$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3917d321-e7b1-38b8-8d8a-eafafd5a64cc.roa File: 3917d321-e7b1-38b8-8d8a-eafafd5a64cc.roa (raw, json) Hash identifier: Qdd+YoHgcX0UInHvJzjZ/769pdxaOxK3rOafT0SxFLA= Subject key identifier: 3E:C8:65:D5:EA:74:8D:D8:2C:E0:8F:7A:F1:4C:B9:18:37:60:2F:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F21882C7FCF5655F8D7A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3917d321-e7b1-38b8-8d8a-eafafd5a64cc.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7015 IP address blocks: 71.232.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:21:88:2c:7f:cf:56:55:f8:d7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=13b7d3ff-837a-44a4-ac1c-f06c82315de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dc:a6:39:93:73:ec:c6:39:08:35:e1:f2:34: cc:83:72:31:60:99:9a:e9:2e:6f:1e:ec:dc:c9:a3: 93:7a:bb:d0:3b:30:7b:28:6a:38:a9:5a:c7:d5:a0: e8:56:db:32:49:d9:63:f8:2d:b5:0a:4d:83:37:04: 1b:e2:97:59:9f:d8:27:c8:89:34:8f:e6:8e:5f:2a: 4a:22:26:6d:ff:1d:1d:92:0d:fd:1a:df:54:5b:b6: c3:8f:c3:d7:88:44:3a:ec:44:62:cb:c5:9c:9e:96: 3c:25:b2:41:f9:a5:ed:35:72:b3:9b:2d:90:89:4b: a1:52:36:a6:11:f4:1d:16:56:c3:30:c8:3f:01:9e: 59:2d:96:9a:94:df:c5:a0:09:ce:57:62:84:05:63: 72:26:b2:35:c8:55:07:8a:df:99:df:99:f3:38:86: ba:41:3f:5c:98:dd:ec:6d:9f:fb:15:24:1d:c9:ee: b8:07:b0:37:1d:35:bc:ac:c7:b9:24:8a:42:7e:ce: da:0d:45:31:cc:02:db:89:7c:c5:a3:2a:82:3f:fb: d2:30:46:3a:e7:01:32:80:36:e3:13:67:d6:02:af: 33:ba:ef:0e:30:28:bd:3a:a1:06:6d:bf:8e:af:78: 19:95:9e:ef:34:89:67:7d:53:c2:e5:30:2a:81:d3: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C8:65:D5:EA:74:8D:D8:2C:E0:8F:7A:F1:4C:B9:18:37:60:2F:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3917d321-e7b1-38b8-8d8a-eafafd5a64cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.232.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:24:3f:2f:79:4b:48:fc:55:69:5e:9d:77:8a:1e:60:49:64: 1d:a6:1e:45:96:b1:f5:61:ac:97:d3:00:0a:bf:f9:29:f6:99: 7a:ad:13:a9:8d:ce:bd:a9:74:ab:19:1a:be:10:f3:fb:20:f1: 2c:dd:84:aa:58:38:b0:5e:c3:08:0b:e5:37:33:d4:eb:1f:64: 1f:5d:6e:d9:61:ec:00:1c:78:28:a4:ff:88:a7:ba:52:c4:c0: 21:82:27:02:01:29:b3:09:48:07:60:e8:c6:ce:56:b6:65:71: 83:43:af:e9:1a:fe:0d:d8:46:ac:f4:9a:42:52:1f:4e:51:4a: 6c:fd:80:96:61:ae:ed:bd:bd:44:1f:c3:c1:84:8b:28:8e:55: 11:0a:43:b0:dd:71:ec:b4:c8:c1:22:0e:97:44:b5:fd:ae:8b: ba:20:7a:1a:48:48:8a:c5:78:84:0c:63:ab:5d:4c:6b:87:2a: 9b:60:d7:ce:75:c2:5f:a1:85:d5:68:db:6c:57:0e:67:ac:c9: 5e:bc:58:ed:20:07:5d:22:30:46:5d:2d:ad:41:3e:a0:f0:0b: d0:07:7c:07:d0:7e:34:5a:d0:8a:bf:f0:b8:63:c9:da:31:f5: 34:e9:14:0c:fa:ff:ff:84:45:23:37:e2:a3:58:69:05:4d:22: b0:27:f3:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TyGILH/PVlX416AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MTNiN2QzZmYtODM3YS00NGE0LWFjMWMtZjA2YzgyMzE1ZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtymOZNz7MY5CDXh8jTMg3IxYJma6S5vHuzc yaOTervQOzB7KGo4qVrH1aDoVtsySdlj+C21Ck2DNwQb4pdZn9gnyIk0j+aOXypK IiZt/x0dkg39Gt9UW7bDj8PXiEQ67ERiy8WcnpY8JbJB+aXtNXKzmy2QiUuhUjam EfQdFlbDMMg/AZ5ZLZaalN/FoAnOV2KEBWNyJrI1yFUHit+Z35nzOIa6QT9cmN3s bZ/7FSQdye64B7A3HTW8rMe5JIpCfs7aDUUxzALbiXzFoyqCP/vSMEY65wEygDbj E2fWAq8zuu8OMCi9OqEGbb+Or3gZlZ7vNIlnfVPC5TAqgdMuswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7IZdXqdI3YLOCPevFMuRg3YC8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzkxN2QzMjEtZTdiMS0z OGI4LThkOGEtZWFmYWZkNWE2NGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+goMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMEkPy95S0j8VWlenXeKHmBJZB2mHkWWsfVhrJfTAAq/+Sn2mXqtE6mN zr2pdKsZGr4Q8/sg8SzdhKpYOLBewwgL5Tcz1OsfZB9dbtlh7AAceCik/4inulLE wCGCJwIBKbMJSAdg6MbOVrZlcYNDr+ka/g3YRqz0mkJSH05RSmz9gJZhru29vUQf w8GEiyiOVREKQ7Ddcey0yMEiDpdEtf2ui7ogehpISIrFeIQMY6tdTGuHKptg1851 wl+hhdVo22xXDmesyV68WO0gB10iMEZdLa1BPqDwC9AHfAfQfjRa0Iq/8Lhjydox 9TTpFAz6//+ERSM34qNYaQVNIrAn8+A= -----END CERTIFICATE-----Generated at Wed Nov 4 14:39:36 2026 by rpki-client