$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d98a53a-0f78-3892-b98a-95d5e5120511.roa File: 2d98a53a-0f78-3892-b98a-95d5e5120511.roa (raw, json) Hash identifier: ipKQNTdbETpP5nkIdcxZP0Pjnvbog4q525mp5hjJm2c= Subject key identifier: 33:88:EB:F4:4C:9B:ED:10:2B:F9:B3:E7:24:6B:E6:E9:13:BA:7A:A9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED86245A4AF7C2A3AB5E25C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d98a53a-0f78-3892-b98a-95d5e5120511.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7015 IP address blocks: 71.235.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:45:a4:af:7c:2a:3a:b5:e2:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=63932fee-edcd-4992-b36f-966025507231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d9:e0:d6:83:c1:95:98:85:e0:6f:6b:f0:72: 32:c8:f3:15:bb:5a:32:26:ff:1a:43:51:24:45:a0: df:82:14:6b:b6:13:d7:52:cd:84:81:60:4b:f4:a0: a2:13:40:05:ca:2f:f5:8d:26:19:b2:4b:5d:a2:09: c1:cb:fc:2f:98:ba:8f:81:bd:a4:6f:d5:e4:fa:31: 09:81:f0:ef:41:4d:c2:fd:d4:3f:90:87:d3:e6:39: b3:c4:ca:c6:64:1c:bb:db:60:0c:af:8c:83:07:ed: aa:ee:66:f9:bd:bd:6c:7a:8f:72:ae:ff:7e:76:fe: eb:c2:71:3f:8a:d9:9e:37:96:77:a5:88:ba:90:41: 34:ee:09:b7:c2:50:7e:a2:29:af:5b:21:8f:53:90: 80:cb:49:9d:ee:b9:b6:84:f9:3e:53:61:d8:2b:92: 16:b8:97:54:b5:6f:6b:64:8b:d0:1c:56:fe:29:75: 2c:0a:ac:1a:7f:35:fd:7d:4c:14:69:27:55:c4:f4: 8c:f0:ab:f2:2d:38:95:5e:08:a0:4f:f1:58:bc:29: 73:9e:28:cf:5e:3b:97:e7:f2:02:68:fe:03:d8:33: ce:80:f0:a9:3f:84:99:6d:02:70:d2:af:66:c3:55: d6:67:28:75:32:5b:45:4a:d5:02:42:07:9c:82:03: 96:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:88:EB:F4:4C:9B:ED:10:2B:F9:B3:E7:24:6B:E6:E9:13:BA:7A:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d98a53a-0f78-3892-b98a-95d5e5120511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.235.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:9f:0a:69:f1:82:76:67:18:6f:af:52:82:23:c8:65:2b:c2: ba:a2:e5:d6:cd:f4:d0:66:a7:7f:bc:b7:aa:a6:1b:94:fa:2f: 16:ad:6c:6c:6d:8a:33:e1:29:f6:bd:46:fa:4f:db:24:0f:1a: 6f:58:0f:93:01:c1:c4:c7:bc:40:ea:07:31:df:f0:90:c4:6a: ca:24:dd:26:2f:05:78:50:42:19:57:d7:6b:1a:86:64:3c:ae: b2:e8:91:04:eb:ef:42:d0:82:f5:6d:f3:ab:ee:63:15:93:68: 21:7a:82:3e:af:10:1c:29:f4:ff:cd:33:bf:92:37:5c:4a:e5: 06:97:04:b3:6f:8b:6e:74:65:a4:6a:eb:7a:92:46:82:69:55: 9f:4a:19:c1:99:28:ed:ef:ac:f3:a5:39:29:76:60:95:c2:9f: 38:b7:f6:dd:e3:11:81:d7:57:fb:d9:b5:42:d1:a7:fd:49:63: 19:e1:3d:20:01:12:80:82:c5:90:10:2b:77:ac:85:77:1f:85: 1c:58:f1:23:d6:0d:d0:3c:14:00:1f:cf:a5:4b:64:28:46:51: 2e:35:0a:14:42:fe:be:8b:41:71:db:4d:da:ad:48:5a:fa:53: ba:c9:6a:e3:8c:ab:b8:0a:cb:32:6e:09:de:f8:4f:d1:d1:fc: db:bb:9e:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYkWkr3wqOrXiXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NjM5MzJmZWUtZWRjZC00OTkyLWIzNmYtOTY2MDI1NTA3MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9ng1oPBlZiF4G9r8HIyyPMVu1oyJv8aQ1Ek RaDfghRrthPXUs2EgWBL9KCiE0AFyi/1jSYZsktdognBy/wvmLqPgb2kb9Xk+jEJ gfDvQU3C/dQ/kIfT5jmzxMrGZBy722AMr4yDB+2q7mb5vb1seo9yrv9+dv7rwnE/ itmeN5Z3pYi6kEE07gm3wlB+oimvWyGPU5CAy0md7rm2hPk+U2HYK5IWuJdUtW9r ZIvQHFb+KXUsCqwafzX9fUwUaSdVxPSM8KvyLTiVXgigT/FYvClznijPXjuX5/IC aP4D2DPOgPCpP4SZbQJw0q9mw1XWZyh1MltFStUCQgecggOWAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOI6/RMm+0QK/mz5yRr5ukTunqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmQ5OGE1M2EtMGY3OC0z ODkyLWI5OGEtOTVkNWU1MTIwNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+voMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHafCmnxgnZnGG+vUoIjyGUrwrqi5dbN9NBmp3+8t6qmG5T6LxatbGxt ijPhKfa9RvpP2yQPGm9YD5MBwcTHvEDqBzHf8JDEasok3SYvBXhQQhlX12sahmQ8 rrLokQTr70LQgvVt86vuYxWTaCF6gj6vEBwp9P/NM7+SN1xK5QaXBLNvi250ZaRq 63qSRoJpVZ9KGcGZKO3vrPOlOSl2YJXCnzi39t3jEYHXV/vZtULRp/1JYxnhPSAB EoCCxZAQK3eshXcfhRxY8SPWDdA8FAAfz6VLZChGUS41ChRC/r6LQXHbTdqtSFr6 U7rJauOMq7gKyzJuCd74T9HR/Nu7nvY= -----END CERTIFICATE-----Generated at Mon Sep 14 21:36:07 2026 by rpki-client