$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a72a7da1-af73-3dae-960e-714e2258e97e.roa File: a72a7da1-af73-3dae-960e-714e2258e97e.roa (raw, json) Hash identifier: ow5PDRw3BkuliFfctg0IbbaNJAn/U/N4BCdQBnxpwRI= Subject key identifier: BA:04:79:F5:4B:01:E5:62:B2:EC:50:5D:13:E6:E4:DA:7D:A1:1D:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497870DF3772E09F15F48720 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a72a7da1-af73-3dae-960e-714e2258e97e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33490 IP address blocks: 71.237.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:70:df:37:72:e0:9f:15:f4:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1faf2f3e-4e28-4b69-98f1-a8bf94587a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:09:1c:fe:e3:ec:6b:2c:38:a0:1b:d8:13: 2e:01:1d:1c:33:7a:ef:9a:15:e8:d0:c8:53:dc:f3: de:d0:d7:e3:17:11:25:17:aa:ea:da:43:ca:cf:20: 90:65:08:b3:f5:54:37:8c:1c:fd:0b:91:af:ec:f6: 47:43:83:c7:7a:42:9e:4b:f7:d4:aa:12:ee:6c:56: 06:a6:11:0c:20:8e:63:df:33:c8:a7:b2:2a:19:c4: 16:38:61:73:68:a0:28:a1:96:cc:69:cc:5e:20:9d: 35:d3:d8:bc:d5:da:8e:c3:b0:f9:f0:76:e1:8b:fa: bb:28:00:b0:f8:57:de:15:ea:8c:87:1c:84:af:85: f4:c8:49:6e:9e:f2:ca:b0:5a:00:1f:f5:d4:c5:11: f4:25:dc:e0:7b:b1:57:13:55:5b:65:06:ed:ec:45: 7f:76:f0:bb:66:66:67:c5:2f:d0:a8:83:9a:49:3a: 2c:e2:b7:84:f9:60:b2:e6:f8:29:b2:78:a4:3b:ae: 46:3d:80:78:66:78:6a:ef:69:21:f4:00:96:13:5c: 76:3d:f0:79:27:28:3e:1a:01:69:6d:eb:cc:82:93: dd:ac:0b:93:18:43:cc:59:01:5a:4e:51:df:ef:61: dd:41:c9:a2:b7:07:fb:87:ca:3d:81:4c:81:41:d6: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:04:79:F5:4B:01:E5:62:B2:EC:50:5D:13:E6:E4:DA:7D:A1:1D:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a72a7da1-af73-3dae-960e-714e2258e97e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.237.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:56:b3:e3:a2:b9:dc:ce:33:df:6a:29:3d:cb:9e:1a:84:46: da:ff:45:20:6d:0f:3f:d0:b3:b2:e2:28:c2:72:f0:a8:f2:41: 20:53:e4:46:4b:fc:5a:7e:8b:e1:2a:db:f6:37:ec:9b:da:8f: 1a:05:f2:71:ac:55:d1:85:b4:66:3d:e3:c5:2e:40:62:f7:90: da:ac:a2:bd:ae:f5:e8:55:b8:88:d8:0f:2d:15:fb:70:5c:9c: 26:08:c4:92:78:24:50:da:16:65:74:a0:ba:b2:4c:c8:82:c4: a0:4a:2b:ea:23:07:92:fd:37:58:2c:94:7e:9f:7a:ce:2c:60: a9:df:89:49:99:c4:8b:e7:93:33:bb:cc:22:38:85:7c:d8:09: 26:8a:6e:61:ee:68:f3:82:c3:b2:20:8d:e2:9a:95:53:c4:80: 1c:1f:4c:b8:0b:85:5e:39:93:00:ca:57:8f:c1:6f:bc:72:c6: 29:e5:cf:84:92:d0:39:9a:19:be:da:27:be:41:36:2f:5d:f5: c9:a3:71:fc:c5:b6:61:4f:12:86:df:b1:0b:36:af:79:e5:76: 0b:c6:63:bd:51:c5:ed:49:a8:d5:b0:60:2a:93:3b:aa:ff:c1: 7b:42:07:aa:47:08:26:82:43:6b:b9:77:17:da:88:9d:60:2d: 38:f8:23:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeHDfN3LgnxX0hyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWZhZjJmM2UtNGUyOC00YjY5LTk4ZjEtYThiZjk0NTg3YTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O8JHP7j7GssOKAb2BMuAR0cM3rvmhXo0MhT 3PPe0NfjFxElF6rq2kPKzyCQZQiz9VQ3jBz9C5Gv7PZHQ4PHekKeS/fUqhLubFYG phEMII5j3zPIp7IqGcQWOGFzaKAooZbMacxeIJ0109i81dqOw7D58Hbhi/q7KACw +FfeFeqMhxyEr4X0yElunvLKsFoAH/XUxRH0Jdzge7FXE1VbZQbt7EV/dvC7ZmZn xS/QqIOaSTos4reE+WCy5vgpsnikO65GPYB4Znhq72kh9ACWE1x2PfB5Jyg+GgFp bevMgpPdrAuTGEPMWQFaTlHf72HdQcmitwf7h8o9gUyBQdZyfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoEefVLAeVisuxQXRPm5Np9oR3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTcyYTdkYTEtYWY3My0z ZGFlLTk2MGUtNzE0ZTIyNThlOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR+2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANdWs+OiudzOM99qKT3LnhqERtr/RSBtDz/Qs7LiKMJy8KjyQSBT5EZL /Fp+i+Eq2/Y37JvajxoF8nGsVdGFtGY948UuQGL3kNqsor2u9ehVuIjYDy0V+3Bc nCYIxJJ4JFDaFmV0oLqyTMiCxKBKK+ojB5L9N1gslH6fes4sYKnfiUmZxIvnkzO7 zCI4hXzYCSaKbmHuaPOCw7IgjeKalVPEgBwfTLgLhV45kwDKV4/Bb7xyxinlz4SS 0DmaGb7aJ75BNi9d9cmjcfzFtmFPEobfsQs2r3nldgvGY71Rxe1JqNWwYCqTO6r/ wXtCB6pHCCaCQ2u5dxfaiJ1gLTj4I0M= -----END CERTIFICATE-----Generated at Fri Sep 25 16:59:32 2026 by rpki-client