$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b2acb8f-3944-3068-a17e-13e1fc2e4870.roa File: 4b2acb8f-3944-3068-a17e-13e1fc2e4870.roa (raw, json) Hash identifier: w9S8NzL79S3ArCy2PVPDHX74bhtwztHWvcS+p04BVLU= Subject key identifier: 5F:8D:64:11:10:B2:D1:EB:E8:7F:AC:56:92:96:EB:AC:4A:04:D8:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED86200819B357DAC8EEC7040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b2acb8f-3944-3068-a17e-13e1fc2e4870.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 71.238.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:00:81:9b:35:7d:ac:8e:ec:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=f1f27382-8111-4716-9f0a-b0ff2d3f1336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a1:a7:97:2b:44:59:fd:af:ed:d4:c4:ac:aa: e1:be:1c:51:da:dd:df:93:fa:64:24:fb:8a:ae:46: e3:d2:3e:14:1c:76:e2:50:a4:85:63:68:cb:63:c9: 3b:66:46:bb:86:28:2e:8d:8a:01:98:58:f9:32:43: 4a:35:64:b7:51:84:10:98:69:87:2c:a4:d8:4f:a5: 57:07:1d:0e:d1:f4:5e:58:6f:a4:2b:da:1a:f8:58: 7a:3f:d6:89:77:26:21:fb:4d:9f:d6:0f:1d:c4:75: 31:21:e1:7d:26:83:f3:8a:44:2a:16:3e:4f:5f:33: e9:a0:fc:e3:16:36:bc:96:1d:8b:ca:1b:fa:db:4e: e2:93:71:34:19:a1:f6:38:49:a0:65:f9:77:55:b8: 71:0a:72:df:5b:58:e7:02:14:d3:8d:fa:e8:c2:ff: ad:9c:1f:c0:d6:87:15:d9:83:6a:5b:0f:5b:45:cc: 14:6d:6a:4c:4b:94:52:ec:1d:53:f7:14:f3:b4:f6: 40:33:ca:73:89:40:4f:40:5f:9f:34:4e:46:86:d2: 72:3c:24:36:35:f2:49:7c:f2:26:2d:1f:be:fa:da: 15:7d:d9:50:7a:18:d4:bc:1a:b0:49:70:cf:8d:df: fa:90:61:bc:a5:5e:e9:12:11:bf:5c:c5:d4:f5:a5: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8D:64:11:10:B2:D1:EB:E8:7F:AC:56:92:96:EB:AC:4A:04:D8:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b2acb8f-3944-3068-a17e-13e1fc2e4870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:55:5c:f3:ec:65:78:c1:9d:4e:5b:97:ff:0a:30:92:a3:07: a7:7b:6d:45:b6:2f:24:cc:0e:31:d5:f3:e7:eb:94:27:06:22: 17:a6:99:f5:11:45:7b:e6:a5:3b:ea:7c:09:33:38:23:0a:79: e3:2e:56:b0:d2:1f:d7:4a:61:f6:92:c4:27:d9:4a:18:25:1c: 02:6d:12:bc:f7:ad:6e:59:7f:e6:10:09:dd:7f:09:13:c8:bf: 1f:78:1a:36:21:36:c0:ff:eb:69:a1:9e:1a:e5:5b:42:f2:44: 77:84:0c:fe:67:e5:55:56:25:bb:04:62:c5:e9:f2:72:a3:3a: ec:5b:78:f3:27:bb:06:16:9d:75:d1:12:8e:ae:64:d9:96:dd: 05:4a:46:bd:25:eb:44:5c:e4:04:19:df:69:40:df:dc:f5:ad: 12:77:01:7c:43:ac:af:6d:eb:f8:24:e7:22:62:e2:12:ea:d2: 25:6a:a3:83:76:5f:0a:7a:55:73:82:2f:95:35:87:3d:da:31: 81:45:22:ad:fb:17:a4:d2:d8:f1:ca:e4:e1:75:52:41:0a:02: 2a:de:a2:e5:b2:c0:b5:bf:64:42:f2:71:b9:cf:b4:3d:e0:53: 2f:b8:82:fe:a4:43:fb:dd:69:03:c6:b1:5f:f9:ff:5d:1a:23: 8a:16:a9:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYgCBmzV9rI7scEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZjFmMjczODItODExMS00NzE2LTlmMGEtYjBmZjJkM2YxMzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKGnlytEWf2v7dTErKrhvhxR2t3fk/pkJPuK rkbj0j4UHHbiUKSFY2jLY8k7Zka7higujYoBmFj5MkNKNWS3UYQQmGmHLKTYT6VX Bx0O0fReWG+kK9oa+Fh6P9aJdyYh+02f1g8dxHUxIeF9JoPzikQqFj5PXzPpoPzj Fja8lh2Lyhv6207ik3E0GaH2OEmgZfl3VbhxCnLfW1jnAhTTjfrowv+tnB/A1ocV 2YNqWw9bRcwUbWpMS5RS7B1T9xTztPZAM8pziUBPQF+fNE5GhtJyPCQ2NfJJfPIm LR+++toVfdlQehjUvBqwSXDPjd/6kGG8pV7pEhG/XMXU9aWSSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+NZBEQstHr6H+sVpKW66xKBNj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGIyYWNiOGYtMzk0NC0z MDY4LWExN2UtMTNlMWZjMmU0ODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+5oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRVXPPsZXjBnU5bl/8KMJKjB6d7bUW2LyTMDjHV8+frlCcGIhemmfUR RXvmpTvqfAkzOCMKeeMuVrDSH9dKYfaSxCfZShglHAJtErz3rW5Zf+YQCd1/CRPI vx94GjYhNsD/62mhnhrlW0LyRHeEDP5n5VVWJbsEYsXp8nKjOuxbePMnuwYWnXXR Eo6uZNmW3QVKRr0l60Rc5AQZ32lA39z1rRJ3AXxDrK9t6/gk5yJi4hLq0iVqo4N2 Xwp6VXOCL5U1hz3aMYFFIq37F6TS2PHK5OF1UkEKAireouWywLW/ZELycbnPtD3g Uy+4gv6kQ/vdaQPGsV/5/10aI4oWqcI= -----END CERTIFICATE-----Generated at Sat Sep 5 08:49:04 2026 by rpki-client