$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa File: fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa (raw, json) Hash identifier: Dw4a7XUCkvEbOv5dYxPdmPvR36/QCrglq8LgzIB4nII= Subject key identifier: 8B:63:74:52:F8:C1:0F:F1:3E:ED:51:60:85:83:4C:D5:82:52:B6:3B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED86200F5998D6D83266E0E60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 71.238.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:00:f5:99:8d:6d:83:26:6e:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=4e11a326-6e64-477e-9cbf-01655d6a2610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fc:d6:b1:1c:aa:bd:b1:79:3c:17:04:22:a2: 31:41:30:83:38:82:fe:ed:f7:8c:11:f6:b5:46:69: bb:5d:b6:54:ef:40:4b:19:7e:69:48:44:98:b3:3e: 98:46:6e:19:18:0b:fa:d0:7f:de:fa:e1:0c:ad:42: bf:5a:cf:7f:f2:51:73:b0:c5:16:22:ef:23:08:dd: 79:5e:ac:94:f5:b4:f4:6e:4e:13:cd:cb:51:d2:a1: 9e:e1:1b:89:27:1e:73:fa:f9:55:18:a7:a2:69:cf: 70:0c:42:19:ca:49:f1:fc:f7:59:30:9b:2d:49:bf: c0:0f:ae:93:cc:e3:6a:48:b5:a5:26:48:5e:ad:7e: 84:c0:68:59:9d:8a:91:f1:aa:ad:dd:e0:96:cb:1b: e3:92:e9:45:20:85:96:65:db:f2:2e:30:1b:a9:d4: 42:85:71:75:00:9d:5d:48:15:da:0b:7c:46:8f:cd: 6b:fe:46:f5:ab:ad:01:01:1a:14:63:db:e1:6c:42: 39:ef:72:1e:a0:50:14:95:e5:7c:7f:88:9b:79:c1: 57:44:b9:00:ed:78:80:6d:44:b6:53:2c:5a:f5:6c: 6d:4e:1b:da:a5:a4:2c:84:b2:be:d3:ae:42:7a:1a: 52:48:a4:fc:65:bc:e0:5a:75:7a:14:4a:22:30:98: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:63:74:52:F8:C1:0F:F1:3E:ED:51:60:85:83:4C:D5:82:52:B6:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:51:44:57:1f:02:04:03:af:4f:76:fa:05:3f:ef:67:20:3a: 43:89:63:c3:28:cd:e2:4a:cd:37:57:8f:82:f1:88:9f:49:58: ac:51:50:bf:88:e2:b2:c9:9a:f2:db:c6:2b:2c:15:50:b3:04: 2b:0c:9d:c7:8b:e5:d2:dc:4a:00:73:e0:41:73:f9:dc:03:13: d5:de:6d:f4:df:97:46:00:98:b0:87:22:d3:e0:09:ff:34:88: 9a:4c:58:ad:22:b0:46:dc:c5:a4:a7:36:34:f1:a0:d1:7b:46: d9:20:b2:28:cf:4d:ea:11:07:a1:59:72:51:b3:c6:4a:5f:d3: 9b:ec:96:e0:57:12:e7:b2:3c:6c:22:f8:0e:05:a1:e8:ff:d5: d0:bd:09:42:32:d1:5b:2e:c2:91:0a:be:9e:2c:cd:2a:4a:cf: 76:fa:f1:ba:15:2b:27:0e:c7:ae:6c:2b:81:0a:94:c9:17:a1: 31:a5:d2:55:16:9c:11:d9:f1:4d:ce:e3:2a:f0:ed:7a:5c:0e: 3f:d3:d1:7d:6d:70:e5:64:eb:1e:84:60:94:5c:4a:97:88:05: 8b:1b:4c:74:fd:26:50:a9:f2:73:6d:bf:9b:be:a2:08:ef:2b: 21:fb:1c:7c:44:60:74:62:d1:2f:9c:0b:70:29:64:97:d0:f4: 60:24:31:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYgD1mY1tgyZuDmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NGUxMWEzMjYtNmU2NC00NzdlLTljYmYtMDE2NTVkNmEyNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfzWsRyqvbF5PBcEIqIxQTCDOIL+7feMEfa1 Rmm7XbZU70BLGX5pSESYsz6YRm4ZGAv60H/e+uEMrUK/Ws9/8lFzsMUWIu8jCN15 XqyU9bT0bk4TzctR0qGe4RuJJx5z+vlVGKeiac9wDEIZyknx/PdZMJstSb/AD66T zONqSLWlJkherX6EwGhZnYqR8aqt3eCWyxvjkulFIIWWZdvyLjAbqdRChXF1AJ1d SBXaC3xGj81r/kb1q60BARoUY9vhbEI573IeoFAUleV8f4ibecFXRLkA7XiAbUS2 Uyxa9WxtThvapaQshLK+065CehpSSKT8ZbzgWnV6FEoiMJi+UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItjdFL4wQ/xPu1RYIWDTNWCUrY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmFiZTAwNjUtZjRhNC0z N2I2LWE3NWEtMmE5NjA1NGQ4Yzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+4iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRRRFcfAgQDr092+gU/72cgOkOJY8MozeJKzTdXj4LxiJ9JWKxRUL+I 4rLJmvLbxissFVCzBCsMnceL5dLcSgBz4EFz+dwDE9XebfTfl0YAmLCHItPgCf80 iJpMWK0isEbcxaSnNjTxoNF7RtkgsijPTeoRB6FZclGzxkpf05vsluBXEueyPGwi +A4Foej/1dC9CUIy0VsuwpEKvp4szSpKz3b68boVKycOx65sK4EKlMkXoTGl0lUW nBHZ8U3O4yrw7XpcDj/T0X1tcOVk6x6EYJRcSpeIBYsbTHT9JlCp8nNtv5u+ogjv KyH7HHxEYHRi0S+cC3ApZJfQ9GAkMZk= -----END CERTIFICATE-----Generated at Sat Sep 5 08:50:47 2026 by rpki-client