$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99dc2bec-147a-3ad4-a102-099edf063898.roa File: 99dc2bec-147a-3ad4-a102-099edf063898.roa (raw, json) Hash identifier: 0J8eq5DIkGqRSFBGpFycZJ+vn7rFM/fStAx+V1wal/A= Subject key identifier: 57:9C:4A:40:9F:63:C2:AF:20:07:C7:99:F0:D6:13:CB:00:CD:00:EC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49796008AE8C42DE4CBD2700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99dc2bec-147a-3ad4-a102-099edf063898.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13367 IP address blocks: 71.195.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:79:60:08:ae:8c:42:de:4c:bd:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=46f73a10-53ce-4f29-be28-a72ee8fa825e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fe:66:0d:2e:e4:34:ea:bd:a0:a2:fe:82:31: fb:0b:e6:9d:fc:9a:2c:13:a6:40:55:24:85:1f:65: f6:98:dd:2f:6e:c4:5d:47:d3:8f:ab:14:a4:ad:cc: fd:ce:cb:54:06:03:55:e1:cf:15:41:62:ec:7a:df: 9c:cb:79:f0:c3:7e:11:8f:bb:67:f6:90:16:ca:ba: 9c:48:5e:34:5b:af:6a:8f:9b:39:62:ef:cc:7c:35: 02:12:83:a7:6a:ce:11:19:f4:63:4a:77:9e:5d:f8: 48:6f:6c:77:a6:cd:e1:7d:b5:c8:49:3e:f6:4e:5f: 32:2a:ca:96:a2:ae:b4:5a:49:f3:40:f4:04:fd:d1: 7c:92:c8:5f:e2:f6:2b:a9:a5:df:0c:92:72:bc:59: 7a:7a:21:74:82:b1:7c:4e:63:aa:f1:f5:b3:87:8d: c9:e5:f8:0b:8d:e4:b4:3d:82:17:38:55:6e:fb:6c: 81:e6:00:3b:12:41:1d:f9:5a:2d:0e:b7:0a:04:ef: 0e:b7:7d:58:81:b9:8a:b6:6d:25:e9:7f:69:49:fe: b8:a8:53:d6:5e:e6:74:a1:c5:5f:a0:7e:16:70:79: 40:15:d9:52:94:b0:65:17:77:8f:7b:09:6d:7a:71: c5:7c:1b:d0:0f:f1:fa:eb:71:25:02:49:73:dd:4d: 5a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9C:4A:40:9F:63:C2:AF:20:07:C7:99:F0:D6:13:CB:00:CD:00:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99dc2bec-147a-3ad4-a102-099edf063898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.195.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:c5:72:75:c5:73:7c:79:14:2a:7c:1b:24:6f:60:4e:eb:ee: be:38:86:1f:8e:7d:94:03:4d:a3:2b:ff:d2:00:c9:60:43:63: 03:78:b1:e6:7a:c9:84:c4:c8:d7:00:69:26:68:60:2d:2b:ea: 6b:df:c1:ba:1a:b3:4a:0f:f3:5e:ca:e0:f3:ff:52:be:ff:55: bc:25:e0:b0:4b:dd:f1:11:ef:78:ec:ac:26:85:3e:76:4f:52: 69:b3:a2:84:4b:c6:bb:2e:94:5c:1c:90:f7:0b:71:ae:9c:66: 51:30:f7:1d:15:e3:0d:c7:cf:96:25:89:fc:68:52:75:a5:5f: d1:a8:18:f8:66:e4:0d:d1:c5:53:57:24:92:45:f8:55:2d:08: 5d:ef:9d:fc:89:60:55:da:63:eb:cb:43:f1:9b:30:9d:eb:40: 5f:da:01:95:93:f1:6d:93:01:da:b3:5b:bf:e3:7f:03:be:88: 3d:89:2b:5a:6f:7d:97:d4:34:e7:7f:5b:e9:67:86:29:24:75: a6:79:5e:25:fd:6a:ea:23:2d:50:91:64:8b:78:d9:f2:79:cc: 4b:af:56:60:dc:e5:e0:dc:be:a7:2b:3d:3b:69:78:2d:9d:d4: a9:9b:ad:4f:29:f7:de:2d:6e:6e:f6:b6:8f:27:ea:25:ef:00: 1d:62:e8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeWAIroxC3ky9JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDZmNzNhMTAtNTNjZS00ZjI5LWJlMjgtYTcyZWU4ZmE4MjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv5mDS7kNOq9oKL+gjH7C+ad/JosE6ZAVSSF H2X2mN0vbsRdR9OPqxSkrcz9zstUBgNV4c8VQWLset+cy3nww34Rj7tn9pAWyrqc SF40W69qj5s5Yu/MfDUCEoOnas4RGfRjSneeXfhIb2x3ps3hfbXIST72Tl8yKsqW oq60WknzQPQE/dF8kshf4vYrqaXfDJJyvFl6eiF0grF8TmOq8fWzh43J5fgLjeS0 PYIXOFVu+2yB5gA7EkEd+VotDrcKBO8Ot31YgbmKtm0l6X9pSf64qFPWXuZ0ocVf oH4WcHlAFdlSlLBlF3ePewltenHFfBvQD/H663ElAklz3U1ahQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFecSkCfY8KvIAfHmfDWE8sAzQDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTlkYzJiZWMtMTQ3YS0z YWQ0LWExMDItMDk5ZWRmMDYzODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8MUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7FcnXFc3x5FCp8GyRvYE7r7r44hh+OfZQDTaMr/9IAyWBDYwN4seZ6 yYTEyNcAaSZoYC0r6mvfwboas0oP817K4PP/Ur7/Vbwl4LBL3fER73jsrCaFPnZP UmmzooRLxrsulFwckPcLca6cZlEw9x0V4w3Hz5YlifxoUnWlX9GoGPhm5A3RxVNX JJJF+FUtCF3vnfyJYFXaY+vLQ/GbMJ3rQF/aAZWT8W2TAdqzW7/jfwO+iD2JK1pv fZfUNOd/W+lnhikkdaZ5XiX9auojLVCRZIt42fJ5zEuvVmDc5eDcvqcrPTtpeC2d 1KmbrU8p994tbm72to8n6iXvAB1i6Is= -----END CERTIFICATE-----Generated at Sat Sep 26 07:39:05 2026 by rpki-client