$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28410caa-a0ae-3e98-aacd-ad696443c014.roa File: 28410caa-a0ae-3e98-aacd-ad696443c014.roa (raw, json) Hash identifier: QKFLvAUp4JX8dUeNG5TAsIFbuo3fIYvoMH21wHfBJdY= Subject key identifier: BD:3D:59:A5:9C:9F:A5:59:3A:BF:91:81:70:02:FD:84:42:2F:AE:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4EF2ED1B14FA3713625D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28410caa-a0ae-3e98-aacd-ad696443c014.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 73.240.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:f2:ed:1b:14:fa:37:13:62:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=608952c4-afa9-4154-a8f9-6ed08f05f13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:a5:c0:5a:27:f4:10:93:a0:93:44:3a:0f: 90:31:4b:b2:d1:5e:78:2c:42:e6:c8:fe:95:60:b5: 02:12:a1:25:e4:47:e2:20:98:c5:4f:14:94:fc:6f: f8:26:6b:2c:23:65:08:ee:92:43:ac:41:3f:f7:67: d0:49:ac:33:36:e1:f5:c6:d9:fb:8d:04:a6:88:91: 8f:82:f2:76:8a:a4:30:e9:e5:fc:b6:6b:43:ad:66: 66:72:61:25:e1:58:2f:3a:32:6c:56:b9:1d:fd:2e: a1:00:eb:1a:ec:35:fa:c5:f1:1b:63:b0:35:34:1c: fa:63:0e:6c:a4:56:97:82:f6:ce:b0:9c:09:d6:0c: a1:ff:83:6f:af:65:1c:a7:f8:64:c2:e9:a0:ad:41: da:40:8b:de:d0:75:be:e2:a4:79:42:70:78:90:62: 4c:b0:ba:bd:38:d2:06:62:46:fe:0a:47:40:bc:7b: b2:06:61:a2:97:fd:97:f1:ef:dc:06:06:d4:ab:d7: f3:ff:70:87:b2:c0:46:89:cb:ad:24:cd:70:84:2c: a4:bd:cf:52:96:3e:08:e1:35:79:1e:e5:3e:6a:02: 6e:3f:10:53:ef:e6:c4:41:7c:c1:e0:69:90:9a:56: a5:96:c3:4a:03:35:ae:96:43:75:e8:9e:fa:8a:7f: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3D:59:A5:9C:9F:A5:59:3A:BF:91:81:70:02:FD:84:42:2F:AE:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28410caa-a0ae-3e98-aacd-ad696443c014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.240.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:65:b4:a9:d8:ab:2d:c5:4d:48:a9:00:b5:bf:a6:88:8a:4d: b4:16:14:2e:8e:be:c8:89:bc:83:eb:ac:87:03:15:72:ff:4b: c3:61:ca:cf:e7:36:86:95:94:cf:bf:4d:05:00:aa:2b:ca:08: 2f:76:1b:84:4d:96:51:24:ea:dc:39:c5:87:23:5b:3b:6a:66: 16:5b:13:ca:3d:b4:de:2e:fe:d2:b4:07:10:57:5a:14:e3:dc: 16:73:1f:03:fc:1b:d0:a4:1a:83:62:1e:be:0d:04:e9:84:ba: 40:36:87:ed:ff:41:f5:8b:4a:d2:50:8b:52:65:83:4a:64:68: 59:e0:9e:33:95:61:c3:76:1a:31:11:2f:60:84:f2:f0:83:37: 49:65:92:84:c8:32:04:60:e9:e5:7f:51:26:41:ba:2b:2d:6f: bc:83:1e:78:f4:9b:21:ec:f5:d7:28:01:d9:5e:23:a4:5d:e3: a3:c5:8b:1b:6d:78:2c:8c:88:13:8c:7b:0d:23:d9:aa:ed:22: 9f:55:bc:46:8c:d9:ef:df:45:76:19:0f:8f:6f:79:6b:a7:69: 51:21:1e:39:0c:b8:27:91:8a:ea:f1:16:58:8a:7a:be:d4:ab: 0e:05:55:1c:ae:04:48:84:46:fc:7f:0a:b2:ac:5b:c4:a5:bc: 32:21:62:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TvLtGxT6NxNiXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NjA4OTUyYzQtYWZhOS00MTU0LWE4ZjktNmVkMDhmMDVmMTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVylwFon9BCToJNEOg+QMUuy0V54LELmyP6V YLUCEqEl5EfiIJjFTxSU/G/4JmssI2UI7pJDrEE/92fQSawzNuH1xtn7jQSmiJGP gvJ2iqQw6eX8tmtDrWZmcmEl4VgvOjJsVrkd/S6hAOsa7DX6xfEbY7A1NBz6Yw5s pFaXgvbOsJwJ1gyh/4Nvr2Ucp/hkwumgrUHaQIve0HW+4qR5QnB4kGJMsLq9ONIG Ykb+CkdAvHuyBmGil/2X8e/cBgbUq9fz/3CHssBGicutJM1whCykvc9Slj4I4TV5 HuU+agJuPxBT7+bEQXzB4GmQmlallsNKAzWulkN16J76in/9nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL09WaWcn6VZOr+RgXAC/YRCL679MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg0MTBjYWEtYTBhZS0z ZTk4LWFhY2QtYWQ2OTY0NDNjMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANtltKnYqy3FTUipALW/poiKTbQWFC6OvsiJvIPrrIcDFXL/S8Nhys/n NoaVlM+/TQUAqivKCC92G4RNllEk6tw5xYcjWztqZhZbE8o9tN4u/tK0BxBXWhTj 3BZzHwP8G9CkGoNiHr4NBOmEukA2h+3/QfWLStJQi1Jlg0pkaFngnjOVYcN2GjER L2CE8vCDN0llkoTIMgRg6eV/USZBuistb7yDHnj0myHs9dcoAdleI6Rd46PFixtt eCyMiBOMew0j2artIp9VvEaM2e/fRXYZD49veWunaVEhHjkMuCeRiurxFliKer7U qw4FVRyuBEiERvx/CrKsW8SlvDIhYkE= -----END CERTIFICATE-----Generated at Sun Oct 25 04:37:09 2026 by rpki-client