$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3678900c-4a18-3610-a518-b38d14859fa6.roa File: 3678900c-4a18-3610-a518-b38d14859fa6.roa (raw, json) Hash identifier: EH79GqX/RZsL6x/QVrVl7iYKByYFi7ZuLmI+q9eo0gA= Subject key identifier: 28:81:E7:B6:8E:6F:4E:8B:5B:9C:53:56:57:45:AB:EC:CF:6D:85:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78D26D75367E3ED2B0BFF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3678900c-4a18-3610-a518-b38d14859fa6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33652 IP address blocks: 71.24.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8d:26:d7:53:67:e3:ed:2b:0b:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=83078da3-77e5-4330-ba03-3dd14ce11491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:a5:c9:37:10:96:38:0c:cd:75:c5:d9:a0: be:79:ab:e2:c5:f6:b6:b6:70:22:74:9e:99:fd:90: 1a:e5:62:b8:e4:b3:7c:2f:47:d2:e0:e2:0f:1b:eb: 52:cb:80:c2:92:19:ef:86:72:28:a8:51:3f:f5:a9: 07:d5:e1:06:93:0c:64:0f:8e:d8:1d:fe:e3:53:e3: 32:59:17:09:57:f6:96:7b:2e:db:23:6c:f6:c7:87: 16:f8:af:04:91:1c:7a:18:73:86:04:bb:e1:fa:09: 18:4c:12:f4:2d:eb:b6:a4:7c:06:89:5a:78:de:93: c8:c1:f1:25:4c:18:98:82:d8:44:02:c1:6b:e7:98: a5:2b:d2:01:69:be:e8:bc:6a:d9:ac:ad:73:59:da: bf:f4:f9:9c:62:c3:51:3d:c5:77:e8:68:34:e0:a4: ac:00:21:93:3c:9f:c2:74:34:fd:bf:83:77:d9:da: 69:93:77:51:db:ec:56:07:19:17:77:44:3c:a2:32: f7:ba:4e:74:71:6c:08:59:36:ad:f2:27:1c:f6:c4: 2c:57:d5:df:a4:f3:67:87:04:3a:b4:5f:b6:18:a5: 8b:30:bd:57:ce:a7:0e:70:ce:0a:55:d6:ce:d1:c0: 3c:d6:68:4d:c6:a1:b9:1d:79:6e:55:fa:4c:99:9c: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:81:E7:B6:8E:6F:4E:8B:5B:9C:53:56:57:45:AB:EC:CF:6D:85:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3678900c-4a18-3610-a518-b38d14859fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.24.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b5:80:3e:23:a6:07:9a:76:e2:30:99:03:a7:76:b7:86:b9: 6b:f1:23:93:a3:38:f0:5d:02:05:f6:00:66:90:47:23:a0:58: a1:8d:60:cb:d4:ad:9b:11:69:b8:39:08:97:14:9f:90:b9:ed: 8d:17:84:0e:cb:cc:0b:32:99:50:7b:e1:3e:e7:d1:17:6c:b7: 4f:fe:e5:29:62:8a:8c:1a:c7:e7:4a:8b:87:a6:d6:4a:99:44: 26:b7:70:90:ea:04:cc:04:ae:ea:2a:a3:1a:e6:ca:ef:ca:b4: 93:63:e8:58:ec:a4:42:af:0d:09:ef:17:d7:47:55:f2:6b:eb: f8:a1:f4:25:46:47:0c:46:7e:46:73:0a:1c:07:68:aa:f3:e2: 19:9f:02:a8:55:fd:9c:39:31:c1:c5:b1:bd:ab:13:e4:47:f7: f6:aa:94:e2:ed:9d:03:2a:7b:87:bc:40:04:a1:03:d3:06:5f: f8:09:cd:17:c6:8c:c5:26:58:1c:4d:62:ab:f6:73:53:7f:54: 26:49:cb:bc:75:1d:b6:38:b7:d7:59:24:49:8d:89:55:4d:cd: e8:eb:a1:55:e4:82:de:6b:fc:d5:0a:56:e6:5d:e3:f8:fa:5c: 80:27:77:0f:14:d3:6e:75:90:df:49:32:eb:01:c6:a1:d7:1f: 3a:4c:02:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njSbXU2fj7SsL/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODMwNzhkYTMtNzdlNS00MzMwLWJhMDMtM2RkMTRjZTExNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP+lyTcQljgMzXXF2aC+eavixfa2tnAidJ6Z /ZAa5WK45LN8L0fS4OIPG+tSy4DCkhnvhnIoqFE/9akH1eEGkwxkD47YHf7jU+My WRcJV/aWey7bI2z2x4cW+K8EkRx6GHOGBLvh+gkYTBL0Leu2pHwGiVp43pPIwfEl TBiYgthEAsFr55ilK9IBab7ovGrZrK1zWdq/9PmcYsNRPcV36Gg04KSsACGTPJ/C dDT9v4N32dppk3dR2+xWBxkXd0Q8ojL3uk50cWwIWTat8icc9sQsV9XfpPNnhwQ6 tF+2GKWLML1XzqcOcM4KVdbO0cA81mhNxqG5HXluVfpMmZygKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiB57aOb06LW5xTVldFq+zPbYVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzY3ODkwMGMtNGExOC0z NjEwLWE1MTgtYjM4ZDE0ODU5ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRxiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq1gD4jpgeaduIwmQOndreGuWvxI5OjOPBdAgX2AGaQRyOgWKGNYMvU rZsRabg5CJcUn5C57Y0XhA7LzAsymVB74T7n0Rdst0/+5Sliiowax+dKi4em1kqZ RCa3cJDqBMwEruoqoxrmyu/KtJNj6FjspEKvDQnvF9dHVfJr6/ih9CVGRwxGfkZz ChwHaKrz4hmfAqhV/Zw5McHFsb2rE+RH9/aqlOLtnQMqe4e8QAShA9MGX/gJzRfG jMUmWBxNYqv2c1N/VCZJy7x1HbY4t9dZJEmNiVVNzejroVXkgt5r/NUKVuZd4/j6 XIAndw8U0251kN9JMusBxqHXHzpMAnE= -----END CERTIFICATE-----Generated at Sat Sep 5 06:30:21 2026 by rpki-client