$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2492ea35-e28c-3a54-98c3-0f69d2ddd56a.roa File: 2492ea35-e28c-3a54-98c3-0f69d2ddd56a.roa (raw, json) Hash identifier: molJbonN2ETHOX5UJjkofrMGPqh1DiTi/CE9DCmhUL4= Subject key identifier: 51:25:0A:61:7B:3D:DA:7C:FA:D2:72:E1:E8:AE:32:AD:FB:D6:7E:8A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584FB3A9DBAD5C679A5C078C6C2C Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2492ea35-e28c-3a54-98c3-0f69d2ddd56a.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 33651 IP address blocks: 71.198.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a9:db:ad:5c:67:9a:5c:07:8c:6c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=516924cd-41af-4cd1-93f1-3aafa45618f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:45:cb:71:a7:11:bd:21:f3:84:b7:de:79:f2: 42:f9:46:61:91:ae:b6:22:65:49:39:27:c4:6e:ca: 41:2a:b4:6b:8e:8d:49:d0:eb:7c:13:d4:3b:44:5b: b7:a5:2b:fc:05:2b:8b:ec:e4:71:a7:4a:db:8a:a0: 8a:85:86:e3:89:e5:48:c0:bc:05:ba:4a:6a:b7:61: f2:18:76:90:69:d3:cb:03:28:ef:83:bb:2e:dd:98: da:8d:c6:1b:99:22:3e:40:83:87:ba:7d:b5:d6:9c: 7f:2a:69:b6:65:09:ac:21:53:c2:a3:0b:05:44:56: eb:66:d5:e4:cf:15:85:26:0c:1b:e5:1f:d3:13:30: 78:df:30:cf:29:f8:45:f1:15:e0:47:6c:12:c4:4a: 08:cd:1b:62:02:21:b0:da:c2:95:ba:4d:dd:ff:d5: 1d:46:88:40:b7:bc:a6:00:45:25:d6:70:a7:db:58: 2f:9d:3c:f2:1a:68:c0:9c:a0:fb:bb:b2:36:0b:62: 04:07:66:a6:25:49:af:40:3c:2d:41:b4:e2:84:1e: 51:d5:bc:f8:5f:be:98:6f:ed:6d:38:15:95:55:5f: cf:cf:21:8e:93:14:34:35:55:e2:ec:64:8e:bd:47: 13:cc:76:e3:42:6f:6b:2a:27:d0:ad:c4:04:5f:0a: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:25:0A:61:7B:3D:DA:7C:FA:D2:72:E1:E8:AE:32:AD:FB:D6:7E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2492ea35-e28c-3a54-98c3-0f69d2ddd56a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:8d:05:63:82:bb:84:33:66:db:c1:13:92:a0:5a:9b:de:eb: e2:1f:db:2f:02:46:7b:23:38:ad:63:ec:d1:e2:86:9d:26:51: 4f:df:30:f1:8e:41:7d:5f:5c:87:1b:48:c4:e5:c1:9d:8d:58: eb:13:81:ed:11:80:c1:d5:f5:3a:c0:7e:1c:f6:a8:a2:6d:ab: 37:18:ae:69:5c:8f:00:ac:dc:92:61:5b:dd:7f:2a:2b:ad:24: 60:d5:24:16:8c:fa:2a:e7:84:5a:09:b7:64:5f:18:63:aa:9d: af:47:37:81:94:cc:05:c1:a7:6c:44:09:a7:09:92:1b:4b:db: 23:31:96:6b:f2:46:73:9c:d6:95:db:d4:94:71:a3:16:bc:f9: a3:4b:51:90:e0:42:62:ff:5b:4d:b1:df:2e:03:4d:14:53:2f: 54:63:7c:88:a5:24:f0:a1:c6:be:52:c7:09:43:8c:a3:18:56: 2c:f1:44:5d:31:d2:60:ed:fb:7a:40:ae:bf:a3:03:9d:b4:1c: 43:b9:97:98:ba:77:4a:c7:5d:89:16:0c:6e:2c:64:ef:16:b2: fc:92:07:95:51:61:6c:7b:9a:d0:bc:51:85:1d:ef:fe:a2:63: d6:df:72:e5:a5:95:cf:d4:6f:99:93:c5:a9:84:33:fb:a4:b5: 1a:09:ff:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zqdutXGeaXAeMbCwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk NTE2OTI0Y2QtNDFhZi00Y2QxLTkzZjEtM2FhZmE0NTYxOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEXLcacRvSHzhLfeefJC+UZhka62ImVJOSfE bspBKrRrjo1J0Ot8E9Q7RFu3pSv8BSuL7ORxp0rbiqCKhYbjieVIwLwFukpqt2Hy GHaQadPLAyjvg7su3ZjajcYbmSI+QIOHun211px/Kmm2ZQmsIVPCowsFRFbrZtXk zxWFJgwb5R/TEzB43zDPKfhF8RXgR2wSxEoIzRtiAiGw2sKVuk3d/9UdRohAt7ym AEUl1nCn21gvnTzyGmjAnKD7u7I2C2IEB2amJUmvQDwtQbTihB5R1bz4X76Yb+1t OBWVVV/PzyGOkxQ0NVXi7GSOvUcTzHbjQm9rKifQrcQEXwq0dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFElCmF7Pdp8+tJy4eiuMq371n6KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQ5MmVhMzUtZTI4Yy0z YTU0LTk4YzMtMGY2OWQyZGRkNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8Y0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACONBWOCu4QzZtvBE5KgWpve6+If2y8CRnsjOK1j7NHihp0mUU/fMPGO QX1fXIcbSMTlwZ2NWOsTge0RgMHV9TrAfhz2qKJtqzcYrmlcjwCs3JJhW91/Kiut JGDVJBaM+irnhFoJt2RfGGOqna9HN4GUzAXBp2xECacJkhtL2yMxlmvyRnOc1pXb 1JRxoxa8+aNLUZDgQmL/W02x3y4DTRRTL1RjfIilJPChxr5SxwlDjKMYVizxRF0x 0mDt+3pArr+jA520HEO5l5i6d0rHXYkWDG4sZO8WsvySB5VRYWx7mtC8UYUd7/6i Y9bfcuWllc/Ub5mTxamEM/uktRoJ//Q= -----END CERTIFICATE-----Generated at Sun Nov 15 21:21:07 2026 by rpki-client