$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/641f38f8-7e0c-3e10-9981-d2fcc527382e.roa File: 641f38f8-7e0c-3e10-9981-d2fcc527382e.roa (raw, json) Hash identifier: Ho5CjE20b4JK8OOGq+5rnG/GWfU1Qmkc5H4CQZUF8RM= Subject key identifier: 46:FB:30:89:10:0E:92:2C:05:C6:9B:75:9B:6B:07:CF:53:CF:34:8A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119ED870C61CF12CBDC33860 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/641f38f8-7e0c-3e10-9981-d2fcc527382e.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 71.225.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:d8:70:c6:1c:f1:2c:bd:c3:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2d3275f3-00bc-489c-bd24-6d5ab5d9b129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:be:86:15:42:ee:d0:5a:31:42:e9:d6:61: 51:3a:93:c3:8e:2f:e7:82:f8:81:33:77:7e:cb:f5: 3e:0e:b7:80:28:d2:96:f6:d8:f0:c5:0c:6a:c0:80: 57:ca:f2:df:33:fb:58:3e:7f:a2:17:cd:b8:3c:b6: 36:cf:7a:7f:60:da:cd:d1:4b:56:09:9d:54:7a:e0: 87:01:98:1c:bf:80:d8:7e:ea:35:53:66:f5:a8:71: 67:d7:b8:b7:1f:16:e3:52:3e:4d:d9:e0:aa:f1:85: cf:e0:db:99:54:5c:b6:33:6e:a1:f6:28:39:e4:04: 81:59:75:1f:25:ae:10:b8:bb:63:f0:a7:8d:a2:e9: db:fd:12:28:67:cc:52:40:b0:10:f2:59:cf:a1:cc: a0:29:0e:a0:af:77:13:cf:07:f9:99:eb:08:ed:a5: 3a:e7:ec:71:70:2e:3d:67:03:7f:5b:7a:99:f4:f9: 65:52:d0:55:0c:8a:63:d1:b2:7a:f2:0f:f0:8c:a8: 59:88:95:cd:75:06:63:9c:ec:59:63:48:df:3c:90: 3f:0d:4d:6c:6a:f7:48:de:94:3d:58:37:70:20:28: 66:94:88:53:97:a4:4e:32:dd:d8:e8:20:ba:69:69: fd:37:86:e3:01:38:a1:82:61:bf:ef:02:55:6d:20: cf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FB:30:89:10:0E:92:2C:05:C6:9B:75:9B:6B:07:CF:53:CF:34:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/641f38f8-7e0c-3e10-9981-d2fcc527382e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:50:b9:5f:88:0e:5b:f3:fa:52:4f:2a:bc:73:b8:f5:4f:bc: 63:52:4f:85:69:9e:d3:83:2f:19:33:23:ef:1b:65:c3:46:e8: 44:89:56:a2:2a:dc:bb:eb:6e:6f:fd:b1:37:aa:1d:d4:e0:7f: 9e:22:ba:8e:0f:1c:56:33:ed:3c:d1:59:c2:81:a8:30:56:13: c9:5f:06:05:21:a1:c7:60:98:7c:c7:3c:62:a9:9c:ae:20:66: 81:e9:97:d5:d6:df:e3:23:b8:4f:e3:2f:c5:56:e9:e3:75:0d: fa:a5:b5:32:69:2f:e8:82:2f:b1:af:29:11:80:55:c6:cb:aa: 8b:bb:35:d9:76:b1:1a:76:9d:01:9e:a7:3b:28:68:cd:e7:e3: d6:f1:12:51:dc:8a:53:44:56:3d:3e:c9:5f:25:d1:c4:44:e6: 3e:71:c3:65:9a:47:03:41:a7:69:b1:a2:9e:79:00:12:97:a6: 0b:d1:1c:66:69:c0:62:20:fc:7e:95:fd:8e:35:0e:8c:c3:d4: ac:59:8f:40:7d:08:10:f0:ff:a9:20:8a:5e:00:ac:bc:b7:e7: 91:8f:52:2d:2c:f8:9e:94:f9:a0:1e:06:ff:af:b9:83:fe:19: 54:95:15:d6:a1:65:d5:67:5b:09:4a:85:45:ba:51:18:10:78: 23:99:ac:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnthwxhzxLL3DOGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmQzMjc1ZjMtMDBiYy00ODljLWJkMjQtNmQ1YWI1ZDliMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllO+hhVC7tBaMULp1mFROpPDji/ngviBM3d+ y/U+DreAKNKW9tjwxQxqwIBXyvLfM/tYPn+iF824PLY2z3p/YNrN0UtWCZ1UeuCH AZgcv4DYfuo1U2b1qHFn17i3HxbjUj5N2eCq8YXP4NuZVFy2M26h9ig55ASBWXUf Ja4QuLtj8KeNounb/RIoZ8xSQLAQ8lnPocygKQ6gr3cTzwf5mesI7aU65+xxcC49 ZwN/W3qZ9PllUtBVDIpj0bJ68g/wjKhZiJXNdQZjnOxZY0jfPJA/DU1savdI3pQ9 WDdwIChmlIhTl6ROMt3Y6CC6aWn9N4bjATihgmG/7wJVbSDPDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb7MIkQDpIsBcabdZtrB89TzzSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQxZjM4ZjgtN2UwYy0z ZTEwLTk5ODEtZDJmY2M1MjczODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+HQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpQuV+IDlvz+lJPKrxzuPVPvGNST4VpntODLxkzI+8bZcNG6ESJVqIq 3Lvrbm/9sTeqHdTgf54iuo4PHFYz7TzRWcKBqDBWE8lfBgUhocdgmHzHPGKpnK4g ZoHpl9XW3+MjuE/jL8VW6eN1DfqltTJpL+iCL7GvKRGAVcbLqou7Ndl2sRp2nQGe pzsoaM3n49bxElHcilNEVj0+yV8l0cRE5j5xw2WaRwNBp2mxop55ABKXpgvRHGZp wGIg/H6V/Y41DozD1KxZj0B9CBDw/6kgil4ArLy355GPUi0s+J6U+aAeBv+vuYP+ GVSVFdahZdVnWwlKhUW6URgQeCOZrC8= -----END CERTIFICATE-----Generated at Mon Sep 28 00:57:00 2026 by rpki-client