$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f83e927-1415-3abf-a1c3-78ec7fa4e6a2.roa File: 2f83e927-1415-3abf-a1c3-78ec7fa4e6a2.roa (raw, json) Hash identifier: Hw/NRE2P5uZk7r9B3gPeWNGQvbxCoQXwurr3gLOzLd0= Subject key identifier: EC:C2:5A:06:51:79:D0:84:31:0E:D2:1E:C7:67:90:1A:3B:E8:20:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119F21F9C476DA4B2EB2E668 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f83e927-1415-3abf-a1c3-78ec7fa4e6a2.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 71.228.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:21:f9:c4:76:da:4b:2e:b2:e6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=aa6538c7-2717-44bb-85b7-8c8bdfeba9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dd:92:5a:3f:36:69:69:96:c7:a9:2b:55:be: e0:fe:9b:86:ae:0a:f9:f5:77:2a:bc:34:67:f1:53: 1f:69:01:bb:88:8c:1a:bb:1a:dd:66:0f:c7:25:fe: 0b:7b:bc:51:fd:b1:82:a1:8d:77:e6:66:06:f4:b5: cd:79:fb:a7:32:93:14:a0:13:be:04:ab:43:5a:78: 69:9c:e2:2d:2f:b9:d5:b8:c0:08:eb:9d:fd:d4:a0: 27:3d:51:a0:ec:c5:2f:71:0c:5e:e0:ef:02:73:9c: fc:17:42:e0:cd:46:90:59:eb:1d:46:a9:49:79:57: 0f:88:37:4c:bd:a9:b0:15:de:83:de:15:0a:a1:cf: c2:3a:f0:31:46:b1:59:d1:9e:5c:7c:6c:64:3e:b6: 0f:59:90:71:ce:8a:8f:a3:cc:c5:72:e3:25:6f:28: 10:47:f1:fd:84:28:49:da:a1:9e:b1:e1:9f:47:0b: b1:2d:6e:00:ea:18:68:89:e2:4f:80:a4:e4:bf:71: ae:72:7f:12:8f:66:3f:ae:e2:b0:3c:37:d7:c0:51: 70:b5:c6:8b:3e:0d:af:e9:84:f5:bc:de:7d:44:56: 2a:0c:1c:70:ea:57:66:0f:88:3b:be:a3:cd:9d:07: fd:69:b2:28:c4:48:8b:17:5b:e6:ff:58:fb:de:63: 2b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C2:5A:06:51:79:D0:84:31:0E:D2:1E:C7:67:90:1A:3B:E8:20:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f83e927-1415-3abf-a1c3-78ec7fa4e6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:fd:91:59:e9:28:ea:7b:bb:9c:9d:44:68:f4:2c:b9:cd:28: 85:ed:d1:d3:72:df:9c:04:12:27:a9:cb:d0:4c:b5:08:20:75: 1d:31:73:86:db:78:7e:1e:f2:ff:27:b3:9c:17:0c:b2:f2:77: 6b:9b:78:24:99:79:f5:fb:96:22:2f:44:05:06:80:a2:e5:83: b5:f5:28:ab:f0:fe:da:39:ff:8e:bd:d9:7b:56:fe:63:7b:ba: 03:7f:e5:32:d3:9a:d7:e1:45:87:e4:2d:90:84:5b:d7:72:30: 07:82:01:c3:65:fa:53:5c:8e:5d:a7:00:ac:83:f8:97:97:38: 0c:52:e3:56:be:8a:73:c9:02:be:35:9a:30:24:7a:0d:42:c4: 76:4a:a4:b3:11:1d:cf:db:27:19:d2:6b:5c:20:5d:ec:b8:c9: 67:ea:5e:30:93:46:3d:4f:55:86:34:50:c8:9d:55:0e:03:91: 5a:68:e2:fd:69:5c:40:92:b9:9e:db:b0:a6:b3:76:b6:2a:07: 99:e2:2e:60:c6:cf:79:0d:0e:fc:36:1e:87:e8:98:b7:44:5b: 6d:76:db:32:d0:fd:d4:60:f3:a8:a2:53:18:9d:b0:23:52:94: cb:6d:d4:e5:60:3c:d1:e5:04:8e:35:31:7b:a4:f0:e1:08:3b: 54:cb:d4:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnyH5xHbaSy6y5mgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YWE2NTM4YzctMjcxNy00NGJiLTg1YjctOGM4YmRmZWJhOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N2SWj82aWmWx6krVb7g/puGrgr59XcqvDRn 8VMfaQG7iIwauxrdZg/HJf4Le7xR/bGCoY135mYG9LXNefunMpMUoBO+BKtDWnhp nOItL7nVuMAI65391KAnPVGg7MUvcQxe4O8Cc5z8F0LgzUaQWesdRqlJeVcPiDdM vamwFd6D3hUKoc/COvAxRrFZ0Z5cfGxkPrYPWZBxzoqPo8zFcuMlbygQR/H9hChJ 2qGeseGfRwuxLW4A6hhoieJPgKTkv3Gucn8Sj2Y/ruKwPDfXwFFwtcaLPg2v6YT1 vN59RFYqDBxw6ldmD4g7vqPNnQf9abIoxEiLF1vm/1j73mMrwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzCWgZRedCEMQ7SHsdnkBo76CCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmY4M2U5MjctMTQxNS0z YWJmLWExYzMtNzhlYzdmYTRlNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+QsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANH9kVnpKOp7u5ydRGj0LLnNKIXt0dNy35wEEiepy9BMtQggdR0xc4bb eH4e8v8ns5wXDLLyd2ubeCSZefX7liIvRAUGgKLlg7X1KKvw/to5/4692XtW/mN7 ugN/5TLTmtfhRYfkLZCEW9dyMAeCAcNl+lNcjl2nAKyD+JeXOAxS41a+inPJAr41 mjAkeg1CxHZKpLMRHc/bJxnSa1wgXey4yWfqXjCTRj1PVYY0UMidVQ4DkVpo4v1p XECSuZ7bsKazdrYqB5niLmDGz3kNDvw2HofomLdEW2122zLQ/dRg86iiUxidsCNS lMtt1OVgPNHlBI41MXuk8OEIO1TL1O0= -----END CERTIFICATE-----Generated at Sat Sep 5 14:17:06 2026 by rpki-client