$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aff64e4a-0e74-3cc5-8b40-570786d8a17f.roa File: aff64e4a-0e74-3cc5-8b40-570786d8a17f.roa (raw, json) Hash identifier: +4w50N+SS5ifWCb7XSEWivPjhGmhC7cHQuSQZmyuhNs= Subject key identifier: E1:D6:A7:C1:24:7D:C6:B4:1C:3C:03:C4:0F:4F:29:DC:BE:C7:77:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862015B81426D2978BD07F0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aff64e4a-0e74-3cc5-8b40-570786d8a17f.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 71.238.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:01:5b:81:42:6d:29:78:bd:07:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=f02349b3-f1e8-478d-b2c4-2336eb0f4c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3e:5b:a8:07:54:4d:b4:b0:79:7b:fb:9d:06: e4:86:8c:70:0b:2f:52:5d:ab:6e:50:e7:a2:e5:16: 34:4d:cb:b5:5d:69:d2:ff:5f:70:31:f5:97:df:31: 25:7d:88:51:de:9b:53:62:a0:70:6b:75:01:28:70: b3:b5:08:4a:ad:ff:4b:c4:2e:d0:e1:7b:12:ea:f4: 2d:71:08:40:2e:15:60:aa:ef:c9:56:6f:38:f8:a8: 93:63:0c:07:c5:55:e4:73:cf:d6:1a:1b:8c:18:a3: 1e:e8:9a:fc:d1:11:49:3f:a8:a7:46:79:d7:62:a4: 26:23:c2:6c:9f:88:7e:3b:c7:0d:19:f7:8f:6a:64: 45:d8:46:df:01:e3:1a:2f:25:23:2c:9e:0d:4c:89: 13:58:8a:be:1d:1c:13:b2:47:b5:85:9b:c9:57:01: e2:df:d8:49:95:d4:f9:01:a5:28:13:93:35:71:a0: fd:d7:eb:ce:d7:f4:e1:8b:bd:b2:cb:c3:85:85:39: 35:35:01:fe:d8:70:83:92:89:66:e3:96:3c:92:a8: f0:6a:04:30:d0:d5:fa:d9:93:37:77:3d:f0:e6:f2: 61:d4:b4:08:22:f1:b2:f1:b7:b9:4e:8a:e6:52:81: ba:98:1e:af:95:84:d3:75:76:d6:19:21:8c:48:a8: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D6:A7:C1:24:7D:C6:B4:1C:3C:03:C4:0F:4F:29:DC:BE:C7:77:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aff64e4a-0e74-3cc5-8b40-570786d8a17f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:68:6e:af:3f:72:2f:3c:12:82:77:61:81:90:51:86:2c:5c: b6:7b:cb:f8:e8:2c:b0:47:6e:8b:56:47:89:dd:d5:bb:3f:ce: 73:ff:07:f5:f8:d5:07:5a:4b:ea:20:60:8f:36:55:fa:61:83: dd:7c:c9:a8:68:e1:15:ce:ac:34:0b:71:20:7f:6f:94:2c:91: 37:f7:0e:d4:f9:e1:2e:57:3d:06:23:ba:f9:df:ef:50:aa:99: 1a:92:39:16:5d:b8:ff:ee:a2:31:b9:ae:54:55:b3:ed:84:87: 79:e9:9a:a2:22:37:ca:b2:3e:e2:66:bb:47:72:ac:33:04:8d: 3d:76:be:d5:36:10:e0:90:9c:64:6e:eb:e3:0b:7a:4e:f6:88: e0:72:ae:36:dc:f1:ee:a9:71:be:c2:fd:1d:e1:06:f3:f2:2a: 29:d1:60:7f:e2:92:9d:07:93:53:84:29:c0:5d:55:c3:a5:07: 99:e4:cc:a1:86:51:c3:3d:4e:92:fe:05:81:53:96:93:d5:fd: 47:cb:79:21:07:0d:7e:5f:41:b8:1f:92:e2:55:6e:11:33:f5: cf:ea:de:83:22:6b:50:51:13:f4:2f:58:83:d5:db:01:62:fe: 86:26:86:23:6f:c6:b0:bb:30:fc:78:45:5a:c7:eb:8a:42:81: 5f:f5:65:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYgFbgUJtKXi9B/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZjAyMzQ5YjMtZjFlOC00NzhkLWIyYzQtMjMzNmViMGY0YzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj5bqAdUTbSweXv7nQbkhoxwCy9SXatuUOei 5RY0Tcu1XWnS/19wMfWX3zElfYhR3ptTYqBwa3UBKHCztQhKrf9LxC7Q4XsS6vQt cQhALhVgqu/JVm84+KiTYwwHxVXkc8/WGhuMGKMe6Jr80RFJP6inRnnXYqQmI8Js n4h+O8cNGfePamRF2EbfAeMaLyUjLJ4NTIkTWIq+HRwTske1hZvJVwHi39hJldT5 AaUoE5M1caD91+vO1/Thi72yy8OFhTk1NQH+2HCDkolm45Y8kqjwagQw0NX62ZM3 dz3w5vJh1LQIIvGy8be5TormUoG6mB6vlYTTdXbWGSGMSKiEiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHWp8Ekfca0HDwDxA9PKdy+x3fXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZmNjRlNGEtMGU3NC0z Y2M1LThiNDAtNTcwNzg2ZDhhMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBobq8/ci88EoJ3YYGQUYYsXLZ7y/joLLBHbotWR4nd1bs/znP/B/X4 1QdaS+ogYI82Vfphg918yaho4RXOrDQLcSB/b5QskTf3DtT54S5XPQYjuvnf71Cq mRqSORZduP/uojG5rlRVs+2Eh3npmqIiN8qyPuJmu0dyrDMEjT12vtU2EOCQnGRu 6+MLek72iOByrjbc8e6pcb7C/R3hBvPyKinRYH/ikp0Hk1OEKcBdVcOlB5nkzKGG UcM9TpL+BYFTlpPV/UfLeSEHDX5fQbgfkuJVbhEz9c/q3oMia1BRE/QvWIPV2wFi /oYmhiNvxrC7MPx4RVrH64pCgV/1ZZI= -----END CERTIFICATE-----Generated at Sat Sep 5 09:31:31 2026 by rpki-client