$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/588e1645-3b10-3ba1-a73f-4a931f4711a8.roa File: 588e1645-3b10-3ba1-a73f-4a931f4711a8.roa (raw, json) Hash identifier: BdKFTy6kz8McEmdbFDGrm9V1IGsf9BVgoLuAOE+E8c4= Subject key identifier: 26:BA:1A:5A:C3:EC:D7:71:3C:91:D3:93:42:76:EF:19:8C:E5:C4:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F7EFB157504EA09E3C140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/588e1645-3b10-3ba1-a73f-4a931f4711a8.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 107.4.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:7e:fb:15:75:04:ea:09:e3:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=e1b9a823-d649-426f-bea0-c2c6af46d77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:ba:8f:51:0c:72:db:07:fb:8e:44:f9:d0: 50:8b:43:51:da:95:20:40:f3:45:05:57:4f:70:5d: 0f:16:10:c5:4d:b2:de:60:a2:e7:75:61:23:bf:ec: c9:9e:81:93:56:6e:c4:a6:5a:99:a2:f0:29:26:69: d9:6a:2c:7b:bf:17:3d:f9:2f:b6:a7:24:1e:b3:ea: 4c:04:6e:19:47:02:a7:fb:2c:f8:19:17:9f:39:c0: d4:b2:ce:0d:53:89:30:37:db:be:6d:dc:80:a0:26: a7:21:85:23:7d:df:ab:ba:e4:6c:9d:e8:80:46:6d: 66:9f:32:8f:98:1c:b1:48:9e:06:8c:83:53:15:d9: 52:c0:2b:25:2a:4c:33:cd:35:f2:03:28:61:fb:ba: 28:ba:19:c2:62:c2:d5:5d:94:6b:21:75:85:64:41: 01:97:6e:d9:d9:9f:5f:21:05:d7:9e:47:c7:23:17: 5b:11:fb:c2:83:94:2e:e7:95:8e:fe:de:8e:18:5d: e3:0c:07:dd:da:df:11:6c:f7:ad:08:52:2c:1a:21: 78:d1:cc:7b:29:dd:b1:4c:1d:bc:c7:fd:f5:96:ae: 0a:00:b7:0a:dd:ac:32:5a:a7:f3:9b:35:14:b7:6d: 81:66:70:e8:70:de:de:06:f9:ee:df:0b:8d:08:0d: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BA:1A:5A:C3:EC:D7:71:3C:91:D3:93:42:76:EF:19:8C:E5:C4:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/588e1645-3b10-3ba1-a73f-4a931f4711a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.4.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1f:0e:5f:e9:d6:cc:5b:bc:8a:be:64:ef:50:25:82:05:42: 81:3c:36:79:27:6c:b3:92:b7:a2:77:fa:50:2a:43:3c:20:90: 48:13:2f:3a:79:d7:cf:3f:a8:82:f1:63:3f:4d:33:69:51:50: 3c:8e:4e:60:1e:03:f4:6e:80:d5:f5:37:49:55:a2:29:94:6a: d7:72:1a:1f:11:80:c4:08:70:86:20:11:f4:08:2b:23:32:6e: 3e:d9:22:e2:d4:83:25:cc:45:af:c4:1f:73:33:bd:b0:41:3d: 69:1f:ff:20:0e:3d:a4:cb:97:b1:7a:4f:a5:6e:1e:18:b1:49: 2c:1b:dd:09:23:f6:3d:b2:17:88:bd:55:11:2d:49:48:1f:1c: b1:e2:bf:73:b2:b0:91:7b:5d:5e:f2:a6:a6:59:eb:62:bb:04: 5e:ad:f6:aa:4b:cb:9f:f7:78:59:a6:b1:1b:d8:84:89:72:d1: 49:f2:00:de:68:d8:68:05:98:6a:43:31:e1:2c:45:81:c9:3e: 85:c1:1b:0e:1f:93:d3:8c:62:88:c8:27:ae:d3:1d:83:d9:54: 96:14:5d:44:e8:6c:c6:b2:8f:a7:f5:51:f5:17:9e:2f:76:89: 58:bc:23:97:4e:ef:19:cf:8d:19:12:89:40:13:43:04:5e:28: 07:87:47:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T377FXUE6gnjwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZTFiOWE4MjMtZDY0OS00MjZmLWJlYTAtYzJjNmFmNDZkNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYW6j1EMctsH+45E+dBQi0NR2pUgQPNFBVdP cF0PFhDFTbLeYKLndWEjv+zJnoGTVm7EplqZovApJmnZaix7vxc9+S+2pyQes+pM BG4ZRwKn+yz4GRefOcDUss4NU4kwN9u+bdyAoCanIYUjfd+ruuRsneiARm1mnzKP mByxSJ4GjINTFdlSwCslKkwzzTXyAyhh+7oouhnCYsLVXZRrIXWFZEEBl27Z2Z9f IQXXnkfHIxdbEfvCg5Qu55WO/t6OGF3jDAfd2t8RbPetCFIsGiF40cx7Kd2xTB28 x/31lq4KALcK3awyWqfzmzUUt22BZnDocN7eBvnu3wuNCA2tFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCa6GlrD7NdxPJHTk0J27xmM5cRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTg4ZTE2NDUtM2IxMC0z YmExLWE3M2YtNGE5MzFmNDcxMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMfDl/p1sxbvIq+ZO9QJYIFQoE8NnknbLOSt6J3+lAqQzwgkEgTLzp5 188/qILxYz9NM2lRUDyOTmAeA/RugNX1N0lVoimUatdyGh8RgMQIcIYgEfQIKyMy bj7ZIuLUgyXMRa/EH3MzvbBBPWkf/yAOPaTLl7F6T6VuHhixSSwb3Qkj9j2yF4i9 VREtSUgfHLHiv3OysJF7XV7ypqZZ62K7BF6t9qpLy5/3eFmmsRvYhIly0UnyAN5o 2GgFmGpDMeEsRYHJPoXBGw4fk9OMYojIJ67THYPZVJYUXUTobMayj6f1UfUXni92 iVi8I5dO7xnPjRkSiUATQwReKAeHR8Y= -----END CERTIFICATE-----Generated at Tue Oct 27 16:50:19 2026 by rpki-client