$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4da04a15-88de-3dd1-9727-3a7c7ed5281b.roa File: 4da04a15-88de-3dd1-9727-3a7c7ed5281b.roa (raw, json) Hash identifier: cImvbgKxnvFP6hI1NWEgy85zx8d2P09nwxefj4ya3UI= Subject key identifier: 31:C9:A2:23:39:D6:AA:D1:69:A1:20:90:59:9D:D2:71:37:88:CF:D6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4DB358D235CF172F8B7600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4da04a15-88de-3dd1-9727-3a7c7ed5281b.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 71.63.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:b3:58:d2:35:cf:17:2f:8b:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=98ffb063-f53e-4b0c-b943-a07a6c19a07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:11:bb:02:b9:6b:e2:4b:67:0d:ac:3e:f8:99: e5:b8:dd:cb:1c:6b:16:10:e4:04:23:08:34:20:25: 50:f1:ed:76:83:03:23:52:aa:4f:b8:03:2d:10:e1: e3:29:d1:cc:3d:fd:7e:68:49:b9:e1:b7:c7:45:1c: ce:4c:2c:c5:de:5c:9f:b4:40:42:ca:73:03:1c:4c: 91:5b:01:58:f9:4a:57:33:b9:9f:8c:36:95:74:25: 49:ce:a7:f0:f8:a2:7d:c7:b4:9a:b8:3e:6c:c6:e3: 4d:cd:8a:08:ce:ea:96:ab:7c:70:71:30:7b:d5:8a: a9:fd:ea:66:97:de:83:d5:ed:d7:f4:68:dd:7e:d3: ae:48:55:f1:53:56:ea:03:4a:cd:d1:6c:fd:c9:90: 57:a6:9b:60:a6:fd:70:f6:08:ba:9a:d1:10:7d:26: fa:96:6e:9f:94:dc:cb:65:c0:f3:73:56:40:fb:cf: a0:72:11:fe:6b:72:b2:ff:29:42:dc:e1:28:c6:88: 31:87:08:51:bf:91:ff:4a:55:91:cc:12:38:2a:bf: dc:39:aa:ce:de:f9:47:9b:9c:d7:19:9c:21:3d:8a: d0:34:9d:27:74:d0:ff:c0:6c:80:12:48:4d:ce:19: 43:8c:09:6a:1e:90:d9:9d:43:99:96:99:40:25:52: 23:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C9:A2:23:39:D6:AA:D1:69:A1:20:90:59:9D:D2:71:37:88:CF:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4da04a15-88de-3dd1-9727-3a7c7ed5281b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.63.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:bd:19:7c:92:72:af:a7:32:8d:13:72:0e:aa:54:9b:e3:9e: 79:5c:44:fa:c6:cf:41:a7:c4:a6:6b:3a:30:12:aa:df:a8:2e: 1c:65:e1:52:f3:6c:37:1d:15:d6:69:99:df:ba:3a:9a:ad:08: 26:e3:a8:24:f0:04:0b:9f:29:d8:97:d4:e5:f9:98:b7:23:16: 3c:20:87:37:25:51:28:aa:3a:fc:5a:f1:a1:d3:a2:b5:0d:eb: 83:9c:1d:30:67:a5:c0:f5:f2:8a:fb:14:0f:c0:b0:ad:1f:0d: 0e:a3:f4:39:39:6b:a8:ae:0e:81:a7:31:34:3e:93:eb:9a:9e: a0:ab:0b:22:11:e8:c3:30:cd:0a:15:0e:1a:7f:47:50:9b:b1: 17:9f:41:91:a1:c2:27:eb:57:7c:82:f7:72:d1:86:fd:a2:77: 56:f7:ca:c2:25:8a:0c:8f:0c:25:22:18:f3:5e:f6:85:a9:a5: 6a:b1:05:54:54:8f:ac:c5:62:d0:43:29:20:8f:31:09:75:ae: 67:c2:89:4d:bc:07:e8:52:2c:d6:07:3d:40:8c:4f:e4:4b:57: 15:69:8e:ac:1c:7a:97:88:d0:bb:86:22:85:3b:5a:a1:6c:6d: ab:94:42:a3:52:55:00:4b:56:53:35:58:2f:0b:10:93:84:fc: 93:ef:15:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TbNY0jXPFy+LdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk OThmZmIwNjMtZjUzZS00YjBjLWI5NDMtYTA3YTZjMTlhMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRG7Arlr4ktnDaw++JnluN3LHGsWEOQEIwg0 ICVQ8e12gwMjUqpPuAMtEOHjKdHMPf1+aEm54bfHRRzOTCzF3lyftEBCynMDHEyR WwFY+UpXM7mfjDaVdCVJzqfw+KJ9x7SauD5sxuNNzYoIzuqWq3xwcTB71Yqp/epm l96D1e3X9GjdftOuSFXxU1bqA0rN0Wz9yZBXpptgpv1w9gi6mtEQfSb6lm6flNzL ZcDzc1ZA+8+gchH+a3Ky/ylC3OEoxogxhwhRv5H/SlWRzBI4Kr/cOarO3vlHm5zX GZwhPYrQNJ0ndND/wGyAEkhNzhlDjAlqHpDZnUOZlplAJVIjFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHJoiM51qrRaaEgkFmd0nE3iM/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGRhMDRhMTUtODhkZS0z ZGQxLTk3MjctM2E3YzdlZDUyODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRz+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+9GXyScq+nMo0Tcg6qVJvjnnlcRPrGz0GnxKZrOjASqt+oLhxl4VLz bDcdFdZpmd+6OpqtCCbjqCTwBAufKdiX1OX5mLcjFjwghzclUSiqOvxa8aHTorUN 64OcHTBnpcD18or7FA/AsK0fDQ6j9Dk5a6iuDoGnMTQ+k+uanqCrCyIR6MMwzQoV Dhp/R1CbsRefQZGhwifrV3yC93LRhv2id1b3ysIligyPDCUiGPNe9oWppWqxBVRU j6zFYtBDKSCPMQl1rmfCiU28B+hSLNYHPUCMT+RLVxVpjqwcepeI0LuGIoU7WqFs bauUQqNSVQBLVlM1WC8LEJOE/JPvFY8= -----END CERTIFICATE-----Generated at Tue Oct 20 18:21:56 2026 by rpki-client