$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bc8bb86-05fb-31bd-b24b-163223f1f718.roa File: 1bc8bb86-05fb-31bd-b24b-163223f1f718.roa (raw, json) Hash identifier: ZAExjPx/XNX1FYtXdWcfUVf7P/N6dhFmQM56IDxCTWI= Subject key identifier: 06:E7:51:F4:B5:F2:9D:BF:9A:F6:6D:A0:D9:A9:2A:54:BC:65:06:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D79CB58C9DBD7E8E69480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bc8bb86-05fb-31bd-b24b-163223f1f718.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 71.230.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:79:cb:58:c9:db:d7:e8:e6:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=bde9a2c1-78c2-4e99-9f39-7fa2118ad770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:f0:64:17:59:7c:1b:e5:1e:70:21:60:79: 6c:4c:6f:d3:39:df:8a:07:d7:92:65:25:03:f0:82: c9:58:0b:27:71:51:43:09:cd:5d:7b:01:a4:54:78: a8:05:b7:84:43:fa:f1:b3:cb:62:cf:9c:c4:fd:96: ff:c9:e2:a3:69:34:0b:a8:73:ae:e8:4d:5e:d8:5a: 79:d7:23:d7:da:2a:ca:11:f1:5c:b0:66:2c:e8:82: 43:f4:cd:61:0c:e1:10:55:96:83:fd:8e:10:4c:6a: 85:b3:17:c3:6a:89:2b:5c:44:44:9b:f1:2b:d1:7d: ab:13:fe:b6:ca:94:f5:3c:6f:71:1a:a7:72:c0:45: 75:c0:dd:af:10:fb:0d:b7:c0:49:ff:d6:3c:b2:27: 2b:c9:3e:4e:dc:57:83:77:cf:d2:3e:c3:04:4d:8e: 6e:c2:22:92:aa:3f:ef:c0:88:ac:ef:02:32:38:10: e5:51:cb:51:c1:d0:2d:5f:f4:4f:16:27:f8:57:4c: 1d:55:c3:11:18:82:81:fe:fd:c1:78:5e:15:71:34: 71:86:b1:57:b8:88:e7:a2:19:d3:9e:a2:79:9c:55: 79:15:5b:f3:b3:06:18:07:39:ea:04:21:30:0c:d6: dd:ac:b7:a1:67:05:83:8a:6c:ac:d0:53:d4:46:13: a9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E7:51:F4:B5:F2:9D:BF:9A:F6:6D:A0:D9:A9:2A:54:BC:65:06:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bc8bb86-05fb-31bd-b24b-163223f1f718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.230.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:ea:ec:a6:9d:88:7e:fa:73:09:53:dd:4e:7f:aa:b8:1d:ee: 75:40:55:d2:42:89:a9:ff:91:ed:6e:f9:d9:26:3d:88:3d:09: 5f:67:06:4f:ae:15:b6:17:3a:14:3a:b0:97:fa:ce:ed:16:2b: 24:c1:73:17:d6:36:78:d4:98:30:6e:3b:5e:b9:38:31:26:2c: 9b:91:52:e0:b0:f5:32:39:65:30:cc:5a:9d:e0:fe:73:75:c2: 77:e9:ae:dd:bf:76:12:a8:1e:1b:75:e7:37:01:67:ce:7c:46: 87:fb:1b:e0:1d:fd:60:f3:c6:e1:43:4b:02:4a:ff:64:45:2c: 49:7d:1a:31:79:de:c7:f0:3e:5c:68:ef:fb:81:fd:0e:c2:c8: c5:e5:4e:4e:d7:ad:33:a5:2b:db:7c:37:37:f5:9c:2a:01:00: fa:c7:dc:13:06:07:92:22:8b:33:2f:0b:a3:30:54:35:f0:b5: ae:4d:64:82:8f:a5:43:2b:3f:f5:e0:4d:38:8d:d9:d7:62:2c: 54:a8:d5:3d:fc:6d:bf:52:c4:8a:96:af:9e:2d:08:fa:58:7e: f6:47:ef:da:0c:1f:e4:41:32:d1:2b:19:af:d5:61:fa:98:23: 84:4a:bb:4c:cf:f5:60:3e:e5:52:a7:08:c6:05:b5:78:6d:a4: 08:6b:47:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnXnLWMnb1+jmlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YmRlOWEyYzEtNzhjMi00ZTk5LTlmMzktN2ZhMjExOGFkNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRbwZBdZfBvlHnAhYHlsTG/TOd+KB9eSZSUD 8ILJWAsncVFDCc1dewGkVHioBbeEQ/rxs8tiz5zE/Zb/yeKjaTQLqHOu6E1e2Fp5 1yPX2irKEfFcsGYs6IJD9M1hDOEQVZaD/Y4QTGqFsxfDaokrXEREm/Er0X2rE/62 ypT1PG9xGqdywEV1wN2vEPsNt8BJ/9Y8sicryT5O3FeDd8/SPsMETY5uwiKSqj/v wIis7wIyOBDlUctRwdAtX/RPFif4V0wdVcMRGIKB/v3BeF4VcTRxhrFXuIjnohnT nqJ5nFV5FVvzswYYBznqBCEwDNbdrLehZwWDimys0FPURhOpmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbnUfS18p2/mvZtoNmpKlS8ZQb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWJjOGJiODYtMDVmYi0z MWJkLWIyNGItMTYzMjIzZjFmNzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+bAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMPq7KadiH76cwlT3U5/qrgd7nVAVdJCian/ke1u+dkmPYg9CV9nBk+u FbYXOhQ6sJf6zu0WKyTBcxfWNnjUmDBuO165ODEmLJuRUuCw9TI5ZTDMWp3g/nN1 wnfprt2/dhKoHht15zcBZ858Rof7G+Ad/WDzxuFDSwJK/2RFLEl9GjF53sfwPlxo 7/uB/Q7CyMXlTk7XrTOlK9t8Nzf1nCoBAPrH3BMGB5IiizMvC6MwVDXwta5NZIKP pUMrP/XgTTiN2ddiLFSo1T38bb9SxIqWr54tCPpYfvZH79oMH+RBMtErGa/VYfqY I4RKu0zP9WA+5VKnCMYFtXhtpAhrR60= -----END CERTIFICATE-----Generated at Sat Sep 26 03:53:14 2026 by rpki-client