjmHGhG7MBiv7WGGFxNq8vX91GV5as= Subject key identifier: 7A:DE:4E:79:BC:9A:BE:E7:89:02:9C:4E:70:B6:76:ED:76:C2:DC:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E39D5F39EB5807CF5FC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3abf88e4-aac4-31c2-9b69-63b8d9efa472.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 71.202.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:39:d5:f3:9e:b5:80:7c:f5:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=cee8e07f-0b71-4254-8242-d5ca401bfbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:a8:c2:2a:d6:b3:76:ab:7b:b7:63:1e:d8: 5a:9f:2e:39:53:56:f7:3b:88:82:8b:47:88:ca:5b: 70:59:4b:21:b3:a0:e0:73:bb:c5:64:2d:fb:62:08: 49:73:21:37:35:e7:28:32:46:31:54:9a:92:2f:20: 96:48:d5:06:d3:eb:56:1c:6e:a3:a4:3b:aa:75:01: e2:c3:00:1a:38:98:f6:81:8b:3d:04:a7:2e:7e:3c: ae:cc:93:a0:9e:8d:a0:e3:a4:a2:a3:ac:6a:27:7f: f5:a6:9c:52:8a:5e:36:0a:ab:b4:94:61:e5:16:c2: c7:71:3f:c1:6a:08:c2:e1:1b:e4:19:18:d1:c0:ad: 85:f3:5a:8d:f2:0c:0c:95:d6:bb:80:cc:47:65:86: f7:dc:b2:21:4d:04:83:ce:2c:d4:42:aa:e1:41:ba: c5:bc:20:bc:08:c0:41:38:e3:1b:e1:30:a2:26:6c: ee:6a:c0:48:95:89:aa:b1:b8:bc:83:25:f4:a2:91: 53:19:a5:eb:1d:9f:79:ee:0f:10:c7:fb:09:da:e1: 44:75:02:6e:81:d7:76:49:82:3d:26:4b:5c:b5:12: d7:e3:7d:e9:52:26:49:9d:2d:97:6c:2d:42:d4:10: 3e:3c:bf:a3:bb:9a:b4:81:28:41:22:44:be:ba:80: 8f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DE:4E:79:BC:9A:BE:E7:89:02:9C:4E:70:B6:76:ED:76:C2:DC:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3abf88e4-aac4-31c2-9b69-63b8d9efa472.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.202.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c5:0b:7c:96:7a:16:ae:18:2a:3e:a9:42:e5:e9:8e:53:72: 5a:7b:ee:d4:08:a1:d8:6c:d9:8b:6e:3f:8d:ef:d0:0e:97:31: 78:fe:c7:3d:88:d6:4b:1d:9d:b3:35:b6:47:17:d8:56:59:94: 41:d0:da:52:89:34:cd:b1:4b:46:c1:ac:6e:c2:c4:72:1c:d6: 5b:4d:73:27:41:7b:21:01:83:3d:52:9a:48:d8:4a:7e:30:38: f2:74:88:c0:cd:98:82:6c:6e:0a:22:07:a3:62:8d:dc:97:c3: 5f:48:0f:23:7d:33:b8:93:80:b9:9c:11:64:33:47:e9:29:05: 17:82:23:ef:34:4d:e4:dc:73:b2:8a:70:3c:9d:aa:51:04:d1: 57:77:7c:29:50:f9:b9:1e:31:74:dd:e9:23:51:a0:3a:26:54: e0:a2:1d:04:cc:a5:1a:65:d6:84:d0:03:8e:70:9a:fc:13:cf: 56:c2:4a:a8:3c:63:a5:d9:75:df:09:4b:e2:9c:75:ac:e5:8a: da:8d:a3:a9:63:89:23:f8:68:b0:78:87:77:dd:d1:fa:91:12: 16:82:82:fb:24:f5:cf:4c:30:f9:8c:15:40:b0:59:a1:d9:f0: 8f:a9:52:98:d3:14:81:6c:f3:97:0a:04:f7:65:e3:39:60:b7: 1c:44:8a:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnjnV8561gHz1/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2VlOGUwN2YtMGI3MS00MjU0LTgyNDItZDVjYTQwMWJmYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz2owirWs3are7djHthany45U1b3O4iCi0eI yltwWUshs6Dgc7vFZC37YghJcyE3NecoMkYxVJqSLyCWSNUG0+tWHG6jpDuqdQHi wwAaOJj2gYs9BKcufjyuzJOgno2g46Sio6xqJ3/1ppxSil42Cqu0lGHlFsLHcT/B agjC4RvkGRjRwK2F81qN8gwMlda7gMxHZYb33LIhTQSDzizUQqrhQbrFvCC8CMBB OOMb4TCiJmzuasBIlYmqsbi8gyX0opFTGaXrHZ957g8Qx/sJ2uFEdQJugdd2SYI9 JktctRLX433pUiZJnS2XbC1C1BA+PL+ju5q0gShBIkS+uoCPnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHreTnm8mr7niQKcTnC2du12wtxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FiZjg4ZTQtYWFjNC0z MWMyLTliNjktNjNiOGQ5ZWZhNDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjFC3yWehauGCo+qULl6Y5Tclp77tQIodhs2YtuP43v0A6XMXj+xz2I 1ksdnbM1tkcX2FZZlEHQ2lKJNM2xS0bBrG7CxHIc1ltNcydBeyEBgz1SmkjYSn4w OPJ0iMDNmIJsbgoiB6NijdyXw19IDyN9M7iTgLmcEWQzR+kpBReCI+80TeTcc7KK cDydqlEE0Vd3fClQ+bkeMXTd6SNRoDomVOCiHQTMpRpl1oTQA45wmvwTz1bCSqg8 Y6XZdd8JS+KcdazlitqNo6ljiSP4aLB4h3fd0fqREhaCgvsk9c9MMPmMFUCwWaHZ 8I+pUpjTFIFs85cKBPdl4zlgtxxEikE= -----END CERTIFICATE-----Generated at Mon Sep 21 02:36:08 2026 by rpki-client