$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/814b1e1a-ad20-3de3-a735-e358f988599a.roa File: 814b1e1a-ad20-3de3-a735-e358f988599a.roa (raw, json) Hash identifier: +m9u0RRM4eOwqLGgVKdhN9Cf/eCOxt1eWwF/GPsHefg= Subject key identifier: 2F:06:F7:54:6A:61:94:1B:27:A8:DB:33:AB:D1:88:C3:C6:CD:66:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497798A17E04285F9B4A9340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/814b1e1a-ad20-3de3-a735-e358f988599a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 71.228.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:98:a1:7e:04:28:5f:9b:4a:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c74f7bc4-1324-4ace-bc5c-5952e2e3433c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:ae:a8:09:23:43:77:53:e9:16:88:6c:4f: 32:48:fd:07:9c:de:ea:42:1f:a1:52:20:b8:54:91: 8a:29:4c:26:14:2a:7e:26:19:40:10:f3:5f:02:db: 50:f6:6b:3a:35:0f:b0:49:c5:90:b6:4c:ec:97:eb: 4d:32:90:d3:be:23:9c:8c:ef:ae:15:16:d6:60:7a: 75:52:e9:92:d0:32:8f:0c:8d:a2:9b:ba:9b:02:6a: 09:2c:23:35:c1:32:81:88:fc:e2:b1:1a:69:5d:84: 0c:a6:65:38:10:fd:6c:04:cf:d5:17:85:67:9d:3c: b2:7a:4b:31:57:a3:18:99:34:ce:4f:2c:f9:90:e6: 7d:57:cb:41:55:ee:1c:83:43:5e:31:35:9a:67:a2: e6:f4:80:97:c8:0f:e6:22:ac:e7:8e:25:c4:a9:f5: 62:28:de:80:3c:59:40:1f:52:6a:08:82:47:5a:8c: 59:58:e5:04:29:66:b5:ac:a7:10:99:5d:f1:36:70: a0:00:0c:0f:90:a6:f4:32:af:5c:36:1c:fb:d4:28: 6c:b5:11:b7:49:83:ec:59:9a:ec:ec:64:1b:05:3a: d2:d0:79:54:b3:46:8c:2f:8c:72:54:7b:a9:48:91: ab:b7:d7:c6:34:bf:9d:2d:08:0a:26:97:86:b7:42: 9d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:06:F7:54:6A:61:94:1B:27:A8:DB:33:AB:D1:88:C3:C6:CD:66:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/814b1e1a-ad20-3de3-a735-e358f988599a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:de:a8:7b:a2:04:46:06:4e:9e:d9:0a:cf:3b:02:67:2f:1b: be:d6:9d:68:4e:ff:c6:49:ab:f6:e6:5d:cf:d0:5f:ce:9a:86: ec:df:8b:82:ef:26:f8:63:36:8e:86:c2:5c:81:2b:16:d4:d2: ad:4f:fb:6d:c7:0d:99:a6:8e:2d:ad:5c:d4:c6:cb:4d:2d:5c: 21:54:12:be:61:db:48:7c:98:04:60:cb:69:24:72:51:98:6b: 62:53:fc:5e:ab:64:0e:c5:95:0d:78:40:cf:9b:00:85:a7:03: 6d:98:81:4b:2c:3f:ad:a6:65:a4:5d:83:a4:80:3d:4d:1b:b0: cf:94:a3:41:ee:23:77:53:75:34:07:36:23:4d:39:45:9b:0f: ca:7d:70:ca:8d:a0:ca:3a:e1:11:d6:52:80:cc:a6:46:18:16: ba:70:72:92:04:ab:39:68:8b:8c:b1:32:54:15:6b:1c:82:91: 74:d4:3c:f6:cb:2c:bc:21:e2:47:55:2a:bc:53:d5:c6:e0:01: f9:0b:7e:93:80:82:23:ca:bb:da:ad:27:30:aa:6e:6d:87:97: a4:a7:9f:29:94:c1:ce:c2:d5:9d:b4:e1:95:a7:cf:95:64:60: ec:a5:21:a2:c0:15:10:3b:ca:b2:8c:8c:b6:ca:0f:4f:11:73: 98:b0:bd:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd5ihfgQoX5tKk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzc0ZjdiYzQtMTMyNC00YWNlLWJjNWMtNTk1MmUyZTM0MzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+euqAkjQ3dT6RaIbE8ySP0HnN7qQh+hUiC4 VJGKKUwmFCp+JhlAEPNfAttQ9ms6NQ+wScWQtkzsl+tNMpDTviOcjO+uFRbWYHp1 UumS0DKPDI2im7qbAmoJLCM1wTKBiPzisRppXYQMpmU4EP1sBM/VF4VnnTyyeksx V6MYmTTOTyz5kOZ9V8tBVe4cg0NeMTWaZ6Lm9ICXyA/mIqznjiXEqfViKN6APFlA H1JqCIJHWoxZWOUEKWa1rKcQmV3xNnCgAAwPkKb0Mq9cNhz71ChstRG3SYPsWZrs 7GQbBTrS0HlUs0aML4xyVHupSJGrt9fGNL+dLQgKJpeGt0Kd9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8G91RqYZQbJ6jbM6vRiMPGzWZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODE0YjFlMWEtYWQyMC0z ZGUzLWE3MzUtZTM1OGY5ODg1OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+T8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKreqHuiBEYGTp7ZCs87AmcvG77WnWhO/8ZJq/bmXc/QX86ahuzfi4Lv JvhjNo6GwlyBKxbU0q1P+23HDZmmji2tXNTGy00tXCFUEr5h20h8mARgy2kkclGY a2JT/F6rZA7FlQ14QM+bAIWnA22YgUssP62mZaRdg6SAPU0bsM+Uo0HuI3dTdTQH NiNNOUWbD8p9cMqNoMo64RHWUoDMpkYYFrpwcpIEqzloi4yxMlQVaxyCkXTUPPbL LLwh4kdVKrxT1cbgAfkLfpOAgiPKu9qtJzCqbm2Hl6SnnymUwc7C1Z204ZWnz5Vk YOylIaLAFRA7yrKMjLbKD08Rc5iwvZA= -----END CERTIFICATE-----Generated at Sat Sep 26 19:52:18 2026 by rpki-client