$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa File: fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa (raw, json) Hash identifier: SmBw2uwZ2RL+gQvTMgcPfqTeMtulaaHoTolqNCrYrpY= Subject key identifier: 01:06:0B:D8:08:3E:B9:35:72:3D:78:47:B7:88:02:74:5B:84:CA:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4DB07671C454C4BBEEE171 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 71.238.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:b0:76:71:c4:54:c4:bb:ee:e1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=dc126028-d60e-4b5c-9198-d1e846236a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:4e:99:ca:20:61:35:71:d9:81:ab:14:17: 32:44:70:ca:b7:c9:3f:6d:ce:1c:90:b3:cf:c6:2e: 74:3d:71:fd:e5:ed:fb:28:90:ec:e2:84:65:71:05: fc:e7:be:f3:b8:ac:39:6e:f6:cb:32:bb:49:42:78: 2e:dd:ea:6e:d8:51:45:f6:fc:95:e5:fa:12:52:e3: 40:59:0a:5c:f4:97:2a:52:c1:55:2f:7b:1f:be:76: 0a:89:6b:51:e4:5e:55:bd:35:d2:68:8d:2a:f1:e5: b0:22:67:be:25:b0:ee:86:5a:91:ca:0a:42:bb:53: e8:07:a7:9e:37:61:dd:66:b7:2f:71:50:86:de:ee: 99:3a:6f:66:d2:fd:ac:6a:07:0e:04:7b:bc:f7:01: c3:7d:19:bc:6e:92:f0:14:a4:6a:6f:ba:9d:75:aa: cb:02:75:b3:15:fc:f3:09:25:96:56:59:6b:04:56: 84:2a:33:f9:68:df:dd:2b:7b:dd:e6:1b:14:d8:3f: 72:45:06:67:5d:dc:b7:07:65:50:8f:8b:1a:2e:e1: 5b:be:d2:0f:bf:1e:43:bb:db:e2:a2:dd:ad:96:10: 70:9f:7e:60:ff:a5:1e:d2:1f:55:aa:5f:29:ad:2b: b1:d8:6e:90:2a:10:17:7d:d8:b4:81:1e:4f:d4:25: 76:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:06:0B:D8:08:3E:B9:35:72:3D:78:47:B7:88:02:74:5B:84:CA:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fabe0065-f4a4-37b6-a75a-2a96054d8c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:80:77:f7:f9:e4:75:c0:0b:05:57:e2:52:4c:30:17:5f:e1: 09:d1:55:f1:a6:0e:04:18:e9:4a:be:5a:61:58:43:6d:75:ac: b4:21:0f:a9:16:ee:02:bf:96:83:8a:ff:10:c9:ef:1c:47:6f: 91:af:93:b9:14:31:f5:a2:17:e6:35:cb:ea:b4:71:64:ea:72: 4f:6d:22:ad:31:a2:a6:5c:66:74:4e:2a:b3:8f:8e:7a:a6:9a: 83:e2:c2:2f:28:8e:16:4f:32:42:56:f3:8f:29:52:fd:ad:29: cd:0e:8a:2a:3d:97:c9:55:81:b0:99:d4:68:7a:be:01:3d:b7: 67:6d:e0:e7:55:01:a1:35:57:2c:72:06:8e:80:91:cf:2e:19: c2:bc:66:18:ae:fe:f6:29:90:04:26:3b:76:0f:d5:95:e1:f5: af:25:9f:b7:a0:09:24:fb:28:9b:7d:22:e2:13:1f:92:df:f4: 10:7b:30:c0:c1:af:b3:be:4b:90:2f:1b:3c:a4:d3:69:7a:a5: 3e:43:71:4b:14:57:de:e3:6e:00:1e:6e:48:f6:45:96:30:b6: 7d:89:b6:2a:63:e2:7d:26:9a:be:55:98:7b:3f:cb:a4:26:bf: cb:4b:be:b8:a1:df:fa:13:5f:f3:e8:19:06:ec:84:81:54:a4: f2:8e:44:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TbB2ccRUxLvu4XEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZGMxMjYwMjgtZDYwZS00YjVjLTkxOTgtZDFlODQ2MjM2YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo59OmcogYTVx2YGrFBcyRHDKt8k/bc4ckLPP xi50PXH95e37KJDs4oRlcQX8577zuKw5bvbLMrtJQngu3epu2FFF9vyV5foSUuNA WQpc9JcqUsFVL3sfvnYKiWtR5F5VvTXSaI0q8eWwIme+JbDuhlqRygpCu1PoB6ee N2HdZrcvcVCG3u6ZOm9m0v2sagcOBHu89wHDfRm8bpLwFKRqb7qddarLAnWzFfzz CSWWVllrBFaEKjP5aN/dK3vd5hsU2D9yRQZnXdy3B2VQj4saLuFbvtIPvx5Du9vi ot2tlhBwn35g/6Ue0h9Vql8prSux2G6QKhAXfdi0gR5P1CV2AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEGC9gIPrk1cj14R7eIAnRbhMozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmFiZTAwNjUtZjRhNC0z N2I2LWE3NWEtMmE5NjA1NGQ4Yzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+4iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyAd/f55HXACwVX4lJMMBdf4QnRVfGmDgQY6Uq+WmFYQ211rLQhD6kW 7gK/loOK/xDJ7xxHb5Gvk7kUMfWiF+Y1y+q0cWTqck9tIq0xoqZcZnROKrOPjnqm moPiwi8ojhZPMkJW848pUv2tKc0Oiio9l8lVgbCZ1Gh6vgE9t2dt4OdVAaE1Vyxy Bo6Akc8uGcK8Zhiu/vYpkAQmO3YP1ZXh9a8ln7egCST7KJt9IuITH5Lf9BB7MMDB r7O+S5AvGzyk02l6pT5DcUsUV97jbgAebkj2RZYwtn2Jtipj4n0mmr5VmHs/y6Qm v8tLvrih3/oTX/PoGQbshIFUpPKORHI= -----END CERTIFICATE-----Generated at Tue Oct 20 20:38:03 2026 by rpki-client