$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa74854-b122-3d3e-a59d-d5a2e00ece37.roa File: 3aa74854-b122-3d3e-a59d-d5a2e00ece37.roa (raw, json) Hash identifier: h5b6aqLkgxyLdqfWO5AsNxX81m0+toLCRXMmy2o0Lis= Subject key identifier: ED:D7:C3:AA:16:80:EC:A3:A3:8E:85:EF:BE:7C:78:ED:27:CF:07:BA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862013962BAA4845EFA2900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa74854-b122-3d3e-a59d-d5a2e00ece37.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 71.238.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:01:39:62:ba:a4:84:5e:fa:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=2154f709-99ae-4712-91df-cfe814a7c4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:cf:b9:34:4d:ed:21:ee:26:92:a8:44:0e: 62:a4:2f:bd:b9:0c:8b:2d:f6:81:2a:9c:fc:7c:96: 65:22:05:bc:af:04:f3:a2:7d:3b:16:26:c3:41:69: 62:f2:22:c9:60:5d:f6:1a:fb:91:9b:eb:d4:42:45: 80:97:b9:62:4e:c0:bf:7e:aa:d0:cd:00:43:3c:a9: de:0d:19:8c:9c:de:95:c3:bc:a3:f2:ca:b6:f3:a2: f9:f3:86:2f:75:1a:6e:58:ee:1e:e4:c3:d5:72:a3: e2:08:7c:54:94:7a:38:a7:09:ad:32:12:6d:f7:f1: c9:55:c7:20:62:c1:72:39:03:3c:26:10:d7:72:7f: f9:59:05:d6:fc:93:76:c4:01:8b:78:d4:77:19:b4: 83:ab:7d:5a:a2:f1:0c:b3:27:b7:60:51:7e:f6:41: 47:b9:cd:02:27:b7:10:53:1a:47:59:32:0d:f8:af: c5:b8:b8:d7:03:43:a3:88:29:3f:89:ff:6a:0d:ec: c9:85:fc:dd:af:fe:5b:6e:f0:7a:53:88:d1:2d:3c: 41:06:10:ea:1f:94:46:62:0f:9a:3c:bd:54:4e:7f: 75:de:0f:bb:95:9f:0b:eb:c6:63:31:94:3f:98:90: c5:18:ac:67:71:36:40:fe:77:15:df:f0:5a:d0:bc: 54:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D7:C3:AA:16:80:EC:A3:A3:8E:85:EF:BE:7C:78:ED:27:CF:07:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa74854-b122-3d3e-a59d-d5a2e00ece37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:e4:fd:05:36:62:03:1d:16:cf:a5:cb:63:2b:46:1c:be:75: d4:46:e3:5a:df:d2:89:8c:05:45:c0:e9:a6:57:26:c7:5f:e9: 92:10:e0:04:bb:54:e5:50:4d:56:4e:77:7f:9a:36:79:1f:3e: dc:6d:64:4e:df:ec:8a:84:69:a1:b4:3e:9f:4c:dc:71:dd:6b: 7f:69:6c:90:a3:2b:bb:5f:c4:17:92:a2:64:2e:86:b4:87:b6: 7f:d4:b7:28:a2:a9:0e:f9:98:fb:7d:1b:8a:32:6c:d0:82:2d: 3e:6d:46:2a:71:55:48:04:2e:fc:c2:9f:ad:31:b2:7c:c3:bc: f4:5c:55:64:fe:a4:14:13:a3:de:91:44:08:b1:2c:31:91:5d: 11:d0:62:58:28:3f:0a:71:d1:64:c5:37:5e:08:ab:54:01:df: 27:75:44:1c:c8:21:9b:ff:63:b0:7e:76:09:f3:79:7d:ad:cf: 88:53:2e:d8:db:50:ba:55:05:56:d1:b0:a9:96:32:91:a6:15: f0:d6:01:22:dd:e9:b1:43:1f:4b:41:b3:93:8a:05:02:e6:b6: 6b:44:83:a1:d8:ce:e3:ad:51:15:58:75:40:45:e3:b9:c0:a0: 5e:f1:50:e8:ec:d5:9a:67:d9:84:e4:7b:13:ad:70:ac:71:0a: 89:ef:ba:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYgE5YrqkhF76KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MjE1NGY3MDktOTlhZS00NzEyLTkxZGYtY2ZlODE0YTdjNGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcfPuTRN7SHuJpKoRA5ipC+9uQyLLfaBKpz8 fJZlIgW8rwTzon07FibDQWli8iLJYF32GvuRm+vUQkWAl7liTsC/fqrQzQBDPKne DRmMnN6Vw7yj8sq286L584YvdRpuWO4e5MPVcqPiCHxUlHo4pwmtMhJt9/HJVccg YsFyOQM8JhDXcn/5WQXW/JN2xAGLeNR3GbSDq31aovEMsye3YFF+9kFHuc0CJ7cQ UxpHWTIN+K/FuLjXA0OjiCk/if9qDezJhfzdr/5bbvB6U4jRLTxBBhDqH5RGYg+a PL1UTn913g+7lZ8L68ZjMZQ/mJDFGKxncTZA/ncV3/Ba0LxU3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3Xw6oWgOyjo46F7758eO0nzwe6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FhNzQ4NTQtYjEyMi0z ZDNlLWE1OWQtZDVhMmUwMGVjZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrk/QU2YgMdFs+ly2MrRhy+ddRG41rf0omMBUXA6aZXJsdf6ZIQ4AS7 VOVQTVZOd3+aNnkfPtxtZE7f7IqEaaG0Pp9M3HHda39pbJCjK7tfxBeSomQuhrSH tn/UtyiiqQ75mPt9G4oybNCCLT5tRipxVUgELvzCn60xsnzDvPRcVWT+pBQTo96R RAixLDGRXRHQYlgoPwpx0WTFN14Iq1QB3yd1RBzIIZv/Y7B+dgnzeX2tz4hTLtjb ULpVBVbRsKmWMpGmFfDWASLd6bFDH0tBs5OKBQLmtmtEg6HYzuOtURVYdUBF47nA oF7xUOjs1Zpn2YTkexOtcKxxConvuv0= -----END CERTIFICATE-----Generated at Sat Sep 5 11:04:41 2026 by rpki-client