$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d038d566-2387-3777-936a-27a7ec1b131e.roa File: d038d566-2387-3777-936a-27a7ec1b131e.roa (raw, json) Hash identifier: WnpQR/q/4zzJig7plQAaeWZN3f+EHJOTcXD1veqdg78= Subject key identifier: 08:27:85:A0:B6:C7:02:98:8C:94:C6:4E:7F:AE:D5:73:19:D5:16:8C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4980C241FC79D023D0625880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d038d566-2387-3777-936a-27a7ec1b131e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33490 IP address blocks: 71.63.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:c2:41:fc:79:d0:23:d0:62:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=df078367-4ba6-40d8-a6c2-7267bbbf5784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e4:92:9d:4c:73:6f:c3:3a:20:34:f8:bd:ca: 9e:ee:6e:39:5b:a2:73:c3:1d:aa:70:79:0d:1f:12: 46:5f:f6:e3:bc:14:d7:f5:83:e4:2c:24:86:7f:db: d4:64:c7:65:fb:ed:ea:16:cd:8a:55:5f:d7:c8:e1: 35:a1:b2:09:9d:21:d2:45:97:8f:38:52:cc:cd:91: 86:78:d1:12:59:21:a9:86:10:e4:7d:58:92:c5:c4: e1:2a:33:53:e1:2b:d3:57:a3:51:35:8d:26:a8:1f: cd:db:52:2e:8d:10:49:70:29:15:a5:bb:cf:a1:c8: 37:32:c2:7c:4a:82:e1:d9:55:d9:84:7a:71:7c:b4: 50:ac:66:9d:75:a7:d9:38:81:f9:a7:a6:c2:6e:3b: 63:8d:e6:7e:65:66:82:93:16:a4:d4:ac:4f:94:af: bb:db:85:22:ce:d3:a8:fb:aa:c2:af:1f:fa:0f:71: 94:b6:6a:9b:b3:99:89:70:53:70:6b:6f:75:04:df: ef:0e:dc:12:91:09:f6:af:62:d8:78:45:86:63:4e: 52:30:b7:c2:1b:33:44:d9:da:6b:21:9a:99:60:cd: 3d:d4:0f:dd:a0:97:a5:14:2a:5d:3f:bb:96:34:88: 1d:67:cf:f3:5a:ae:64:2b:67:52:22:69:02:af:ea: 64:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:27:85:A0:B6:C7:02:98:8C:94:C6:4E:7F:AE:D5:73:19:D5:16:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d038d566-2387-3777-936a-27a7ec1b131e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.63.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:00:9b:f1:5b:07:97:96:7c:75:81:53:86:63:80:2c:f2:ab: 9f:84:c4:dc:49:d7:db:69:f5:20:12:4b:f3:e0:23:34:96:da: c5:5f:10:32:b9:17:f7:87:05:48:b3:6b:f3:ac:56:d0:4a:62: ac:77:3b:a8:04:14:0f:91:d6:2e:74:9a:50:86:71:47:b8:97: 7e:5c:c9:64:6d:b1:89:6c:02:33:4d:47:7e:b3:2f:c1:3e:13: c9:ca:2f:36:a5:80:14:01:96:8a:03:76:03:90:6e:52:5f:5a: 3e:32:74:fc:d2:e3:d3:03:87:b7:76:ee:8c:e2:58:f3:99:ab: 1a:e1:d0:d8:ae:14:f3:d7:ee:ff:4b:52:cc:30:1d:7e:af:b2: bd:30:b0:5b:fd:da:9c:a4:33:27:6a:71:77:57:25:bd:87:ae: 8d:e5:94:b1:9b:61:20:80:f2:ec:ad:f0:47:e2:66:24:97:a2: 99:ec:e9:1e:d4:aa:dc:0e:b6:52:50:39:f0:3c:cc:1e:a8:4d: 9f:2e:68:63:5a:cd:27:3e:9a:af:d8:aa:47:46:d3:80:4f:af: d0:d5:68:d3:03:c4:55:0e:e8:dc:2c:05:20:fb:2b:3e:25:06: 51:52:32:36:eb:ba:68:25:39:d1:4c:96:c9:cb:c7:85:c8:b7: b8:f8:75:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgMJB/HnQI9BiWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGYwNzgzNjctNGJhNi00MGQ4LWE2YzItNzI2N2JiYmY1Nzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuSSnUxzb8M6IDT4vcqe7m45W6Jzwx2qcHkN HxJGX/bjvBTX9YPkLCSGf9vUZMdl++3qFs2KVV/XyOE1obIJnSHSRZePOFLMzZGG eNESWSGphhDkfViSxcThKjNT4SvTV6NRNY0mqB/N21IujRBJcCkVpbvPocg3MsJ8 SoLh2VXZhHpxfLRQrGaddafZOIH5p6bCbjtjjeZ+ZWaCkxak1KxPlK+724UiztOo +6rCrx/6D3GUtmqbs5mJcFNwa291BN/vDtwSkQn2r2LYeEWGY05SMLfCGzNE2dpr IZqZYM091A/doJelFCpdP7uWNIgdZ8/zWq5kK2dSImkCr+pk4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgnhaC2xwKYjJTGTn+u1XMZ1RaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDAzOGQ1NjYtMjM4Ny0z Nzc3LTkzNmEtMjdhN2VjMWIxMzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRz+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcAm/FbB5eWfHWBU4ZjgCzyq5+ExNxJ19tp9SASS/PgIzSW2sVfEDK5 F/eHBUiza/OsVtBKYqx3O6gEFA+R1i50mlCGcUe4l35cyWRtsYlsAjNNR36zL8E+ E8nKLzalgBQBlooDdgOQblJfWj4ydPzS49MDh7d27oziWPOZqxrh0NiuFPPX7v9L UswwHX6vsr0wsFv92pykMydqcXdXJb2Hro3llLGbYSCA8uyt8EfiZiSXopns6R7U qtwOtlJQOfA8zB6oTZ8uaGNazSc+mq/YqkdG04BPr9DVaNMDxFUO6NwsBSD7Kz4l BlFSMjbrumglOdFMlsnLx4XIt7j4dQE= -----END CERTIFICATE-----Generated at Sat Sep 26 04:06:56 2026 by rpki-client