$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f80b59-1d5b-31d6-88b0-bc117a79eac2.roa File: a7f80b59-1d5b-31d6-88b0-bc117a79eac2.roa (raw, json) Hash identifier: RwcmDJ0GtYsduq1MZiE3vvP1wvTy+YuYCYecVBTT99k= Subject key identifier: 86:D6:55:86:B5:DA:1A:EC:60:3C:15:54:DD:DD:D6:01:6F:54:33:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8636C25E70A7C9FDA245F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f80b59-1d5b-31d6-88b0-bc117a79eac2.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7015 IP address blocks: 71.234.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:6c:25:e7:0a:7c:9f:da:24:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=6a0c5fd1-4585-4b5b-aa99-6484f9becf90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:93:7c:ce:ca:06:15:cd:4d:e4:58:d3:6d: 07:3b:d3:55:d9:e4:5f:63:70:2f:d8:8f:1c:b5:f6: 03:8e:31:41:c5:57:1b:ff:d1:7d:c8:df:2a:7b:76: 53:b2:f8:05:e9:b0:b4:f7:7a:0f:f8:b7:1b:9a:c4: 72:fd:7c:61:da:47:57:01:00:b8:33:1c:3c:ff:e8: c9:6b:66:ac:74:58:38:63:52:38:de:8b:e5:7d:39: 18:13:df:b5:ad:27:9b:ec:22:20:12:25:34:bd:d7: 63:9d:50:b8:16:11:4c:4a:71:ad:ab:36:d0:e8:0e: f1:95:bc:65:ea:fe:be:21:b4:6a:7c:52:d6:00:ef: bd:52:52:f0:d1:12:0c:00:31:e3:9b:cb:4f:7e:47: b2:cf:e6:c9:d4:e9:3e:87:40:85:83:ab:86:81:bb: 1c:57:44:66:c6:e2:b1:18:70:e8:42:2b:e2:e2:20: 9b:11:31:b9:a1:d6:b2:4f:a3:35:ce:07:86:1d:78: 8e:96:b6:7c:4e:7a:05:0a:06:e9:c8:f0:db:74:9f: 10:14:f1:0e:12:56:27:44:d5:63:0e:e0:83:4b:49: f7:f4:1e:49:a1:69:45:66:3a:c2:02:d6:77:e6:2d: d0:00:36:26:2f:c3:e4:b9:1b:c4:93:7b:9a:d5:56: 2e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D6:55:86:B5:DA:1A:EC:60:3C:15:54:DD:DD:D6:01:6F:54:33:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f80b59-1d5b-31d6-88b0-bc117a79eac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.234.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b5:03:af:b0:0e:f9:e0:cc:5e:93:92:43:00:79:99:18:8b: 65:27:86:bc:72:80:33:ee:71:04:86:33:3a:0a:eb:d5:ae:63: e9:19:ae:cc:03:54:e8:42:d7:a4:d6:8d:b8:e3:f8:22:3a:fa: 9d:9e:23:18:41:7d:2d:cd:da:00:3d:58:36:1f:6f:c6:80:ae: 4b:4b:9d:b7:cb:f9:25:00:d6:e2:0a:8d:01:c5:cb:1d:79:48: 07:fe:58:7e:7d:64:cd:52:c0:c0:89:dc:f3:c2:ce:5b:5b:3c: 1d:98:55:a9:0c:48:80:93:3d:a8:64:2a:ad:16:f7:b1:fe:16: be:dc:81:3e:c3:f3:be:8d:bf:6f:ee:41:57:de:9d:c9:82:18: 21:0a:30:76:d7:e3:10:b5:17:90:fe:3a:3f:0c:8a:41:d7:91: cf:4b:70:54:52:62:99:82:3b:13:81:c7:bf:aa:19:fa:5c:b4: 46:71:56:b0:be:a9:31:3f:b9:0a:db:f5:c5:c4:dd:f7:7d:8f: fd:a3:54:32:99:f4:68:c1:ba:e4:7c:ff:d3:7a:cc:a3:e9:5c: b3:e0:d0:58:a8:8b:3e:eb:d1:23:da:06:a9:e3:5e:f8:b8:8c: 7d:8e:80:18:d2:79:c4:f1:b6:66:6f:9b:9c:51:40:ee:c1:f3: 2c:56:34:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY2wl5wp8n9okXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NmEwYzVmZDEtNDU4NS00YjViLWFhOTktNjQ4NGY5YmVjZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk32TfM7KBhXNTeRY020HO9NV2eRfY3Av2I8c tfYDjjFBxVcb/9F9yN8qe3ZTsvgF6bC093oP+LcbmsRy/Xxh2kdXAQC4Mxw8/+jJ a2asdFg4Y1I43ovlfTkYE9+1rSeb7CIgEiU0vddjnVC4FhFMSnGtqzbQ6A7xlbxl 6v6+IbRqfFLWAO+9UlLw0RIMADHjm8tPfkeyz+bJ1Ok+h0CFg6uGgbscV0RmxuKx GHDoQivi4iCbETG5odayT6M1zgeGHXiOlrZ8TnoFCgbpyPDbdJ8QFPEOElYnRNVj DuCDS0n39B5JoWlFZjrCAtZ35i3QADYmL8PkuRvEk3ua1VYukwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbWVYa12hrsYDwVVN3d1gFvVDPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdmODBiNTktMWQ1Yi0z MWQ2LTg4YjAtYmMxMTdhNzllYWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+rwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS1A6+wDvngzF6TkkMAeZkYi2UnhrxygDPucQSGMzoK69WuY+kZrswD VOhC16TWjbjj+CI6+p2eIxhBfS3N2gA9WDYfb8aArktLnbfL+SUA1uIKjQHFyx15 SAf+WH59ZM1SwMCJ3PPCzltbPB2YVakMSICTPahkKq0W97H+Fr7cgT7D876Nv2/u QVfencmCGCEKMHbX4xC1F5D+Oj8MikHXkc9LcFRSYpmCOxOBx7+qGfpctEZxVrC+ qTE/uQrb9cXE3fd9j/2jVDKZ9GjBuuR8/9N6zKPpXLPg0Fioiz7r0SPaBqnjXvi4 jH2OgBjSecTxtmZvm5xRQO7B8yxWNMA= -----END CERTIFICATE-----Generated at Mon Sep 14 17:38:08 2026 by rpki-client