$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7688609-61f0-3de3-b5d8-3be1d65e5b02.roa File: f7688609-61f0-3de3-b5d8-3be1d65e5b02.roa (raw, json) Hash identifier: Y+42DOPMPxC4Ttq5dX4/jsITNgqXJpLEOzR6Lxl3BPo= Subject key identifier: 4E:4B:5A:CF:17:F5:18:A7:12:99:32:29:D6:7F:C8:8F:92:F2:4B:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4DB03D038F2512FA8ED880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7688609-61f0-3de3-b5d8-3be1d65e5b02.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 71.238.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:b0:3d:03:8f:25:12:fa:8e:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=0dc94d2e-3b61-4f86-bc19-33efc960eb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:97:20:a9:bb:7c:e3:b0:d8:df:92:92:be: 88:99:8a:a7:df:14:bd:82:63:7c:de:4d:df:d3:a0: 34:cc:72:fe:0d:21:b4:6e:ee:6a:d0:08:5e:56:16: 73:af:9e:c4:13:7a:c4:dd:b1:41:52:a9:50:16:f4: b3:96:39:c5:a4:1e:7d:6f:20:c9:54:7f:d1:da:fd: bf:15:1e:48:cf:e7:f5:0e:cb:cc:3a:fa:9c:c7:49: 52:5b:cf:c2:14:d9:20:14:dc:99:cd:77:1d:a2:f9: 6c:1f:35:29:40:2f:cf:4b:7e:f1:34:64:bd:a3:ee: 83:62:4b:f6:cc:5d:ed:f9:b2:91:37:84:e2:1a:64: 16:06:81:98:92:5c:85:26:59:95:2d:a2:34:e2:35: 53:c8:1d:73:bb:65:c6:f3:29:d8:94:c6:a5:2e:8d: 51:cd:f2:2f:af:1a:75:62:77:1a:02:09:1e:ac:8a: 51:0b:bf:4d:95:7a:75:97:36:59:de:c5:ad:8e:bc: fb:a6:90:92:e2:00:e4:53:5a:cc:ed:02:02:a6:bf: cb:68:40:1b:e6:6f:3f:55:77:4a:6a:e7:fe:d7:8d: 22:77:ef:ce:f7:04:ff:f8:27:6a:1e:b5:37:ba:d9: 10:e5:18:d4:a2:73:d6:44:63:14:9b:4d:b8:cf:80: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4B:5A:CF:17:F5:18:A7:12:99:32:29:D6:7F:C8:8F:92:F2:4B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7688609-61f0-3de3-b5d8-3be1d65e5b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:75:50:03:76:7c:c9:11:db:fb:2b:8e:17:5f:46:40:57:6a: 49:7f:d1:3e:c4:16:7e:e4:03:87:4b:76:a4:26:2f:82:ef:b2: 22:5d:9f:92:a5:9f:22:92:c5:8c:8f:98:4e:34:66:f8:3a:a1: 2a:9c:24:0f:ec:33:ea:d3:e3:46:11:ea:6b:6d:34:23:d5:33: 37:8c:4e:fb:9d:99:c4:58:42:5f:45:78:4a:c5:4e:65:fe:6f: a3:2f:7b:b7:8a:c0:5b:03:d2:45:49:83:97:2c:c2:e5:23:ce: cb:9e:06:d4:cb:ac:07:0b:b2:b5:17:33:89:6c:37:76:43:f6: 45:a9:c0:9c:24:f3:b7:ca:f3:27:44:40:af:10:b5:cd:6d:66: 53:e2:36:ae:4d:34:6e:7e:08:80:19:2e:99:7f:43:04:dd:c7: 70:f9:75:c7:1d:a6:82:ef:82:43:b2:e7:81:5a:65:f3:d1:3e: c4:8b:9d:97:cf:2a:36:1a:36:f0:2a:30:bb:8f:8d:a7:f2:c8: 0f:37:54:ee:4b:0f:e0:68:35:12:03:43:18:64:c5:e3:88:01: dd:49:0b:3a:7b:2f:74:9d:e7:f6:28:f2:8e:4d:de:08:e9:67: 5b:85:71:f2:5b:b6:17:4a:87:ac:88:e9:b0:c8:54:50:0a:00: 81:0d:3a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TbA9A48lEvqO2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MGRjOTRkMmUtM2I2MS00Zjg2LWJjMTktMzNlZmM5NjBlYjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrWXIKm7fOOw2N+Skr6ImYqn3xS9gmN83k3f 06A0zHL+DSG0bu5q0AheVhZzr57EE3rE3bFBUqlQFvSzljnFpB59byDJVH/R2v2/ FR5Iz+f1DsvMOvqcx0lSW8/CFNkgFNyZzXcdovlsHzUpQC/PS37xNGS9o+6DYkv2 zF3t+bKRN4TiGmQWBoGYklyFJlmVLaI04jVTyB1zu2XG8ynYlMalLo1RzfIvrxp1 YncaAgkerIpRC79NlXp1lzZZ3sWtjrz7ppCS4gDkU1rM7QICpr/LaEAb5m8/VXdK auf+140id+/O9wT/+CdqHrU3utkQ5RjUonPWRGMUm024z4DUTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5LWs8X9RinEpkyKdZ/yI+S8kt0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjc2ODg2MDktNjFmMC0z ZGUzLWI1ZDgtM2JlMWQ2NWU1YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV1UAN2fMkR2/srjhdfRkBXakl/0T7EFn7kA4dLdqQmL4LvsiJdn5Kl nyKSxYyPmE40Zvg6oSqcJA/sM+rT40YR6mttNCPVMzeMTvudmcRYQl9FeErFTmX+ b6Mve7eKwFsD0kVJg5cswuUjzsueBtTLrAcLsrUXM4lsN3ZD9kWpwJwk87fK8ydE QK8Qtc1tZlPiNq5NNG5+CIAZLpl/QwTdx3D5dccdpoLvgkOy54FaZfPRPsSLnZfP KjYaNvAqMLuPjafyyA83VO5LD+BoNRIDQxhkxeOIAd1JCzp7L3Sd5/Yo8o5N3gjp Z1uFcfJbthdKh6yI6bDIVFAKAIENOgI= -----END CERTIFICATE-----Generated at Tue Oct 20 19:06:19 2026 by rpki-client