$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0438c591-cd9b-33c0-a4d4-62394c6ecda1.roa File: 0438c591-cd9b-33c0-a4d4-62394c6ecda1.roa (raw, json) Hash identifier: d5D1kcO4EsKiaPZfJouz9inaQwaHE5VN4tVXhur23Os= Subject key identifier: 64:B3:F7:EC:C7:D1:23:23:8A:95:9C:CB:0E:47:55:9B:46:D3:C0:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119F1E80C4A43D586A412D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0438c591-cd9b-33c0-a4d4-62394c6ecda1.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 71.194.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:1e:80:c4:a4:3d:58:6a:41:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=7fb7c337-823b-445a-ac6e-c8042b83070f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:8e:ce:c4:a7:94:28:45:d6:20:a1:10:b2: 3a:1a:7a:87:a4:50:4d:3f:26:66:00:58:83:0b:af: eb:28:ec:2e:1d:ef:22:df:2f:1f:be:3f:ef:dd:94: cc:e7:d6:4b:7f:61:f8:5d:99:1f:40:29:a8:46:f7: 94:11:10:f8:ac:8a:a8:1e:c2:fc:9b:dd:e5:cd:f1: 12:15:56:64:74:e9:ca:ce:10:54:e3:79:2b:32:56: fa:30:11:2d:c1:f9:a1:6a:2c:58:77:1f:8f:df:ba: f8:ed:a7:21:0f:e5:14:81:bc:40:74:85:8f:5b:ed: 1a:4b:34:ac:b2:25:34:78:33:84:88:77:ea:45:52: 26:de:0e:9b:1c:47:65:eb:b9:60:6c:66:c1:ee:fe: 39:5c:84:a9:f8:30:e4:d0:76:11:a4:0f:38:dd:68: 3a:bc:c0:b2:51:62:78:fb:28:2c:8f:90:26:cf:80: 3d:0d:29:07:00:54:3a:1c:1d:fa:82:31:8b:f2:d1: ee:25:26:86:33:11:60:e3:87:d5:87:91:f0:a6:81: ce:f6:51:9f:ad:a0:fc:ca:ec:d7:a6:f6:ec:7e:34: fb:bd:ad:a1:aa:c3:71:52:31:24:12:67:76:2c:46: 5f:b2:25:c9:e2:4c:f9:b6:36:b8:d4:7d:9b:1e:77: 29:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B3:F7:EC:C7:D1:23:23:8A:95:9C:CB:0E:47:55:9B:46:D3:C0:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0438c591-cd9b-33c0-a4d4-62394c6ecda1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:39:2e:0b:32:28:5d:6e:82:d8:a5:2a:43:4a:6b:df:54:c2: 00:5d:d1:ed:cb:87:fa:29:e6:5e:c8:d5:e2:bf:40:18:13:01: 0b:04:a8:ee:a1:e2:5d:ae:88:02:eb:cc:fe:b6:da:c7:5b:22: 6c:6c:63:da:e4:c4:52:04:a0:2b:c1:38:a7:e6:af:9d:75:fb: 31:42:2b:ca:7e:a3:b5:17:1c:4d:61:e4:69:52:70:8e:a5:bb: 23:07:d4:99:b2:b1:c9:1d:b7:87:b5:32:b9:5b:2e:7f:25:84: 9a:3c:ac:a1:a9:af:0d:95:23:1a:fc:b9:e1:b3:30:b6:1b:f1: 0e:1e:8a:a3:4f:0a:04:fa:78:ec:01:e8:fb:05:0e:aa:5b:ef: a4:5d:e1:13:89:ed:b6:ef:49:60:8d:dd:95:14:ad:56:94:c6: c2:ff:28:ec:6a:d8:d6:ca:de:8b:a1:f9:8e:50:19:d8:e3:49: 82:5f:e4:3b:44:24:03:7c:30:4b:4d:59:1c:f5:38:16:33:b9: b5:6f:30:7d:a0:6b:ff:0b:43:2b:ad:d3:a6:87:b5:3e:ec:2e: 90:b7:4e:86:46:63:3f:95:07:5c:58:bb:bc:d0:b7:6d:3a:c5: c6:15:54:eb:fd:a6:64:18:eb:ac:4a:23:89:43:dd:6b:bc:1c: ef:e6:24:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnx6AxKQ9WGpBLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk N2ZiN2MzMzctODIzYi00NDVhLWFjNmUtYzgwNDJiODMwNzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokWOzsSnlChF1iChELI6GnqHpFBNPyZmAFiD C6/rKOwuHe8i3y8fvj/v3ZTM59ZLf2H4XZkfQCmoRveUERD4rIqoHsL8m93lzfES FVZkdOnKzhBU43krMlb6MBEtwfmhaixYdx+P37r47achD+UUgbxAdIWPW+0aSzSs siU0eDOEiHfqRVIm3g6bHEdl67lgbGbB7v45XISp+DDk0HYRpA843Wg6vMCyUWJ4 +ygsj5Amz4A9DSkHAFQ6HB36gjGL8tHuJSaGMxFg44fVh5HwpoHO9lGfraD8yuzX pvbsfjT7va2hqsNxUjEkEmd2LEZfsiXJ4kz5tja41H2bHncp1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSz9+zH0SMjipWcyw5HVZtG08DFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQzOGM1OTEtY2Q5Yi0z M2MwLWE0ZDQtNjIzOTRjNmVjZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8J2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQ5LgsyKF1ugtilKkNKa99UwgBd0e3Lh/op5l7I1eK/QBgTAQsEqO6h 4l2uiALrzP622sdbImxsY9rkxFIEoCvBOKfmr511+zFCK8p+o7UXHE1h5GlScI6l uyMH1Jmysckdt4e1MrlbLn8lhJo8rKGprw2VIxr8ueGzMLYb8Q4eiqNPCgT6eOwB 6PsFDqpb76Rd4ROJ7bbvSWCN3ZUUrVaUxsL/KOxq2NbK3ouh+Y5QGdjjSYJf5DtE JAN8MEtNWRz1OBYzubVvMH2ga/8LQyut06aHtT7sLpC3ToZGYz+VB1xYu7zQt206 xcYVVOv9pmQY66xKI4lD3Wu8HO/mJBc= -----END CERTIFICATE-----Generated at Sat Sep 5 16:06:45 2026 by rpki-client