$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7b0dbc-93ad-35b9-bfc3-d83ea7055f23.roa File: bd7b0dbc-93ad-35b9-bfc3-d83ea7055f23.roa (raw, json) Hash identifier: zsITb42ztSeFA08v81cV3GJwiMNOCFFg+t/1p45olDQ= Subject key identifier: 43:11:72:23:15:D0:1D:70:8B:E5:12:A7:4D:2E:11:AA:46:30:AA:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E3A18A887415429826200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7b0dbc-93ad-35b9-bfc3-d83ea7055f23.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 71.204.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:3a:18:a8:87:41:54:29:82:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=1f8a537d-0dc2-4216-bc93-01a87da6cd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:eb:25:2a:3d:b8:ae:c5:5c:b0:9c:0b:5e: a1:30:0a:58:f7:5d:01:be:de:f4:86:70:51:44:38: 1a:37:fd:6c:e9:a2:18:66:86:65:51:4e:53:74:0c: 40:b2:c2:98:91:6b:a5:55:66:be:8c:28:09:95:59: d0:a0:33:04:91:63:11:05:d7:78:53:98:bd:7d:6b: 9a:94:72:e4:6f:c3:f6:fa:9e:74:bd:50:d5:2a:68: 42:93:7b:c0:cd:a6:26:59:cc:27:f7:07:36:9d:fb: f6:c1:52:a3:0f:44:11:42:1d:29:6c:2b:a9:f5:b5: 17:1e:67:95:0e:77:40:2b:68:6f:8e:f0:8f:ff:3d: 5f:5c:11:64:81:be:c2:53:eb:c0:d0:8b:60:53:98: 4b:15:75:75:86:8a:0b:a6:ba:6b:b8:d9:fc:85:be: ba:43:aa:d3:d0:73:67:5e:c4:d5:2b:8b:be:65:38: fa:d7:e0:01:61:1a:60:67:4a:10:68:b8:cc:55:fc: 81:00:18:78:02:2c:1f:9d:60:d2:62:e9:32:58:85: 97:12:ef:8d:6f:54:c9:ae:08:82:11:0c:5f:79:aa: ba:c5:64:3d:42:97:6e:e2:28:ab:c6:21:7e:15:d7: 25:53:37:ea:cc:b7:47:26:a8:94:e8:ca:76:08:74: 05:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:11:72:23:15:D0:1D:70:8B:E5:12:A7:4D:2E:11:AA:46:30:AA:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7b0dbc-93ad-35b9-bfc3-d83ea7055f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9e:0f:0c:7d:17:1a:06:2d:54:73:f2:71:9f:73:f3:61:bb: ff:d4:67:15:ea:08:94:c8:a6:e6:54:46:4f:3d:24:44:dd:c7: a1:85:56:80:83:d6:57:14:d1:2b:97:ad:96:3d:d9:60:8c:43: 64:66:3f:aa:c3:92:ad:e7:07:38:9a:67:b1:71:22:f2:e5:1f: f3:1f:2c:d3:b3:02:7b:69:ce:0f:2f:74:46:41:12:35:0b:7f: 5c:11:60:9a:aa:96:ae:86:88:9b:98:15:4f:76:3e:d1:1c:49: 6c:99:20:dd:42:1c:64:40:17:ad:c8:06:0c:3c:90:47:1d:48: 92:42:80:8f:d5:ca:91:6d:e0:fe:cb:af:2f:45:8a:4a:8a:78: 5a:76:45:85:70:5d:b7:2c:0c:f6:2f:c7:87:94:9d:92:14:85: cd:2c:9d:46:c2:42:8c:54:68:b8:ca:1e:cc:44:87:5a:9a:e5: 38:8e:14:32:f5:5c:57:37:e5:cb:e4:48:44:be:aa:83:4f:db: d6:bc:8b:ea:56:42:cb:7f:ac:fe:e9:f8:4f:d1:5b:80:8a:bf: f3:99:14:30:35:af:8b:01:c5:46:85:33:79:cc:eb:ec:f1:47: ef:d4:8b:f4:d7:38:aa:ff:6a:6b:34:01:89:1f:8f:22:02:01: 27:bc:bd:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnjoYqIdBVCmCYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MWY4YTUzN2QtMGRjMi00MjE2LWJjOTMtMDFhODdkYTZjZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngbrJSo9uK7FXLCcC16hMApY910Bvt70hnBR RDgaN/1s6aIYZoZlUU5TdAxAssKYkWulVWa+jCgJlVnQoDMEkWMRBdd4U5i9fWua lHLkb8P2+p50vVDVKmhCk3vAzaYmWcwn9wc2nfv2wVKjD0QRQh0pbCup9bUXHmeV DndAK2hvjvCP/z1fXBFkgb7CU+vA0ItgU5hLFXV1hooLprpruNn8hb66Q6rT0HNn XsTVK4u+ZTj61+ABYRpgZ0oQaLjMVfyBABh4AiwfnWDSYukyWIWXEu+Nb1TJrgiC EQxfeaq6xWQ9Qpdu4iirxiF+FdclUzfqzLdHJqiU6Mp2CHQF1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMRciMV0B1wi+USp00uEapGMKozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQ3YjBkYmMtOTNhZC0z NWI5LWJmYzMtZDgzZWE3MDU1ZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR8yCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKeDwx9FxoGLVRz8nGfc/Nhu//UZxXqCJTIpuZURk89JETdx6GFVoCD 1lcU0SuXrZY92WCMQ2RmP6rDkq3nBziaZ7FxIvLlH/MfLNOzAntpzg8vdEZBEjUL f1wRYJqqlq6GiJuYFU92PtEcSWyZIN1CHGRAF63IBgw8kEcdSJJCgI/VypFt4P7L ry9FikqKeFp2RYVwXbcsDPYvx4eUnZIUhc0snUbCQoxUaLjKHsxEh1qa5TiOFDL1 XFc35cvkSES+qoNP29a8i+pWQst/rP7p+E/RW4CKv/OZFDA1r4sBxUaFM3nM6+zx R+/Ui/TXOKr/ams0AYkfjyICASe8vfI= -----END CERTIFICATE-----Generated at Sun Sep 20 18:27:57 2026 by rpki-client