$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29cdb3c0-b048-314a-a9b5-f359dc67077b.roa File: 29cdb3c0-b048-314a-a9b5-f359dc67077b.roa (raw, json) Hash identifier: XfrR0hLStrsXfcyZxgLh7k6zZBF6vaRasJf61l5s4xE= Subject key identifier: 7D:1A:B2:38:F7:86:58:85:2A:BF:63:55:AF:C6:D4:13:CE:5E:7F:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119F3E7733BE2F223FFB85E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29cdb3c0-b048-314a-a9b5-f359dc67077b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 73.211.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:3e:77:33:be:2f:22:3f:fb:85:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2a4af385-5f17-410c-b321-329102225988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:95:08:9b:4a:7d:fe:f7:06:61:ca:e9:49:90: ec:f9:fb:20:e4:54:1b:bb:c2:2a:8a:77:1c:a5:db: 64:b2:58:92:bc:0b:6e:68:e4:07:24:c8:ff:4c:73: 8f:4f:b8:21:de:1c:c7:7e:2d:8d:4a:ba:4d:cf:a4: bd:16:ea:ff:77:f1:3f:74:6d:77:b6:1a:df:ae:60: 69:03:35:ae:f9:af:0f:64:01:5f:47:4a:f9:cf:b7: 4e:7b:de:31:a8:52:e0:61:d9:61:23:40:b8:f5:f4: 07:d6:15:4b:84:5f:8f:30:68:33:17:e0:a1:19:cd: 3a:dd:cc:2d:8f:d9:70:d4:02:91:9d:83:9e:5e:38: 98:07:9e:5d:ca:75:66:2c:b0:a9:13:ad:6d:9e:cf: 2e:68:37:0e:f6:9d:22:e1:0d:b0:37:2f:d2:1f:ac: 29:53:27:f7:67:c7:94:32:4e:df:06:47:c1:59:c9: 05:d6:45:51:38:78:75:70:c1:6e:73:67:ea:28:cf: eb:20:a1:9e:34:5f:57:75:60:a0:f9:38:6c:e3:c7: 8e:c0:56:e5:ea:2f:50:dc:76:54:28:36:e4:d7:80: fa:2d:18:ae:2e:d0:08:81:48:27:ab:9c:fb:0d:3c: 09:04:35:15:78:30:d6:92:58:06:cd:e4:91:49:55: c7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1A:B2:38:F7:86:58:85:2A:BF:63:55:AF:C6:D4:13:CE:5E:7F:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29cdb3c0-b048-314a-a9b5-f359dc67077b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.211.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:46:0a:70:b4:91:9c:37:a1:a9:84:4b:0f:1d:21:fa:b9:5f: 29:1b:60:61:d1:f1:b8:7c:31:7a:19:f6:44:72:c5:67:d3:e4: ab:77:59:7d:37:7c:ab:ed:b1:92:f1:ed:b8:4d:fb:58:6f:d6: 22:2c:86:ae:49:ef:1b:87:85:2b:f4:df:2a:57:1b:55:ee:ee: a6:41:06:3f:5e:b7:eb:64:f0:bf:77:e9:eb:e8:5a:1e:62:a8: eb:74:86:2f:f3:9e:1a:de:e6:25:f8:0d:af:46:28:e8:ee:27: f6:31:0d:62:60:56:ce:85:4f:1c:e9:dd:42:52:f6:d6:66:84: 9b:6b:e0:77:cc:72:cf:95:64:27:e9:d7:fc:bb:b1:c3:94:db: b9:23:83:16:ed:01:0c:df:63:35:3d:04:50:8a:09:7d:5b:78: dd:6a:80:7f:1a:ff:e3:47:1d:3c:75:c8:e5:24:f1:83:0c:64: dd:c3:6a:99:c7:0f:4b:14:aa:86:67:03:4b:71:17:98:46:0e: fc:a8:67:1b:a0:77:2a:99:b5:fa:cc:a9:4e:2f:9b:28:28:de: 61:76:64:8f:0f:e0:96:d1:6c:06:89:f7:9b:a2:c3:e3:8d:1c: 3e:fa:be:77:1b:ba:c9:7f:64:db:f5:8e:8f:f6:72:0a:16:0f: 26:d4:a6:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnz53M74vIj/7heAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmE0YWYzODUtNWYxNy00MTBjLWIzMjEtMzI5MTAyMjI1OTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpUIm0p9/vcGYcrpSZDs+fsg5FQbu8Iqincc pdtksliSvAtuaOQHJMj/THOPT7gh3hzHfi2NSrpNz6S9Fur/d/E/dG13thrfrmBp AzWu+a8PZAFfR0r5z7dOe94xqFLgYdlhI0C49fQH1hVLhF+PMGgzF+ChGc063cwt j9lw1AKRnYOeXjiYB55dynVmLLCpE61tns8uaDcO9p0i4Q2wNy/SH6wpUyf3Z8eU Mk7fBkfBWckF1kVROHh1cMFuc2fqKM/rIKGeNF9XdWCg+Ths48eOwFbl6i9Q3HZU KDbk14D6LRiuLtAIgUgnq5z7DTwJBDUVeDDWklgGzeSRSVXHfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0asjj3hliFKr9jVa/G1BPOXn+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjljZGIzYzAtYjA0OC0z MTRhLWE5YjUtZjM1OWRjNjcwNzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdN6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtGCnC0kZw3oamESw8dIfq5XykbYGHR8bh8MXoZ9kRyxWfT5Kt3WX03 fKvtsZLx7bhN+1hv1iIshq5J7xuHhSv03ypXG1Xu7qZBBj9et+tk8L936evoWh5i qOt0hi/znhre5iX4Da9GKOjuJ/YxDWJgVs6FTxzp3UJS9tZmhJtr4HfMcs+VZCfp 1/y7scOU27kjgxbtAQzfYzU9BFCKCX1beN1qgH8a/+NHHTx1yOUk8YMMZN3DapnH D0sUqoZnA0txF5hGDvyoZxugdyqZtfrMqU4vmygo3mF2ZI8P4JbRbAaJ95uiw+ON HD76vncbusl/ZNv1jo/2cgoWDybUpiY= -----END CERTIFICATE-----Generated at Sat Sep 5 16:12:12 2026 by rpki-client