$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/2731d2f0-9541-3aab-bdf8-127310be17f3.roa File: 2731d2f0-9541-3aab-bdf8-127310be17f3.roa (raw, json) Hash identifier: pDirUArNG3x6JiJNfiniKcQLExNcR1q+CpRDqldew2Y= Subject key identifier: 0C:A9:E3:53:EB:16:78:FD:EE:E5:C7:25:55:77:AE:98:81:04:DE:E3 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584F2957BC60295BB7EA46F95A2C Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/2731d2f0-9541-3aab-bdf8-127310be17f3.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 6621 IP address blocks: 67.44.48.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:bc:60:29:5b:b7:ea:46:f9:5a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=71eb4bd1-c23b-4a3b-aae0-693878f88704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:84:1a:74:87:d7:dd:d5:3f:f3:ed:e8:4e:ec: 2c:61:d9:3b:a0:be:5b:49:59:d8:65:c8:d1:81:69: b4:1f:07:ba:7a:90:bb:74:c9:85:f5:fe:a5:20:9d: fc:68:0b:4c:ae:14:a1:e7:3a:37:14:53:bf:4a:39: eb:e8:ec:2f:64:52:93:96:ba:0c:64:62:a1:5e:6c: 72:e0:3c:e5:81:94:6b:c0:d2:70:b3:02:a6:b6:2c: 6d:94:08:19:16:73:57:28:26:23:71:87:e7:16:6d: 36:7c:bb:67:63:8d:21:53:54:43:64:6f:52:82:d4: 11:52:55:52:b6:20:55:ab:a0:1c:0e:62:6c:eb:7a: 57:11:45:87:d3:2d:31:05:db:0c:e0:7d:8c:a7:b0: 82:d8:0e:51:5b:63:f3:d4:42:ae:03:2d:27:55:07: f1:be:5e:65:94:44:40:f6:51:1f:49:ae:e5:2e:58: 7c:22:2c:1e:4f:ba:0d:4d:fa:50:70:14:2a:87:36: ac:08:eb:5b:63:1c:d9:35:46:8e:58:83:33:df:c2: f0:e7:53:55:e1:52:a6:07:5c:86:ed:c0:7f:c0:fe: 44:38:b0:f3:5f:11:14:33:83:26:6e:9c:f8:2f:5c: 9c:d7:c1:be:21:f4:85:f9:41:fc:60:98:c0:5f:c4: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A9:E3:53:EB:16:78:FD:EE:E5:C7:25:55:77:AE:98:81:04:DE:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/2731d2f0-9541-3aab-bdf8-127310be17f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:4a:1b:90:4a:59:91:ba:c1:c9:7a:e1:1c:f4:e7:8c:c4:df: fe:d5:a0:da:c2:24:08:cb:a2:88:7b:46:27:ec:ec:c0:68:81: a5:57:db:1e:da:85:98:b3:24:e1:08:78:45:74:5e:dc:69:2d: e5:9e:96:91:1c:77:80:a6:4b:00:85:5c:e4:93:32:56:7c:db: 30:f5:ff:f9:f2:34:09:83:04:7b:bb:06:30:39:4b:65:2a:17: 2d:39:ed:8e:57:4e:87:0e:8c:23:22:ec:13:65:90:95:d5:21: a6:71:eb:ec:c5:da:b3:31:68:70:85:5f:85:61:ae:48:05:b0: 6b:d1:f9:c4:61:2f:27:eb:51:79:d8:23:8a:e9:48:b3:30:56: 78:be:8a:0d:06:93:6b:d9:43:14:20:7c:1e:fe:91:c5:17:e5: ba:7d:0a:d0:63:44:a4:06:19:ac:44:d5:2f:12:0e:c5:32:90: 8f:72:62:9f:6a:dc:29:0d:87:84:76:eb:96:34:64:6a:1d:bd: d2:dc:1e:8e:ae:7e:8d:a9:97:18:5f:b1:01:9c:00:e3:95:75: b4:d0:b0:95:f3:c0:73:7d:7a:53:ef:49:1d:e9:de:7d:98:d4: 7f:da:23:fa:fe:07:b8:8c:5e:67:1a:3c:d9:1d:b2:bd:f2:50: b6:cc:a0:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7xgKVu36kb5WiwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NzFlYjRiZDEtYzIzYi00YTNiLWFhZTAtNjkzODc4Zjg4NzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYQadIfX3dU/8+3oTuwsYdk7oL5bSVnYZcjR gWm0Hwe6epC7dMmF9f6lIJ38aAtMrhSh5zo3FFO/Sjnr6OwvZFKTlroMZGKhXmxy 4DzlgZRrwNJwswKmtixtlAgZFnNXKCYjcYfnFm02fLtnY40hU1RDZG9SgtQRUlVS tiBVq6AcDmJs63pXEUWH0y0xBdsM4H2Mp7CC2A5RW2Pz1EKuAy0nVQfxvl5llERA 9lEfSa7lLlh8IiweT7oNTfpQcBQqhzasCOtbYxzZNUaOWIMz38Lw51NV4VKmB1yG 7cB/wP5EOLDzXxEUM4Mmbpz4L1yc18G+IfSF+UH8YJjAX8T1mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyp41PrFnj97uXHJVV3rpiBBN7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMjczMWQyZjAtOTU0MS0z YWFiLWJkZjgtMTI3MzEwYmUxN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFKG5BKWZG6wcl64Rz054zE3/7VoNrCJAjLooh7Rifs7MBogaVX2x7a hZizJOEIeEV0XtxpLeWelpEcd4CmSwCFXOSTMlZ82zD1//nyNAmDBHu7BjA5S2Uq Fy057Y5XTocOjCMi7BNlkJXVIaZx6+zF2rMxaHCFX4VhrkgFsGvR+cRhLyfrUXnY I4rpSLMwVni+ig0Gk2vZQxQgfB7+kcUX5bp9CtBjRKQGGaxE1S8SDsUykI9yYp9q 3CkNh4R265Y0ZGodvdLcHo6ufo2plxhfsQGcAOOVdbTQsJXzwHN9elPvSR3p3n2Y 1H/aI/r+B7iMXmcaPNkdsr3yULbMoKQ= -----END CERTIFICATE-----Generated at Mon Sep 28 05:53:18 2026 by rpki-client