$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2375f78f-7aed-3099-b705-679baa994820.roa File: 2375f78f-7aed-3099-b705-679baa994820.roa (raw, json) Hash identifier: oS1DGHiGV1fRy5/+98WOjj2jkcIcDUsyDn77yaC5RxM= Subject key identifier: A9:94:3C:55:E7:7A:47:52:92:14:BB:DE:41:03:A9:C9:FC:83:D6:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EDA18262791D9736C7960 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2375f78f-7aed-3099-b705-679baa994820.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 71.230.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:da:18:26:27:91:d9:73:6c:79:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c8bb1513-bf42-4944-85c1-47f22e7169a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:4f:bd:e5:99:c8:d5:07:1c:c5:b9:2d:7e: e0:6a:e6:8d:3b:39:49:3d:2d:b8:ea:f3:50:64:42: 4e:64:37:71:b6:71:4c:f5:c1:da:b4:c8:57:46:5d: 85:b1:37:8c:7a:46:5d:71:3a:0f:c1:d0:4b:e4:9b: 85:dd:a8:28:a3:c3:03:cc:43:c6:08:4a:70:92:da: b0:48:ae:bb:a9:b2:96:f5:8f:6c:12:72:fc:d9:76: 4a:22:7b:12:85:5b:3d:83:c7:81:9c:09:8c:bd:85: 99:87:41:8b:1d:19:00:ad:81:b1:f2:03:e5:c4:61: eb:7e:68:51:c4:b2:fd:62:39:7f:0d:a8:99:1d:14: bc:7a:35:c5:d2:b9:be:12:2f:9c:4d:50:55:63:3e: b2:c4:44:35:eb:7f:20:06:79:e9:f6:26:f1:b0:68: ee:ad:b6:b5:9c:32:52:4c:2c:fc:52:48:db:81:bc: e6:c3:e3:b7:ba:4c:28:fe:72:28:07:56:bd:a5:4f: b3:53:d3:a9:92:11:86:dc:a1:89:89:8b:fa:e6:98: ee:3b:c7:94:c1:24:5b:a6:b1:a9:36:ea:f8:f6:87: 55:3d:85:5c:0f:19:39:27:b3:a0:a1:3a:49:5f:25: a9:7a:3d:8e:d7:46:24:56:bc:3f:16:a6:79:ab:72: e5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:94:3C:55:E7:7A:47:52:92:14:BB:DE:41:03:A9:C9:FC:83:D6:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2375f78f-7aed-3099-b705-679baa994820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.230.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:03:7e:bd:50:70:3b:1d:bc:9f:a1:98:0c:54:62:c4:77:d2: c4:5c:52:01:cf:e8:96:88:ab:7d:47:cb:55:30:cc:30:d5:a9: d9:b4:2a:b6:9b:5d:0a:79:d9:39:06:f5:40:ef:18:7e:e1:bf: ff:30:d2:68:20:ec:3b:e0:0f:ad:26:33:d9:a2:01:81:94:10: 66:5d:41:6a:5b:6e:8e:12:6d:f3:a5:f8:40:96:ed:c1:cb:8e: 7f:ec:04:93:6d:eb:70:84:3d:ce:ea:45:ed:96:d6:98:38:e4: da:74:1a:4b:c0:81:d2:0b:11:35:ed:b1:11:80:b2:47:48:15: cf:86:09:fc:0a:ed:0f:66:ae:f0:a8:3d:ac:85:18:c1:9d:87: 67:53:9a:fa:b6:5f:45:78:f0:1a:f3:08:01:76:b0:2b:de:c5: a5:76:bd:54:a0:98:69:24:c9:ce:05:00:c6:eb:73:54:1a:c2: ce:ee:6b:b1:23:c1:8b:56:f3:25:05:4a:31:c1:bb:fc:97:b4: e9:49:cf:fe:52:84:ef:dc:14:00:72:df:52:5e:91:6a:95:bc: 4a:40:38:0d:f5:79:c5:46:a7:63:36:d9:7f:00:a6:9f:90:cd: 15:df:e8:c8:48:be:ca:c2:01:63:fe:5b:f2:33:0b:ff:52:e0: 35:85:5a:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RntoYJieR2XNseWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzhiYjE1MTMtYmY0Mi00OTQ0LTg1YzEtNDdmMjJlNzE2OWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5ZPveWZyNUHHMW5LX7gauaNOzlJPS246vNQ ZEJOZDdxtnFM9cHatMhXRl2FsTeMekZdcToPwdBL5JuF3agoo8MDzEPGCEpwktqw SK67qbKW9Y9sEnL82XZKInsShVs9g8eBnAmMvYWZh0GLHRkArYGx8gPlxGHrfmhR xLL9Yjl/DaiZHRS8ejXF0rm+Ei+cTVBVYz6yxEQ1638gBnnp9ibxsGjurba1nDJS TCz8Ukjbgbzmw+O3ukwo/nIoB1a9pU+zU9OpkhGG3KGJiYv65pjuO8eUwSRbprGp Nur49odVPYVcDxk5J7OgoTpJXyWpej2O10YkVrw/FqZ5q3LloQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmUPFXnekdSkhS73kEDqcn8g9ZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjM3NWY3OGYtN2FlZC0z MDk5LWI3MDUtNjc5YmFhOTk0ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+a6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8Dfr1QcDsdvJ+hmAxUYsR30sRcUgHP6JaIq31Hy1UwzDDVqdm0Krab XQp52TkG9UDvGH7hv/8w0mgg7DvgD60mM9miAYGUEGZdQWpbbo4SbfOl+ECW7cHL jn/sBJNt63CEPc7qRe2W1pg45Np0GkvAgdILETXtsRGAskdIFc+GCfwK7Q9mrvCo PayFGMGdh2dTmvq2X0V48BrzCAF2sCvexaV2vVSgmGkkyc4FAMbrc1Qaws7ua7Ej wYtW8yUFSjHBu/yXtOlJz/5ShO/cFABy31JekWqVvEpAOA31ecVGp2M22X8App+Q zRXf6MhIvsrCAWP+W/IzC/9S4DWFWp8= -----END CERTIFICATE-----Generated at Sat Sep 26 07:33:58 2026 by rpki-client