$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4b1a0ec-7a44-3da2-bcde-1ceddc5e6b47.roa File: b4b1a0ec-7a44-3da2-bcde-1ceddc5e6b47.roa (raw, json) Hash identifier: +ry983PCUs2AHEqBUjA+38/7q4Zt8NsJA6yLO9IkokM= Subject key identifier: 20:57:55:B8:22:3C:9F:D8:B0:D3:63:6C:51:54:AC:95:9A:74:1F:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F06724C779BB53696AE235780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4b1a0ec-7a44-3da2-bcde-1ceddc5e6b47.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 33656 IP address blocks: 71.25.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:4c:77:9b:b5:36:96:ae:23:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=11ccbfb4-69e5-478e-8b40-ae84a4575031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d4:26:91:33:54:e1:f0:c4:0c:27:ce:38:a2: 88:81:75:9c:8b:c2:ea:e0:34:74:d3:29:1c:f6:0f: df:78:20:54:6a:e9:33:60:26:2d:82:6a:0d:b9:d7: 0e:9f:10:76:d6:81:cb:4f:79:a5:ab:c9:d1:9a:32: 01:82:9f:5d:05:f0:85:ed:58:29:06:d8:89:ad:79: fb:75:e7:73:4a:ed:8a:2d:b2:b2:7c:a0:3f:ce:c1: b1:73:ab:5f:18:ee:92:b0:fb:95:eb:f3:e3:ed:00: d0:57:a6:50:e0:54:b5:64:8d:dc:df:b8:fe:a0:7c: 3b:0d:ec:3e:2f:ab:01:7b:0d:b4:5f:e3:89:10:52: 9c:9b:43:15:72:47:82:65:e3:52:7c:b7:de:7c:f2: b4:b2:20:c4:8c:26:9b:36:ed:9e:00:25:15:ba:32: a3:20:d4:1a:c9:43:6d:90:a8:f8:ae:9f:8f:5b:f9: 1b:db:22:5f:5e:27:a9:ad:4a:57:0a:8f:f9:c6:3d: 15:b6:36:ac:08:ee:73:07:9a:f1:0a:a9:f9:dc:d7: 81:49:9e:c9:9a:9f:15:cc:df:89:34:ef:71:07:e5: 02:ce:a8:2d:e4:7b:ab:a5:2f:ae:52:3f:39:14:10: eb:2a:75:54:a7:c5:60:89:d4:d4:5d:50:c6:cd:7d: 10:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:57:55:B8:22:3C:9F:D8:B0:D3:63:6C:51:54:AC:95:9A:74:1F:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4b1a0ec-7a44-3da2-bcde-1ceddc5e6b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.25.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:17:be:86:c3:fe:7c:6a:d2:32:01:c4:7d:a9:41:a0:2d:0a: 07:e8:c3:ec:ce:06:3d:b8:57:70:b9:73:97:b6:a3:67:7f:df: 33:a8:7f:4c:ad:aa:51:d3:ad:ab:eb:51:59:1d:c6:dd:15:5f: 35:2c:95:04:d4:70:bc:67:61:86:d1:fd:81:9e:2d:f1:27:97: 65:73:a6:ab:dd:36:a3:2f:93:38:13:9e:8d:63:09:3c:8d:d4: ce:5a:5e:75:ce:02:5f:16:b4:50:f9:79:38:d2:0b:3d:04:4a: 62:36:f2:a3:87:1e:d7:0c:ec:c4:99:2b:16:ad:3e:3d:85:aa: 44:1c:99:35:7f:c6:7b:77:d9:49:eb:78:3a:9f:4e:8d:84:b7: 82:76:64:36:62:39:48:a5:e2:ef:3d:1e:ed:60:72:6d:ba:0e: 20:94:30:60:75:d1:ec:27:d3:06:00:e6:da:d8:6f:5d:40:eb: 12:32:3c:e3:5d:c0:f3:0c:96:e9:13:1f:7e:a8:52:4e:4a:09: 03:d6:44:0c:5a:84:6f:13:69:0d:9b:6e:af:39:07:58:ce:7b: f2:b5:d7:0c:fd:bd:b4:b2:8f:73:05:a9:3c:11:82:86:06:21: 38:b5:8c:d8:55:3d:28:50:1d:e2:3d:31:14:f7:8e:09:42:1d: 1f:6d:dc:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gckx3m7U2lq4jV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MTFjY2JmYjQtNjllNS00NzhlLThiNDAtYWU4NGE0NTc1MDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NQmkTNU4fDEDCfOOKKIgXWci8Lq4DR00ykc 9g/feCBUaukzYCYtgmoNudcOnxB21oHLT3mlq8nRmjIBgp9dBfCF7VgpBtiJrXn7 dedzSu2KLbKyfKA/zsGxc6tfGO6SsPuV6/Pj7QDQV6ZQ4FS1ZI3c37j+oHw7Dew+ L6sBew20X+OJEFKcm0MVckeCZeNSfLfefPK0siDEjCabNu2eACUVujKjINQayUNt kKj4rp+PW/kb2yJfXieprUpXCo/5xj0VtjasCO5zB5rxCqn53NeBSZ7Jmp8VzN+J NO9xB+UCzqgt5HurpS+uUj85FBDrKnVUp8VgidTUXVDGzX0QrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBXVbgiPJ/YsNNjbFFUrJWadB+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjRiMWEwZWMtN2E0NC0z ZGEyLWJjZGUtMWNlZGRjNWU2YjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkXvobD/nxq0jIBxH2pQaAtCgfow+zOBj24V3C5c5e2o2d/3zOof0yt qlHTravrUVkdxt0VXzUslQTUcLxnYYbR/YGeLfEnl2VzpqvdNqMvkzgTno1jCTyN 1M5aXnXOAl8WtFD5eTjSCz0ESmI28qOHHtcM7MSZKxatPj2FqkQcmTV/xnt32Unr eDqfTo2Et4J2ZDZiOUil4u89Hu1gcm26DiCUMGB10ewn0wYA5trYb11A6xIyPONd wPMMlukTH36oUk5KCQPWRAxahG8TaQ2bbq85B1jOe/K11wz9vbSyj3MFqTwRgoYG ITi1jNhVPShQHeI9MRT3jglCHR9t3GQ= -----END CERTIFICATE-----Generated at Sat Sep 5 06:21:16 2026 by rpki-client