$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/082f8543-b760-3b91-8c3a-d0c6c65d7040.roa File: 082f8543-b760-3b91-8c3a-d0c6c65d7040.roa (raw, json) Hash identifier: /ZeE2CWDrRrqsmswP3CbWVBqv58ANzOBcSrRVJ0nGIM= Subject key identifier: 41:09:34:D7:14:0B:1E:79:99:3C:2C:2A:1C:E1:B4:91:C8:A5:42:24 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119DC6FFD13788CF61075800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/082f8543-b760-3b91-8c3a-d0c6c65d7040.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 71.57.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:c6:ff:d1:37:88:cf:61:07:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=289df409-c70b-4b60-b8b2-7b3d41f3cc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:80:75:80:ee:33:2e:27:0d:4f:49:55:7f:ee: 37:c0:7f:30:7f:cb:6f:82:8d:ac:79:8a:46:d8:74: f2:7d:58:f1:b4:a6:43:c8:22:9b:03:64:3e:17:8e: 3c:58:35:82:7e:38:73:90:af:80:d3:ee:74:27:cf: 5b:46:76:c0:57:3f:e3:70:80:a8:f7:70:15:30:e2: 3e:10:39:6a:51:84:08:88:c0:56:50:8c:42:28:55: 85:4e:ca:ea:ab:75:4f:41:52:3c:73:69:3c:d9:e0: d0:8f:e3:2d:0e:40:2d:5d:07:8d:a1:34:09:f6:0e: f7:21:73:f2:7f:ba:99:c3:84:dd:26:25:3f:7f:61: 87:59:36:dc:52:c6:3b:bb:6d:56:6e:c1:52:05:c4: 11:c2:5c:27:7d:37:41:d9:cb:98:56:de:ce:45:4b: d2:ef:e0:21:07:42:43:76:08:3a:41:9c:42:8c:f2: 9f:9c:55:48:5c:cf:47:05:f8:ad:f9:ad:e6:07:6b: eb:18:55:1d:a9:72:a7:1b:1d:7f:c1:40:0c:a5:2d: d2:01:2e:80:89:7e:ce:e6:8c:4c:7b:f7:83:b3:ee: fd:f4:b9:ec:d2:38:66:61:d1:a6:4f:27:2a:24:cd: dd:6d:f8:37:7d:e5:cf:fa:78:92:64:bf:fa:2a:d1: fe:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:09:34:D7:14:0B:1E:79:99:3C:2C:2A:1C:E1:B4:91:C8:A5:42:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/082f8543-b760-3b91-8c3a-d0c6c65d7040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.57.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:c0:7f:c2:27:04:42:8b:d8:61:6e:ac:32:8d:78:6b:11:eb: 91:ca:2b:fa:b3:05:c8:a6:45:25:74:56:96:5c:27:12:10:d5: 1e:92:99:9c:ce:f9:92:13:cd:d6:37:ac:cd:7e:63:c6:9b:4c: 37:a1:18:57:54:fa:cb:fa:e2:39:76:bd:ac:e1:00:fd:5d:9d: aa:ad:65:aa:25:db:a9:9a:f4:8f:f6:eb:d3:97:0e:a3:69:68: 4d:11:19:a2:9d:9d:07:82:c3:41:67:8d:16:98:a3:45:16:19: d3:4d:a0:78:3f:b7:0f:d7:59:ce:b5:be:02:69:48:bf:b6:ad: fd:17:ae:9c:71:df:63:78:cf:bf:d5:4c:12:0c:83:26:bc:53: 4e:96:14:8d:6a:00:48:18:33:fb:3c:f0:60:1a:99:4a:21:93: fb:5b:75:79:b0:d8:ea:b8:23:98:62:41:59:f5:82:19:f3:b3: 92:4a:9c:96:cf:8b:fa:ba:00:7c:1a:a1:8d:aa:36:35:63:42: fe:0a:21:72:95:24:65:02:a0:e9:b5:64:78:55:c6:87:9a:b5: 7f:49:97:1a:fa:a9:4a:59:f8:17:35:b1:d8:62:f4:eb:47:f6: b0:d3:ab:e2:ce:0d:38:5c:f2:c6:1c:2b:52:00:4b:f8:6e:3b: 06:2d:fc:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rncb/0TeIz2EHWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Mjg5ZGY0MDktYzcwYi00YjYwLWI4YjItN2IzZDQxZjNjYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIB1gO4zLicNT0lVf+43wH8wf8tvgo2seYpG 2HTyfVjxtKZDyCKbA2Q+F448WDWCfjhzkK+A0+50J89bRnbAVz/jcICo93AVMOI+ EDlqUYQIiMBWUIxCKFWFTsrqq3VPQVI8c2k82eDQj+MtDkAtXQeNoTQJ9g73IXPy f7qZw4TdJiU/f2GHWTbcUsY7u21WbsFSBcQRwlwnfTdB2cuYVt7ORUvS7+AhB0JD dgg6QZxCjPKfnFVIXM9HBfit+a3mB2vrGFUdqXKnGx1/wUAMpS3SAS6AiX7O5oxM e/eDs+799Lns0jhmYdGmTycqJM3dbfg3feXP+niSZL/6KtH+LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEJNNcUCx55mTwsKhzhtJHIpUIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDgyZjg1NDMtYjc2MC0z YjkxLThjM2EtZDBjNmM2NWQ3MDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRzkKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/Af8InBEKL2GFurDKNeGsR65HKK/qzBcimRSV0VpZcJxIQ1R6SmZzO +ZITzdY3rM1+Y8abTDehGFdU+sv64jl2vazhAP1dnaqtZaol26ma9I/269OXDqNp aE0RGaKdnQeCw0FnjRaYo0UWGdNNoHg/tw/XWc61vgJpSL+2rf0Xrpxx32N4z7/V TBIMgya8U06WFI1qAEgYM/s88GAamUohk/tbdXmw2Oq4I5hiQVn1ghnzs5JKnJbP i/q6AHwaoY2qNjVjQv4KIXKVJGUCoOm1ZHhVxoeatX9Jlxr6qUpZ+Bc1sdhi9OtH 9rDTq+LODThc8sYcK1IAS/huOwYt/MU= -----END CERTIFICATE-----Generated at Sat Sep 5 15:20:44 2026 by rpki-client