$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af852dc1-3156-32ef-b8d3-aa99848c7c69.roa File: af852dc1-3156-32ef-b8d3-aa99848c7c69.roa (raw, json) Hash identifier: bcGcK4HaXRwvjVGcW4PosSL0o/lNJhmJvoaL4ZKk93A= Subject key identifier: EE:53:B9:F8:5B:A1:C0:F5:5B:AB:B4:A7:84:B3:CC:30:F0:80:42:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4978EE3F654117BB37E9BAA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af852dc1-3156-32ef-b8d3-aa99848c7c69.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33668 IP address blocks: 71.197.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:ee:3f:65:41:17:bb:37:e9:ba:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0a1d040a-4baf-4735-974b-03db5aa7503a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:96:0a:a9:82:a3:52:6d:cc:de:97:6f:83:3b: 1a:c6:31:28:f5:dd:6c:b9:c0:61:88:9c:52:ab:cd: 3e:d0:dc:89:5c:46:be:d4:16:9d:04:9e:a4:e8:df: f2:e4:3f:2c:7c:f7:b7:27:cb:7d:af:9f:13:6a:f8: dd:b7:ba:77:b5:7a:51:c7:1c:0d:cf:48:a6:e2:fb: 0f:92:4d:de:92:fd:f6:0b:1c:fe:58:8f:1f:04:42: b1:b8:66:bb:ad:89:4d:c9:7f:33:c8:18:81:65:6c: 73:f9:f2:cb:12:21:78:0e:97:e5:67:54:fa:c3:91: 75:3f:37:1f:16:aa:21:81:eb:46:03:bf:c1:88:37: b7:78:40:d8:fd:43:55:b8:1f:be:52:df:48:6e:b6: 1a:d7:69:20:d9:b2:25:7b:17:3d:e1:fa:f4:84:8c: 43:fc:5a:07:ae:33:65:bd:da:e6:08:00:a9:65:bb: 94:33:18:f7:c6:53:e9:b8:cf:64:9b:54:de:7e:69: 0c:c4:1f:46:33:b9:25:15:7e:4d:5a:e8:3c:f2:50: 3a:d7:28:ec:92:99:55:95:70:36:f6:bc:0d:20:84: cf:c4:84:b8:bc:bd:c6:4d:c2:fa:47:3e:f3:6f:d7: db:3b:57:dc:f0:ec:96:27:a8:da:36:92:bd:5b:3e: 1c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:53:B9:F8:5B:A1:C0:F5:5B:AB:B4:A7:84:B3:CC:30:F0:80:42:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af852dc1-3156-32ef-b8d3-aa99848c7c69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.197.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b4:66:d6:cd:c7:94:7b:c8:c6:2d:91:32:76:a2:17:64:1a: 22:61:0d:90:0f:db:7b:ce:e7:61:33:91:50:52:f7:9b:f9:51: 71:13:23:47:fb:c7:68:50:2b:c8:0b:08:86:dd:30:ea:85:31: 7b:29:49:83:99:d1:eb:2a:5c:1d:5b:54:01:1c:e3:da:97:81: c6:b8:47:18:92:7a:73:5a:d8:b8:96:5d:18:db:78:78:04:e4: 20:71:fb:8c:2e:ef:0b:0c:8b:db:b9:77:47:e5:a1:78:dd:1f: 30:99:7b:58:e0:19:ca:98:10:87:ee:cb:9f:5c:bc:3c:90:4a: c9:1b:6b:43:c0:8a:d1:83:6e:16:0c:24:00:49:76:6e:e3:67: bd:ff:a2:f7:7e:b3:7a:04:cb:97:94:b6:93:34:b0:f9:b2:d7: 27:89:c2:a9:ea:0f:89:e5:8f:a0:89:24:4b:47:5d:56:d0:1a: 75:bd:64:b6:3c:c0:ef:e4:61:76:ab:ac:8b:ae:be:b4:7a:b9: 6f:35:00:31:e4:29:e3:fe:31:af:11:e3:64:98:08:60:d5:eb: ac:8c:74:3e:d8:23:99:1b:8a:ee:70:df:b0:41:3b:aa:7a:ac: 46:48:b9:73:27:25:2a:56:c2:6a:a0:de:7d:a3:e9:6c:eb:e2: 0d:43:cc:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeO4/ZUEXuzfpuqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGExZDA0MGEtNGJhZi00NzM1LTk3NGItMDNkYjVhYTc1MDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpYKqYKjUm3M3pdvgzsaxjEo9d1sucBhiJxS q80+0NyJXEa+1BadBJ6k6N/y5D8sfPe3J8t9r58Tavjdt7p3tXpRxxwNz0im4vsP kk3ekv32Cxz+WI8fBEKxuGa7rYlNyX8zyBiBZWxz+fLLEiF4DpflZ1T6w5F1Pzcf FqohgetGA7/BiDe3eEDY/UNVuB++Ut9IbrYa12kg2bIlexc94fr0hIxD/FoHrjNl vdrmCACpZbuUMxj3xlPpuM9km1TefmkMxB9GM7klFX5NWug88lA61yjskplVlXA2 9rwNIITPxIS4vL3GTcL6Rz7zb9fbO1fc8OyWJ6jaNpK9Wz4cMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5TufhbocD1W6u0p4SzzDDwgEIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY4NTJkYzEtMzE1Ni0z MmVmLWI4ZDMtYWE5OTg0OGM3YzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER8UQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW0ZtbNx5R7yMYtkTJ2ohdkGiJhDZAP23vO52EzkVBS95v5UXETI0f7 x2hQK8gLCIbdMOqFMXspSYOZ0esqXB1bVAEc49qXgca4RxiSenNa2LiWXRjbeHgE 5CBx+4wu7wsMi9u5d0floXjdHzCZe1jgGcqYEIfuy59cvDyQSskba0PAitGDbhYM JABJdm7jZ73/ovd+s3oEy5eUtpM0sPmy1yeJwqnqD4nlj6CJJEtHXVbQGnW9ZLY8 wO/kYXarrIuuvrR6uW81ADHkKeP+Ma8R42SYCGDV66yMdD7YI5kbiu5w37BBO6p6 rEZIuXMnJSpWwmqg3n2j6Wzr4g1DzJU= -----END CERTIFICATE-----Generated at Fri Sep 25 20:43:00 2026 by rpki-client