$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/857385be-ccbc-33b9-b2eb-e90f08d50350.roa File: 857385be-ccbc-33b9-b2eb-e90f08d50350.roa (raw, json) Hash identifier: NhzGLTdnG1E0ruJ9hwYBn4S1hb60+321jv2E2lUo+dw= Subject key identifier: 31:81:7B:8E:39:5E:41:C8:CF:79:17:00:00:49:7A:DE:E7:B7:B6:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4980940CCA4EBB6B27D5E300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/857385be-ccbc-33b9-b2eb-e90f08d50350.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21508 IP address blocks: 71.57.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:94:0c:ca:4e:bb:6b:27:d5:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6006c6e0-26a2-4422-b168-460d0ea562c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a1:91:1a:4e:04:11:bc:ec:b5:fb:81:ec:f4: af:88:80:f2:30:da:b1:fe:60:fb:19:77:07:ca:2f: 8c:14:25:31:f5:d0:7c:2a:e9:4c:5d:ba:73:5d:62: 98:59:bd:90:db:1a:ae:e3:17:3f:a1:55:44:81:ac: 91:ac:30:73:80:dc:2e:3d:c1:a8:b1:da:ff:9b:a0: ca:8d:0b:c8:54:02:4e:22:98:bc:9f:bf:e5:ac:9b: f7:3a:33:ab:eb:8f:ab:f7:03:5b:42:19:60:7b:5c: 69:5d:7a:f2:bd:ac:29:ee:de:15:71:20:30:83:36: cc:7c:7d:d7:a6:68:76:89:10:b5:0d:8f:1a:97:2c: aa:a4:53:b2:4f:02:a7:a7:c5:d2:bb:28:62:2e:f0: b3:48:c5:7b:7e:04:18:1c:af:c8:30:64:07:ac:45: 53:02:57:c2:ca:23:fc:64:85:0c:d5:71:d2:13:af: ba:a3:e5:9c:4d:b0:c6:4f:f8:92:02:7b:88:e1:0e: f0:10:6f:11:23:27:2d:6e:f6:bf:84:cb:79:fd:b3: c5:be:fe:89:02:e0:e0:58:1b:7d:bb:86:9b:ce:32: a3:e6:77:8b:f8:9d:5f:f5:30:46:d1:e4:e1:07:7e: 44:ac:0a:89:c6:e8:b8:7c:5b:10:ff:63:ee:9d:69: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:81:7B:8E:39:5E:41:C8:CF:79:17:00:00:49:7A:DE:E7:B7:B6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/857385be-ccbc-33b9-b2eb-e90f08d50350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.57.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9c:c2:80:a5:05:de:8f:2b:a4:2f:b4:62:65:30:49:8a:ba: 55:d3:98:18:1f:ce:03:ac:14:6a:b2:5d:39:f6:f9:b9:b0:16: b5:e7:40:4b:12:47:01:5d:fc:93:5a:8b:9f:00:90:eb:f6:36: 54:d7:7e:08:95:df:ad:9b:12:25:dc:e5:81:17:a9:06:a4:b9: c3:a0:b2:7b:7e:58:2c:1b:08:32:c2:3e:79:e3:5f:31:53:57: 38:31:e2:02:b4:4d:6f:1f:db:58:b7:2b:27:07:f8:70:b6:2f: f2:d0:41:6b:c3:58:14:f0:1b:f7:07:86:49:b1:b8:b1:4e:24: fe:d7:d3:19:e4:9d:83:f1:f4:c6:0f:58:a1:e1:7d:2a:32:91: b9:68:b2:07:ed:3b:d2:cf:2a:91:53:48:93:dd:3d:13:49:d1: c9:eb:22:33:d2:9e:7e:a1:90:ff:9c:16:6a:04:c5:e2:1c:6a: f3:79:f1:c4:37:19:ab:d4:40:ca:2e:a2:4d:22:3e:96:bd:80: b7:e2:53:46:a4:66:19:f2:2a:b5:37:a5:b8:ac:1e:66:87:b1: 04:5b:12:ae:7f:8d:01:44:eb:a8:a9:12:6b:6f:ce:29:af:bc: 43:0e:9c:6b:40:c0:8d:80:58:21:57:fa:f9:04:c5:c7:91:0f: 57:e1:4a:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgJQMyk67ayfV4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjAwNmM2ZTAtMjZhMi00NDIyLWIxNjgtNDYwZDBlYTU2MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6GRGk4EEbzstfuB7PSviIDyMNqx/mD7GXcH yi+MFCUx9dB8KulMXbpzXWKYWb2Q2xqu4xc/oVVEgayRrDBzgNwuPcGosdr/m6DK jQvIVAJOIpi8n7/lrJv3OjOr64+r9wNbQhlge1xpXXryvawp7t4VcSAwgzbMfH3X pmh2iRC1DY8alyyqpFOyTwKnp8XSuyhiLvCzSMV7fgQYHK/IMGQHrEVTAlfCyiP8 ZIUM1XHSE6+6o+WcTbDGT/iSAnuI4Q7wEG8RIyctbva/hMt5/bPFvv6JAuDgWBt9 u4abzjKj5neL+J1f9TBG0eThB35ErAqJxui4fFsQ/2PunWlmUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGBe445XkHIz3kXAABJet7nt7b4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU3Mzg1YmUtY2NiYy0z M2I5LWIyZWItZTkwZjA4ZDUwMzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRznAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEacwoClBd6PK6QvtGJlMEmKulXTmBgfzgOsFGqyXTn2+bmwFrXnQEsS RwFd/JNai58AkOv2NlTXfgiV362bEiXc5YEXqQakucOgsnt+WCwbCDLCPnnjXzFT Vzgx4gK0TW8f21i3KycH+HC2L/LQQWvDWBTwG/cHhkmxuLFOJP7X0xnknYPx9MYP WKHhfSoykblosgftO9LPKpFTSJPdPRNJ0cnrIjPSnn6hkP+cFmoExeIcavN58cQ3 GavUQMouok0iPpa9gLfiU0akZhnyKrU3pbisHmaHsQRbEq5/jQFE66ipEmtvzimv vEMOnGtAwI2AWCFX+vkExceRD1fhSqw= -----END CERTIFICATE-----Generated at Sat Sep 26 05:38:28 2026 by rpki-client