$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43a3b20d-f266-36a4-acd8-855a170d31a9.roa File: 43a3b20d-f266-36a4-acd8-855a170d31a9.roa (raw, json) Hash identifier: vyWaIOOqHB2ryQVPzSwu8G4OASH/6RzdKllqs2G/pfk= Subject key identifier: 90:BB:DB:69:89:73:3A:E6:0A:10:84:1C:3B:D0:72:5A:F9:E9:FC:36 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4982268CA3E74E2EC74BB8D8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43a3b20d-f266-36a4-acd8-855a170d31a9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 107.1.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:26:8c:a3:e7:4e:2e:c7:4b:b8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2413288c-c047-4603-9c39-e32c438f849c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:05:55:b0:57:8c:a7:32:84:d6:50:31:7a: 71:45:e6:b5:3b:c6:70:01:ea:50:e6:4f:2e:64:cc: e1:e1:f8:ff:a4:eb:bb:be:fa:29:17:eb:95:ef:c4: 4b:2b:4f:8b:56:15:55:62:47:4a:b9:5f:de:a5:76: 99:00:71:32:f1:1d:db:22:0e:46:28:2e:91:ec:1d: 31:ef:d8:e9:63:d3:e9:1d:f0:bb:18:38:f7:33:2c: f9:cd:83:ff:8d:84:d3:ef:5f:54:62:89:5d:c8:b0: 30:ca:c0:4e:e5:51:55:e7:5e:d8:b9:ef:a7:d6:ce: 3f:d9:36:ff:25:65:f3:d8:da:2b:e4:ab:72:e8:e0: 1d:f3:4d:f8:f5:5d:e0:41:6b:ff:78:e6:46:85:80: f0:53:e2:90:e1:8c:d9:ad:8d:78:88:7e:0c:71:5f: d7:91:99:6d:86:e1:08:8c:2a:32:1f:b1:56:4e:b2: c1:49:b5:f7:35:87:40:df:44:89:b8:f5:3e:6e:02: 97:a1:87:df:cc:ef:e7:a2:10:53:e4:04:53:bd:fe: 71:e5:cc:91:70:58:79:7f:a9:90:33:54:ac:d5:c3: 06:50:c8:04:f0:b4:7b:aa:3a:26:74:4d:5d:57:ea: b2:a1:0a:e2:83:d8:83:10:df:f7:d0:5e:5e:f4:f1: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BB:DB:69:89:73:3A:E6:0A:10:84:1C:3B:D0:72:5A:F9:E9:FC:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43a3b20d-f266-36a4-acd8-855a170d31a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.1.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:8f:bb:77:5e:38:b5:c6:9b:b2:0a:31:7a:5d:ca:f5:8b:cb: 87:29:4c:04:ce:e0:94:bb:cc:72:a7:93:3d:7c:f3:95:e9:9f: 08:4f:c1:de:c8:ae:ba:20:15:9e:88:5d:ac:3c:92:c2:59:43: 5e:7f:c1:cd:f5:19:7a:19:9f:da:96:6c:77:fb:4f:cd:0d:65: 7f:a9:14:3d:03:87:08:b1:5e:20:5d:88:3b:a9:83:67:7a:4b: 63:1f:e4:ad:81:6f:11:e1:86:6a:b7:0e:e9:23:7e:19:11:be: 48:90:2f:94:cf:10:58:c9:28:d4:b3:67:6e:95:be:58:9d:2d: de:1f:b5:56:bd:61:32:ad:e0:4d:84:ea:f5:e0:66:55:07:cc: cc:a3:17:da:6a:5e:32:6e:6b:2d:94:03:3f:c9:17:61:a4:bf: a2:1d:a5:5c:e0:a0:57:6f:56:b6:91:6c:4d:bf:d4:34:ab:f4: 20:7b:d0:34:a8:81:a3:50:41:cb:d5:11:55:6d:e8:a1:96:e1: 4d:3e:2f:ef:09:5e:88:16:99:8f:9e:0c:e1:01:f2:af:f5:8c: 13:6a:b3:b8:64:5d:0a:ab:02:80:e2:28:e0:14:5a:cd:5e:8a: 22:5b:48:d6:49:ce:1d:c6:c7:e4:55:d5:9b:e3:d6:a3:ab:d3: 8f:c8:ff:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgiaMo+dOLsdLuNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjQxMzI4OGMtYzA0Ny00NjAzLTljMzktZTMyYzQzOGY4NDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+oFVbBXjKcyhNZQMXpxRea1O8ZwAepQ5k8u ZMzh4fj/pOu7vvopF+uV78RLK0+LVhVVYkdKuV/epXaZAHEy8R3bIg5GKC6R7B0x 79jpY9PpHfC7GDj3Myz5zYP/jYTT719UYoldyLAwysBO5VFV517Yue+n1s4/2Tb/ JWXz2Nor5Kty6OAd80349V3gQWv/eOZGhYDwU+KQ4YzZrY14iH4McV/XkZlthuEI jCoyH7FWTrLBSbX3NYdA30SJuPU+bgKXoYffzO/nohBT5ARTvf5x5cyRcFh5f6mQ M1Ss1cMGUMgE8LR7qjomdE1dV+qyoQrig9iDEN/30F5e9PHf5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC722mJczrmChCEHDvQclr56fw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNhM2IyMGQtZjI2Ni0z NmE0LWFjZDgtODU1YTE3MGQzMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAawGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOPu3deOLXGm7IKMXpdyvWLy4cpTATO4JS7zHKnkz1885XpnwhPwd7I rrogFZ6IXaw8ksJZQ15/wc31GXoZn9qWbHf7T80NZX+pFD0DhwixXiBdiDupg2d6 S2Mf5K2BbxHhhmq3DukjfhkRvkiQL5TPEFjJKNSzZ26VvlidLd4ftVa9YTKt4E2E 6vXgZlUHzMyjF9pqXjJuay2UAz/JF2Gkv6IdpVzgoFdvVraRbE2/1DSr9CB70DSo gaNQQcvVEVVt6KGW4U0+L+8JXogWmY+eDOEB8q/1jBNqs7hkXQqrAoDiKOAUWs1e iiJbSNZJzh3Gx+RV1Zvj1qOr04/I/+w= -----END CERTIFICATE-----Generated at Sat Sep 26 08:36:50 2026 by rpki-client