$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb7c6132-ee9a-334e-a4f8-e2876b82b35c.roa File: cb7c6132-ee9a-334e-a4f8-e2876b82b35c.roa (raw, json) Hash identifier: Q6lF/Y4gWowpFmFJUIBM2lO4RdwcUJK9cPjGtuZrV8Q= Subject key identifier: 33:76:46:A1:C5:72:5F:CA:CC:2A:99:3C:78:DB:2E:32:6F:1C:14:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4DAFF93BA814C11AA28C60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb7c6132-ee9a-334e-a4f8-e2876b82b35c.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 71.238.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:af:f9:3b:a8:14:c1:1a:a2:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=bab0a9ab-6367-4070-bbe0-7d6555b7b9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f4:37:83:51:3d:d4:70:d8:30:2a:3b:32:97: 66:23:a0:66:9a:20:c3:ef:31:ca:b9:d3:29:63:51: e0:16:09:65:86:8b:f9:c9:6b:24:8d:bd:a4:42:91: cb:2a:b4:f4:3e:06:4c:d0:2c:71:44:d6:1a:ce:61: fd:1b:a4:d6:0a:e8:b6:42:3b:bd:3a:05:9e:ec:b6: f9:aa:99:d1:7a:15:d4:8b:08:c3:ca:69:5b:1a:9d: 0b:52:f6:a6:d2:10:53:e7:eb:d1:07:88:b4:d9:f4: 7e:1f:62:0c:52:9e:3c:52:9a:93:3a:67:3b:41:7c: 50:b4:c4:77:98:63:88:1c:58:07:85:f6:16:b0:c3: 88:5d:1b:de:bc:80:44:10:0f:c8:a1:d3:38:5c:5e: d9:83:ea:09:14:80:38:02:fd:89:40:32:e5:ea:23: 23:86:eb:3e:5d:a9:aa:88:ca:6a:33:1e:b9:bd:e2: 79:7c:8b:18:16:ef:aa:cc:69:31:f1:48:48:c8:c8: ba:a0:bf:b8:c9:00:61:82:bc:65:fa:2f:7a:16:62: 0e:18:0e:7c:f6:76:34:f6:cf:ce:dd:7a:7e:a9:48: e5:74:e3:17:e5:2d:39:c8:ce:89:bd:0e:74:87:5a: 12:53:69:f6:ea:ab:98:b5:fd:ba:d1:88:5e:68:a3: a0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:76:46:A1:C5:72:5F:CA:CC:2A:99:3C:78:DB:2E:32:6F:1C:14:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb7c6132-ee9a-334e-a4f8-e2876b82b35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:94:75:14:77:00:39:91:8c:b6:56:13:36:cb:5b:d5:7c:86: b7:b0:65:25:92:85:bd:d8:29:02:f8:2b:91:40:e1:14:c9:d7: 6c:28:57:a5:e9:6b:1b:5f:15:43:f9:93:45:e0:4d:f6:e0:bd: 29:d4:42:3d:b1:59:48:01:17:b7:f8:82:75:ae:00:52:2a:c1: 7f:23:5d:ef:69:5c:7a:66:e5:b9:d5:48:05:4e:25:73:82:f1: b8:11:69:02:26:2f:8c:9c:06:d5:44:3f:b7:de:2a:e5:19:6a: 46:e6:af:43:15:51:81:4e:9b:e6:2c:8a:28:e0:5c:d3:54:0e: 6b:f7:4e:f2:3a:15:45:af:a1:e3:42:10:a8:46:7f:82:ce:47: a9:36:9b:2e:12:50:29:a4:3e:02:4b:51:15:9d:c4:f3:a4:96: d2:a3:80:b4:4e:04:49:19:36:1b:c5:6f:4f:41:bb:5e:ac:00: 07:65:09:fb:05:7d:e9:94:5d:26:44:9b:6b:66:e9:59:88:8c: 4c:54:8c:be:21:c9:fd:63:f2:62:6e:84:1f:07:fd:92:22:2b: de:b9:ce:d3:d5:b5:cc:2d:ce:e0:f1:70:78:ed:70:15:36:30: 07:1b:24:36:3d:1d:fa:4a:68:a0:0c:35:73:c3:a9:55:89:df: ee:11:86:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Ta/5O6gUwRqijGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YmFiMGE5YWItNjM2Ny00MDcwLWJiZTAtN2Q2NTU1YjdiOWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPQ3g1E91HDYMCo7MpdmI6BmmiDD7zHKudMp Y1HgFgllhov5yWskjb2kQpHLKrT0PgZM0CxxRNYazmH9G6TWCui2Qju9OgWe7Lb5 qpnRehXUiwjDymlbGp0LUvam0hBT5+vRB4i02fR+H2IMUp48UpqTOmc7QXxQtMR3 mGOIHFgHhfYWsMOIXRvevIBEEA/IodM4XF7Zg+oJFIA4Av2JQDLl6iMjhus+Xamq iMpqMx65veJ5fIsYFu+qzGkx8UhIyMi6oL+4yQBhgrxl+i96FmIOGA589nY09s/O 3Xp+qUjldOMX5S05yM6JvQ50h1oSU2n26quYtf260YheaKOguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDN2RqHFcl/KzCqZPHjbLjJvHBTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I3YzYxMzItZWU5YS0z MzRlLWE0ZjgtZTI4NzZiODJiMzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+5nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmUdRR3ADmRjLZWEzbLW9V8hrewZSWShb3YKQL4K5FA4RTJ12woV6Xp axtfFUP5k0XgTfbgvSnUQj2xWUgBF7f4gnWuAFIqwX8jXe9pXHpm5bnVSAVOJXOC 8bgRaQImL4ycBtVEP7feKuUZakbmr0MVUYFOm+YsiijgXNNUDmv3TvI6FUWvoeNC EKhGf4LOR6k2my4SUCmkPgJLURWdxPOkltKjgLROBEkZNhvFb09Bu16sAAdlCfsF femUXSZEm2tm6VmIjExUjL4hyf1j8mJuhB8H/ZIiK965ztPVtcwtzuDxcHjtcBU2 MAcbJDY9HfpKaKAMNXPDqVWJ3+4Rhqk= -----END CERTIFICATE-----Generated at Tue Oct 20 18:21:46 2026 by rpki-client