$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae2e6b42-4b41-394c-a2f4-946f5c1b8cc6.roa File: ae2e6b42-4b41-394c-a2f4-946f5c1b8cc6.roa (raw, json) Hash identifier: J4ex0mpM1iGnYSUNE9JscVIgHELJDYo4+7AGML4F+iU= Subject key identifier: 99:98:BC:32:83:4C:C2:8C:6E:45:79:E7:67:C6:AB:5C:BB:4C:ED:04 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA7963B233FBB26C45CDB9300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae2e6b42-4b41-394c-a2f4-946f5c1b8cc6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33491 IP address blocks: 71.194.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:3b:23:3f:bb:26:c4:5c:db:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b911d307-ad83-4bf4-86cf-c070e1071e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b6:12:50:29:60:13:ef:ca:40:67:55:b9:96: 14:41:50:12:b7:7e:4e:42:28:15:38:eb:fa:5c:59: cc:e9:4d:fc:ec:7b:b1:57:1f:92:7e:c8:95:87:79: 05:09:d8:5a:47:1f:ae:83:19:78:4a:4f:73:61:bb: 17:83:df:71:20:4c:72:4f:91:84:bc:d6:03:26:ba: d9:9b:a9:18:75:70:fe:f8:cc:93:fb:ae:4a:06:fc: da:69:98:7d:de:a2:76:89:5c:79:97:d4:14:39:a8: bf:e6:7c:b3:6b:b7:95:09:2d:67:a6:7b:99:7a:47: 6d:95:fb:20:c4:95:cf:49:ee:c0:36:7a:80:b6:23: a5:da:18:1a:9b:3d:8b:60:b6:8d:58:18:92:1b:ec: 6a:74:03:7a:c8:12:8a:ad:dd:cd:4b:00:5e:45:71: 8a:a2:14:e6:3f:11:1e:c1:83:3d:f3:60:f7:7d:c7: 24:da:27:47:6a:d2:63:77:fb:0e:35:e3:a3:da:29: b0:90:09:af:6d:6b:74:fb:48:54:37:27:c1:4a:ad: 9d:83:e8:ab:bd:31:bb:15:4a:13:1c:3e:09:51:51: 14:f3:22:36:18:09:b7:73:3f:04:8b:ac:c6:ca:53: 7d:5b:10:18:51:8f:77:10:f4:d5:aa:8c:b5:4a:8a: 8d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:98:BC:32:83:4C:C2:8C:6E:45:79:E7:67:C6:AB:5C:BB:4C:ED:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae2e6b42-4b41-394c-a2f4-946f5c1b8cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:fb:2b:17:28:3c:56:55:7c:4c:c0:dd:9d:5b:88:7d:50:e7: 9f:8d:05:55:7d:a3:37:41:6e:ed:d2:71:3c:f7:f6:15:19:94: 5c:87:8a:d5:cf:a4:1f:8d:58:17:41:32:29:7c:58:79:86:c3: fc:42:34:b8:b1:c9:0a:ea:be:d2:a6:cb:2e:58:7f:ca:09:79: 28:e8:45:f6:af:35:5d:c1:95:fc:2b:58:92:d3:04:3a:d8:87: 2a:0f:03:cf:93:ed:0e:0b:62:4d:45:2e:20:49:6a:21:10:82: a1:89:4e:47:4e:ad:47:0c:76:1c:4e:4a:6e:48:2b:4d:3a:25: e8:5a:69:7c:51:57:24:c8:43:01:6c:a2:00:2d:a9:45:be:5f: d9:e5:a5:d8:93:34:32:4e:c5:f4:04:a0:3e:bf:f0:00:e2:21: f4:5f:be:74:2b:a8:06:61:08:08:be:d0:d5:89:6b:40:95:db: 7f:a6:6f:a9:f8:e4:49:8b:52:2b:ed:55:e6:ab:9b:c8:19:10: 35:5a:e1:33:24:32:47:bb:a6:08:8a:97:9e:df:84:22:55:0d: 66:5d:94:2a:f8:1b:90:35:37:32:71:74:76:d0:fa:2b:63:5e: cb:c0:1e:0d:97:0d:b5:a0:ce:c0:1e:11:59:70:3c:45:d4:6a: da:fe:02:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nljsjP7smxFzbkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjkxMWQzMDctYWQ4My00YmY0LTg2Y2YtYzA3MGUxMDcxZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLYSUClgE+/KQGdVuZYUQVASt35OQigVOOv6 XFnM6U387HuxVx+SfsiVh3kFCdhaRx+ugxl4Sk9zYbsXg99xIExyT5GEvNYDJrrZ m6kYdXD++MyT+65KBvzaaZh93qJ2iVx5l9QUOai/5nyza7eVCS1npnuZekdtlfsg xJXPSe7ANnqAtiOl2hgamz2LYLaNWBiSG+xqdAN6yBKKrd3NSwBeRXGKohTmPxEe wYM982D3fcck2idHatJjd/sONeOj2imwkAmvbWt0+0hUNyfBSq2dg+irvTG7FUoT HD4JUVEU8yI2GAm3cz8Ei6zGylN9WxAYUY93EPTVqoy1SoqNeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmYvDKDTMKMbkV552fGq1y7TO0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWUyZTZiNDItNGI0MS0z OTRjLWEyZjQtOTQ2ZjVjMWI4Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8KKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj7KxcoPFZVfEzA3Z1biH1Q55+NBVV9ozdBbu3ScTz39hUZlFyHitXP pB+NWBdBMil8WHmGw/xCNLixyQrqvtKmyy5Yf8oJeSjoRfavNV3BlfwrWJLTBDrY hyoPA8+T7Q4LYk1FLiBJaiEQgqGJTkdOrUcMdhxOSm5IK006JehaaXxRVyTIQwFs ogAtqUW+X9nlpdiTNDJOxfQEoD6/8ADiIfRfvnQrqAZhCAi+0NWJa0CV23+mb6n4 5EmLUivtVearm8gZEDVa4TMkMke7pgiKl57fhCJVDWZdlCr4G5A1NzJxdHbQ+itj XsvAHg2XDbWgzsAeEVlwPEXUatr+At0= -----END CERTIFICATE-----Generated at Thu Sep 24 21:30:43 2026 by rpki-client