$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7643a165-1687-3f89-b405-a2362bc81899.roa File: 7643a165-1687-3f89-b405-a2362bc81899.roa (raw, json) Hash identifier: dCoicmoop4eK5iDaYU+ivKf4Pv4OKOZIgSX/euAXZgg= Subject key identifier: D6:4F:CE:15:34:17:13:DF:D8:09:59:BD:4F:F4:10:EC:E0:88:14:BA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D797304DD03FBEB83B380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7643a165-1687-3f89-b405-a2362bc81899.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 71.230.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:79:73:04:dd:03:fb:eb:83:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=8dae809f-4d7b-473b-8b12-2294b62a6fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:29:3c:0e:51:ed:1a:13:cf:82:91:10:33: 60:0a:bf:5d:f5:5b:53:5e:18:7e:4e:6d:8b:ef:94: 57:f9:fb:20:9f:9d:3c:bf:85:ed:72:2b:c7:68:cb: f8:49:0b:c8:98:dc:52:22:3a:d9:02:26:9a:3a:f3: 0c:07:66:78:46:f8:b8:39:e8:00:b8:1d:e6:87:01: a5:5c:21:db:c7:5d:c2:e5:c5:20:01:24:4e:16:a6: 0f:b4:9b:92:b9:19:5f:f6:88:fc:a6:c5:98:91:c5: 83:64:3a:89:06:a3:1e:87:02:1f:a1:98:38:07:51: e6:ed:60:d8:ad:c5:1f:ff:50:59:cc:d6:2c:65:bc: f0:eb:3f:c6:1a:ae:b5:5b:3a:26:c8:2d:91:1a:3b: 53:b2:49:fd:d4:75:d2:2d:e6:f3:f8:30:a0:f1:ee: 00:d4:fd:a9:63:a8:0d:ee:05:97:5b:d4:77:e8:78: 5f:b9:33:e9:ef:34:b1:ca:9c:ac:dd:da:e9:af:ac: 89:52:65:6f:3d:bb:81:10:1a:dd:a4:6f:00:e0:c6: 03:f9:86:8c:50:f0:ab:6b:75:8a:5a:3e:ac:56:dd: 05:58:a0:2d:95:27:9d:01:f2:7a:6a:86:26:08:03: 8d:42:82:86:d2:19:86:75:e7:eb:b2:a7:cb:96:aa: a4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4F:CE:15:34:17:13:DF:D8:09:59:BD:4F:F4:10:EC:E0:88:14:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7643a165-1687-3f89-b405-a2362bc81899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.230.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0a:d4:1f:a9:8a:b2:ba:6e:29:ec:39:73:62:f4:64:45:54: 50:08:14:8c:0a:0b:79:d9:b4:02:0c:da:f1:e1:52:0c:8a:20: 51:e8:44:b1:50:01:d9:4a:c6:e6:8a:d5:20:f4:a5:44:13:1b: 5b:03:b9:f9:5e:3f:3b:3f:09:df:06:6a:79:1e:88:bd:e3:b7: 19:50:ee:4a:c8:63:16:bc:7d:fe:b8:87:b2:9c:e7:22:a8:dd: 1b:e0:da:66:26:61:46:ae:9b:e8:95:bc:97:cd:96:d1:00:67: a1:a0:64:6b:49:01:fb:0f:6f:c6:87:6f:cf:af:f7:3e:bd:1a: 15:31:a5:c1:3b:c7:5a:b9:61:d9:b2:f7:3d:ab:f7:ce:d3:f9: fb:ae:5c:bf:2c:74:50:07:f6:e5:96:73:d5:9e:62:56:26:c9: 06:0a:06:81:cf:da:72:fb:6d:be:0b:c9:16:07:82:a5:38:c2: 1c:5f:b3:ed:0d:f2:42:7e:9d:51:b3:8c:69:4d:1a:e2:c0:3b: 88:ef:ad:cb:9a:68:98:f6:6d:29:e1:6f:24:e4:39:27:89:25: b8:1f:45:42:84:2e:23:ca:54:56:ac:89:67:00:21:15:82:0b: 5a:7d:4c:c8:ce:b0:6e:fa:b6:54:9f:db:40:97:be:54:72:54: 8f:fa:71:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnXlzBN0D++uDs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OGRhZTgwOWYtNGQ3Yi00NzNiLThiMTItMjI5NGI2MmE2ZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGIpPA5R7RoTz4KREDNgCr9d9VtTXhh+Tm2L 75RX+fsgn508v4XtcivHaMv4SQvImNxSIjrZAiaaOvMMB2Z4Rvi4OegAuB3mhwGl XCHbx13C5cUgASROFqYPtJuSuRlf9oj8psWYkcWDZDqJBqMehwIfoZg4B1Hm7WDY rcUf/1BZzNYsZbzw6z/GGq61WzomyC2RGjtTskn91HXSLebz+DCg8e4A1P2pY6gN 7gWXW9R36HhfuTPp7zSxypys3drpr6yJUmVvPbuBEBrdpG8A4MYD+YaMUPCra3WK Wj6sVt0FWKAtlSedAfJ6aoYmCAONQoKG0hmGdefrsqfLlqqkpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZPzhU0FxPf2AlZvU/0EOzgiBS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzY0M2ExNjUtMTY4Ny0z Zjg5LWI0MDUtYTIzNjJiYzgxODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+ZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEK1B+pirK6binsOXNi9GRFVFAIFIwKC3nZtAIM2vHhUgyKIFHoRLFQ AdlKxuaK1SD0pUQTG1sDuflePzs/Cd8GankeiL3jtxlQ7krIYxa8ff64h7Kc5yKo 3Rvg2mYmYUaum+iVvJfNltEAZ6GgZGtJAfsPb8aHb8+v9z69GhUxpcE7x1q5Ydmy 9z2r987T+fuuXL8sdFAH9uWWc9WeYlYmyQYKBoHP2nL7bb4LyRYHgqU4whxfs+0N 8kJ+nVGzjGlNGuLAO4jvrcuaaJj2bSnhbyTkOSeJJbgfRUKELiPKVFasiWcAIRWC C1p9TMjOsG76tlSf20CXvlRyVI/6cfs= -----END CERTIFICATE-----Generated at Sat Sep 26 04:33:38 2026 by rpki-client