$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/675e279b-38e1-3aac-ae12-6a77436be535.roa File: 675e279b-38e1-3aac-ae12-6a77436be535.roa (raw, json) Hash identifier: Ok0y/K0dCgmzAI6QwWuv8n4s62kULSxLT+AKfPlVh2Q= Subject key identifier: E0:39:8B:46:F0:84:B1:76:AB:68:70:FE:35:00:B7:62:86:60:32:D8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119ED85A0BB4A285E59F3B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/675e279b-38e1-3aac-ae12-6a77436be535.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 71.225.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:d8:5a:0b:b4:a2:85:e5:9f:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=ff99d483-73b2-4e67-bc43-272101674a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:07:dc:bd:16:9f:f0:7e:03:29:64:43:1c: 59:d2:9e:aa:7b:87:8d:53:01:f5:54:f3:59:ab:54: 6e:f1:71:56:0c:5b:9d:e3:7d:c0:e6:5a:42:b7:28: 1f:b7:5e:79:b6:2f:66:36:33:11:06:49:84:16:d7: 0d:3f:8a:2f:2f:0c:32:7a:8a:f3:78:75:00:d6:53: d4:86:58:04:f9:79:2b:7c:46:96:6f:1b:fa:dd:60: e0:12:96:67:33:24:90:db:ff:a3:17:fd:47:54:f1: 9a:aa:b0:92:dc:bd:de:7d:be:56:b6:9a:d1:d6:47: a6:2a:a2:3f:d6:86:9a:b3:2f:4c:b5:60:7b:53:87: a7:eb:31:0a:d3:f2:1f:01:32:1f:d9:1e:13:f7:f5: e6:b1:0a:ed:5e:1d:ea:61:e6:90:10:dd:4f:d4:d4: 14:13:53:97:9b:13:ea:69:c5:73:ee:12:db:0f:12: b2:0f:3b:d5:d3:e3:90:36:e1:43:8c:25:03:8a:c7: 02:fd:ef:3e:4f:3a:8a:d7:4b:3d:9c:19:85:84:fa: 9b:87:4d:38:9a:6d:f8:49:22:88:36:38:25:c0:67: d7:96:16:04:af:d0:7c:72:bf:8a:24:24:4f:00:e8: da:c5:b4:ee:c0:d3:a7:89:75:48:80:64:fb:91:e0: 2d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:39:8B:46:F0:84:B1:76:AB:68:70:FE:35:00:B7:62:86:60:32:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/675e279b-38e1-3aac-ae12-6a77436be535.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:3b:d5:4b:e7:e4:6f:fa:b3:90:74:f7:7d:cf:b0:85:88:94: 65:81:90:9d:f7:a2:3a:26:b2:a4:b6:b0:56:b7:9a:62:82:ab: de:41:e7:54:7b:cd:9c:44:80:3b:7d:57:cf:c1:4b:10:73:41: 77:d9:b0:fe:cc:6f:17:30:8e:90:25:c3:c6:6a:2f:7e:50:fb: 5f:c5:85:3b:ff:97:00:d6:f3:14:38:95:6f:de:c5:8e:90:3c: 78:b1:a5:c0:42:e2:ae:95:92:a3:19:31:0c:a7:50:f4:c7:71: 97:27:ac:18:7e:d9:d3:2f:ab:8c:6a:65:58:c3:8b:e1:57:f9: c2:2e:b8:12:d0:66:13:53:6b:9d:e5:81:7c:47:e8:15:d9:94: 63:29:66:76:88:d7:f5:61:32:55:69:a0:90:d2:0b:c2:f6:fc: db:c7:dc:08:72:8d:55:f0:e7:37:f0:37:8f:0e:7f:eb:92:bb: fc:1d:2c:28:c6:8e:a6:e4:c9:01:52:26:ad:8c:2f:96:90:d9: 6e:11:43:e2:aa:5f:c9:53:2a:77:90:74:9c:e6:4d:98:e2:55: 9d:ae:f5:d4:fb:e1:c8:ef:92:ff:5d:18:50:5a:ca:1e:cd:e1: 48:e5:6c:fd:8b:24:8d:86:49:7f:f0:60:64:2c:6b:9c:fe:d5: 6d:6e:74:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnthaC7SiheWfOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmY5OWQ0ODMtNzNiMi00ZTY3LWJjNDMtMjcyMTAxNjc0YTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNwH3L0Wn/B+AylkQxxZ0p6qe4eNUwH1VPNZ q1Ru8XFWDFud433A5lpCtygft155ti9mNjMRBkmEFtcNP4ovLwwyeorzeHUA1lPU hlgE+XkrfEaWbxv63WDgEpZnMySQ2/+jF/1HVPGaqrCS3L3efb5WtprR1kemKqI/ 1oaasy9MtWB7U4en6zEK0/IfATIf2R4T9/XmsQrtXh3qYeaQEN1P1NQUE1OXmxPq acVz7hLbDxKyDzvV0+OQNuFDjCUDiscC/e8+TzqK10s9nBmFhPqbh004mm34SSKI NjglwGfXlhYEr9B8cr+KJCRPAOjaxbTuwNOniXVIgGT7keAtFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA5i0bwhLF2q2hw/jUAt2KGYDLYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjc1ZTI3OWItMzhlMS0z YWFjLWFlMTItNmE3NzQzNmJlNTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+HMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQ71Uvn5G/6s5B0933PsIWIlGWBkJ33ojomsqS2sFa3mmKCq95B51R7 zZxEgDt9V8/BSxBzQXfZsP7MbxcwjpAlw8ZqL35Q+1/FhTv/lwDW8xQ4lW/exY6Q PHixpcBC4q6VkqMZMQynUPTHcZcnrBh+2dMvq4xqZVjDi+FX+cIuuBLQZhNTa53l gXxH6BXZlGMpZnaI1/VhMlVpoJDSC8L2/NvH3AhyjVXw5zfwN48Of+uSu/wdLCjG jqbkyQFSJq2ML5aQ2W4RQ+KqX8lTKneQdJzmTZjiVZ2u9dT74cjvkv9dGFBayh7N 4UjlbP2LJI2GSX/wYGQsa5z+1W1udMY= -----END CERTIFICATE-----Generated at Thu Oct 8 17:18:22 2026 by rpki-client