$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f21960d3-26ee-3fa3-a82e-24837757c835.roa File: f21960d3-26ee-3fa3-a82e-24837757c835.roa (raw, json) Hash identifier: WOe2P3yKN9lFxBWme7XIIp/kr8wXyQKJIX2eMkIIIqI= Subject key identifier: A3:25:AF:D1:B1:7D:51:B6:E6:84:BC:0D:79:46:9D:79:91:E1:DD:18 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49787B7056E493278FDA4A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f21960d3-26ee-3fa3-a82e-24837757c835.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33650 IP address blocks: 70.89.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:7b:70:56:e4:93:27:8f:da:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=31a6e547-ed7a-4c04-a87c-c11c8e7c8b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:13:20:6a:84:bc:2b:54:50:64:f7:e7:fe: b3:cd:4f:0a:bb:6d:dd:41:e8:f7:ba:68:e0:4b:f6: e2:0e:fa:0b:ef:46:f0:e4:c6:a7:cd:a4:95:bd:b0: ff:da:9c:1f:d3:11:ff:71:f2:61:4f:a8:4f:e1:08: 92:dc:e4:d2:72:77:04:ca:e4:22:9b:b2:c5:19:a0: 87:80:46:31:cb:b8:1e:f5:79:e7:08:03:a3:69:c4: 18:08:e6:84:2b:e2:2c:ee:27:78:8c:28:98:50:8a: 46:7a:28:c3:b7:00:64:63:ec:f0:15:1f:19:98:35: f9:ec:18:94:b5:4a:71:a2:7b:08:0e:03:35:e7:b4: c1:a0:82:e7:a2:5e:2f:aa:99:c7:e4:67:1a:e4:26: ba:29:05:46:4b:ef:0c:88:e7:c0:47:73:a7:3a:2c: 27:f4:1f:98:73:02:53:fa:83:97:fe:ac:bd:fe:5c: e8:38:40:08:a9:dc:72:09:1b:11:9e:98:15:05:5b: 19:18:6f:c2:80:63:83:8e:a0:a5:d6:77:75:a0:15: 79:a1:62:7d:18:02:27:ef:42:5a:96:6d:14:8a:be: 75:06:85:84:8b:70:dd:89:0c:b1:3b:6d:6d:7c:d8: 2d:86:e9:ef:a3:24:03:37:71:34:13:d4:34:00:f1: c4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:25:AF:D1:B1:7D:51:B6:E6:84:BC:0D:79:46:9D:79:91:E1:DD:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f21960d3-26ee-3fa3-a82e-24837757c835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.89.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:27:00:5b:e9:29:95:a7:60:70:00:17:61:bd:fa:72:91:31: bd:73:c2:b1:15:13:b5:b8:ed:43:1c:63:5c:31:f7:60:f7:09: 7e:5c:f0:26:e7:a8:85:ab:52:5f:45:e9:c3:54:89:57:92:bc: dd:0c:df:fa:b5:2d:fb:3a:6b:5e:cc:b1:b9:62:73:cf:b6:02: 11:88:66:13:f7:ac:99:9a:5b:63:da:a5:ac:11:86:f9:2b:98: 16:78:ae:8a:b7:06:d3:e6:73:b8:0d:ca:1f:74:7a:f9:d5:8c: c9:df:87:90:7d:52:1f:1d:ee:6f:36:43:d2:85:da:36:04:4c: bb:db:b9:12:9b:64:c9:4a:15:a5:d9:ec:40:ae:33:4b:6a:53: 42:bc:22:bc:f8:69:1d:32:8a:c9:a8:cc:8f:33:1e:8e:da:17: 65:75:c6:66:ac:01:6f:90:a2:df:84:b1:ae:fb:06:d5:ad:55: 5d:55:83:30:b8:bc:22:da:de:ca:07:81:0c:d2:2e:f0:54:2f: 05:6b:c7:25:f9:82:7a:c9:d7:f3:83:ca:43:aa:dd:33:1c:08: 23:5c:a0:bb:82:a8:1f:3d:f1:05:f9:58:0a:a6:8a:ef:41:64: 6f:a4:7d:fc:0c:87:d3:bc:57:1a:94:4e:d7:49:b7:1e:4c:28: 7a:66:6b:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeHtwVuSTJ4/aSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzFhNmU1NDctZWQ3YS00YzA0LWE4N2MtYzExYzhlN2M4YjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjsTIGqEvCtUUGT35/6zzU8Ku23dQej3umjg S/biDvoL70bw5ManzaSVvbD/2pwf0xH/cfJhT6hP4QiS3OTScncEyuQim7LFGaCH gEYxy7ge9XnnCAOjacQYCOaEK+Is7id4jCiYUIpGeijDtwBkY+zwFR8ZmDX57BiU tUpxonsIDgM157TBoILnol4vqpnH5Gca5Ca6KQVGS+8MiOfAR3OnOiwn9B+YcwJT +oOX/qy9/lzoOEAIqdxyCRsRnpgVBVsZGG/CgGODjqCl1nd1oBV5oWJ9GAIn70Ja lm0Uir51BoWEi3DdiQyxO21tfNgthunvoyQDN3E0E9Q0APHEFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMlr9GxfVG25oS8DXlGnXmR4d0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjIxOTYwZDMtMjZlZS0z ZmEzLWE4MmUtMjQ4Mzc3NTdjODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYnAFvpKZWnYHAAF2G9+nKRMb1zwrEVE7W47UMcY1wx92D3CX5c8Cbn qIWrUl9F6cNUiVeSvN0M3/q1Lfs6a17Msblic8+2AhGIZhP3rJmaW2PapawRhvkr mBZ4roq3BtPmc7gNyh90evnVjMnfh5B9Uh8d7m82Q9KF2jYETLvbuRKbZMlKFaXZ 7ECuM0tqU0K8Irz4aR0yismozI8zHo7aF2V1xmasAW+Qot+Esa77BtWtVV1VgzC4 vCLa3soHgQzSLvBULwVrxyX5gnrJ1/ODykOq3TMcCCNcoLuCqB898QX5WAqmiu9B ZG+kffwMh9O8VxqUTtdJtx5MKHpma14= -----END CERTIFICATE-----Generated at Sat Sep 26 21:35:21 2026 by rpki-client