$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3020d8f-5e0a-3026-869b-eb083d0c628a.roa File: b3020d8f-5e0a-3026-869b-eb083d0c628a.roa (raw, json) Hash identifier: 4FK69z6HMxNl4MFVskm/v8qgodn24ZozRuh3fBMYc2I= Subject key identifier: C8:8A:7C:6E:96:B7:C6:CD:90:B6:3D:98:1B:66:F6:1B:F8:BB:C3:2D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497FD9280EF2F54C9C367700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3020d8f-5e0a-3026-869b-eb083d0c628a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 71.236.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:d9:28:0e:f2:f5:4c:9c:36:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=86eed3b3-e9e3-4380-bcad-870fea0dbb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bd:db:85:87:78:d7:47:69:2f:e2:4f:f5:72: bd:94:6d:0a:52:13:ba:65:a4:18:b6:8f:16:b6:ff: 90:b3:db:61:e4:1f:ae:6a:25:cb:ba:42:40:13:0c: b2:0c:ae:b8:f4:31:1f:3d:b7:d5:5f:9a:83:ea:6e: f5:09:bf:db:ea:b5:4e:cb:4d:80:91:d8:7f:34:33: 6d:2c:68:c8:b6:97:f1:a8:02:ef:db:c4:3c:34:b8: 36:b9:8d:ff:c9:91:e5:6d:94:b1:8f:26:98:83:6a: 16:be:3b:c5:a3:42:a0:82:49:f2:d2:a4:5d:47:e3: f1:29:a1:d4:16:eb:c7:08:6d:98:6c:12:d5:28:47: 9d:57:7e:b9:b1:64:6a:ad:d6:a7:b9:76:53:ce:bc: f2:3c:12:0d:ae:e7:ea:90:e5:36:a1:da:c0:9d:23: 2b:7a:8e:e6:90:11:76:72:dc:e2:ef:3f:8b:71:91: 9b:53:2e:b7:3a:a1:4d:9c:a2:b1:e2:b3:92:19:85: 39:7f:dd:b3:64:04:92:c7:27:b1:83:c4:4e:f4:6b: 45:85:23:8d:30:c5:a5:34:4e:39:0c:74:3f:7c:5e: c8:76:2d:52:83:64:ec:bc:5d:b4:52:90:16:6f:1d: 89:05:49:dd:d4:5d:59:77:1b:3e:73:19:eb:97:4a: 09:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8A:7C:6E:96:B7:C6:CD:90:B6:3D:98:1B:66:F6:1B:F8:BB:C3:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3020d8f-5e0a-3026-869b-eb083d0c628a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.236.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ae:e5:19:99:37:05:79:75:ae:92:da:8b:b1:aa:63:15:fa: e4:af:66:4c:b7:79:2f:71:f7:99:b7:51:74:bd:c7:9e:44:44: 60:99:b5:cf:9a:1a:bd:64:e7:c8:25:bc:15:da:07:1b:cc:ae: e1:6d:19:0d:93:82:1b:82:59:58:34:fa:33:99:af:82:6d:22: bc:11:a5:82:9a:66:cb:06:a5:4d:f0:41:be:96:7c:e5:60:e1: a3:0e:96:7f:2a:9d:b4:c2:89:ff:34:ca:63:ee:d1:b5:11:d5: b5:95:55:7d:8b:12:be:0a:7a:6d:69:4c:ae:86:fd:7a:89:49: 86:40:e8:46:a2:ee:a1:02:ac:27:ff:98:21:3b:d6:5b:d8:7e: 0a:f9:ef:dd:77:5f:05:4d:4f:05:66:51:b1:04:49:15:56:19: 48:2b:4b:48:a0:0e:a9:39:f2:b2:ed:57:49:75:2c:91:30:93: a0:23:77:26:aa:e8:88:06:6a:c7:6c:e0:16:e8:e4:8f:19:69: 7d:27:87:00:b6:16:b9:cf:bd:1a:74:c8:fd:a2:f2:95:5a:85: be:f1:64:b8:03:fe:0d:73:02:a2:44:a9:05:0e:ca:81:16:ad: 08:2c:b1:d4:43:d4:51:71:c3:fc:77:be:32:f3:f6:61:28:4b: 3f:ca:b6:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf9koDvL1TJw2dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODZlZWQzYjMtZTllMy00MzgwLWJjYWQtODcwZmVhMGRiYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6b3bhYd410dpL+JP9XK9lG0KUhO6ZaQYto8W tv+Qs9th5B+uaiXLukJAEwyyDK649DEfPbfVX5qD6m71Cb/b6rVOy02Akdh/NDNt LGjItpfxqALv28Q8NLg2uY3/yZHlbZSxjyaYg2oWvjvFo0Kggkny0qRdR+PxKaHU FuvHCG2YbBLVKEedV365sWRqrdanuXZTzrzyPBINrufqkOU2odrAnSMreo7mkBF2 ctzi7z+LcZGbUy63OqFNnKKx4rOSGYU5f92zZASSxyexg8RO9GtFhSONMMWlNE45 DHQ/fF7Idi1Sg2TsvF20UpAWbx2JBUnd1F1Zdxs+cxnrl0oJowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiKfG6Wt8bNkLY9mBtm9hv4u8MtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjMwMjBkOGYtNWUwYS0z MDI2LTg2OWItZWIwODNkMGM2MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+wgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuu5RmZNwV5da6S2ouxqmMV+uSvZky3eS9x95m3UXS9x55ERGCZtc+a Gr1k58glvBXaBxvMruFtGQ2TghuCWVg0+jOZr4JtIrwRpYKaZssGpU3wQb6WfOVg 4aMOln8qnbTCif80ymPu0bUR1bWVVX2LEr4Kem1pTK6G/XqJSYZA6Eai7qECrCf/ mCE71lvYfgr57913XwVNTwVmUbEESRVWGUgrS0igDqk58rLtV0l1LJEwk6Ajdyaq 6IgGasds4Bbo5I8ZaX0nhwC2FrnPvRp0yP2i8pVahb7xZLgD/g1zAqJEqQUOyoEW rQgssdRD1FFxw/x3vjLz9mEoSz/Kts4= -----END CERTIFICATE-----Generated at Sat Sep 26 17:33:21 2026 by rpki-client