$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c4e8351-576f-3ff8-b4b6-7552ce1267d4.roa File: 2c4e8351-576f-3ff8-b4b6-7552ce1267d4.roa (raw, json) Hash identifier: ucG5f8/Y7zuQMCnYixtzRuBvaoF+SzFdEvS4Cmx+q3o= Subject key identifier: 73:D2:2A:3A:D3:93:3E:B8:23:58:A0:70:6F:11:48:0E:AE:A4:3A:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED86399B764C9537D1D897C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c4e8351-576f-3ff8-b4b6-7552ce1267d4.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7015 IP address blocks: 73.238.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:99:b7:64:c9:53:7d:1d:89:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=cb36ad6a-9bed-4ab6-b77b-cbb5ca55ae61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:57:82:dd:9a:7c:cf:db:be:1d:92:51:b9: 7d:6b:7e:d9:56:b2:49:c6:df:43:6b:bd:eb:db:fb: 95:bb:6a:2f:17:ff:b6:d0:ec:1b:5e:14:39:27:b5: 7f:c1:23:20:ae:30:f0:f1:f9:8b:e6:8c:8a:76:74: 2b:39:89:ee:db:cc:b4:11:b5:e3:b1:ab:0f:e6:29: 9e:2a:9e:e1:4f:30:4e:72:e5:df:b4:91:6d:32:21: 60:b3:7b:41:2f:fd:04:dd:0c:2d:26:50:cf:55:7c: 2d:15:02:cf:8e:18:8d:48:d4:d1:0c:2a:33:be:52: ec:c5:62:73:c2:2f:39:5a:1f:52:91:9e:26:3f:b0: ff:d9:10:f9:1a:0f:a7:37:db:e7:34:89:e7:1c:f4: 7e:41:54:fc:93:0e:b6:74:a2:73:4f:ab:f7:a8:07: e0:c0:fc:8d:9c:72:c8:af:b6:f8:83:f5:1d:85:a4: d2:43:70:d0:fd:f4:df:72:9c:ec:48:08:07:ae:d7: d6:1a:05:4f:df:53:07:b6:cb:8d:5c:40:da:a9:d6: 89:63:60:11:37:55:c5:dd:63:1b:84:c0:8c:23:f1: a8:11:52:2a:1d:5e:47:78:80:10:3b:f2:2c:47:2e: 98:f2:27:5f:6b:e4:b8:3b:e8:bb:74:42:98:1b:fe: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D2:2A:3A:D3:93:3E:B8:23:58:A0:70:6F:11:48:0E:AE:A4:3A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c4e8351-576f-3ff8-b4b6-7552ce1267d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.238.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:10:09:7e:69:31:35:3a:d5:8c:7f:b4:da:ed:8c:1c:ee:1a: 32:99:da:62:d6:35:4f:f9:8c:0b:0a:d9:be:94:7a:c2:53:d8: 53:f1:cf:b2:93:65:44:4f:02:fd:28:9a:7e:80:6d:20:76:30: 32:15:dc:4c:6b:76:56:34:ca:89:d9:c2:f0:1f:3d:89:44:18: 0a:bc:13:e9:be:dc:e7:08:62:ee:ec:74:ec:dc:d4:79:20:ab: 0c:e9:1d:66:f0:5b:9e:59:36:e7:45:7a:c1:5c:90:fc:c1:c4: 6b:21:0a:65:d7:4d:45:d6:97:ef:68:70:e4:a1:8c:70:04:3f: 7e:48:26:48:f1:71:fb:e3:61:88:3e:ab:62:a5:0d:7e:f2:13: 2c:48:88:56:e7:26:72:7a:2c:4a:2e:45:3f:3d:e7:bb:ce:4a: 26:cb:14:20:14:6b:a5:d3:96:27:45:29:ed:d2:8b:3b:03:9e: f6:58:0f:88:13:1a:55:7a:38:f9:60:26:ac:20:2a:06:1e:fa: bd:03:31:fb:5f:4d:9a:e2:69:a1:9b:4c:f8:52:d3:9c:b9:c7: 60:a0:cb:e5:78:e6:ca:b0:66:e3:3a:3f:20:c9:4d:97:97:38: 62:89:ea:8c:cc:eb:c4:c1:65:78:63:1b:21:24:6a:93:fa:bf: b6:48:a5:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY5m3ZMlTfR2JfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk Y2IzNmFkNmEtOWJlZC00YWI2LWI3N2ItY2JiNWNhNTVhZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKVXgt2afM/bvh2SUbl9a37ZVrJJxt9Da73r 2/uVu2ovF/+20OwbXhQ5J7V/wSMgrjDw8fmL5oyKdnQrOYnu28y0EbXjsasP5ime Kp7hTzBOcuXftJFtMiFgs3tBL/0E3QwtJlDPVXwtFQLPjhiNSNTRDCozvlLsxWJz wi85Wh9SkZ4mP7D/2RD5Gg+nN9vnNInnHPR+QVT8kw62dKJzT6v3qAfgwPyNnHLI r7b4g/UdhaTSQ3DQ/fTfcpzsSAgHrtfWGgVP31MHtsuNXEDaqdaJY2ARN1XF3WMb hMCMI/GoEVIqHV5HeIAQO/IsRy6Y8idfa+S4O+i7dEKYG/5nNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPSKjrTkz64I1igcG8RSA6upDr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmM0ZTgzNTEtNTc2Zi0z ZmY4LWI0YjYtNzU1MmNlMTI2N2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSe6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsQCX5pMTU61Yx/tNrtjBzuGjKZ2mLWNU/5jAsK2b6UesJT2FPxz7KT ZURPAv0omn6AbSB2MDIV3ExrdlY0yonZwvAfPYlEGAq8E+m+3OcIYu7sdOzc1Hkg qwzpHWbwW55ZNudFesFckPzBxGshCmXXTUXWl+9ocOShjHAEP35IJkjxcfvjYYg+ q2KlDX7yEyxIiFbnJnJ6LEouRT8957vOSibLFCAUa6XTlidFKe3SizsDnvZYD4gT GlV6OPlgJqwgKgYe+r0DMftfTZriaaGbTPhS05y5x2Cgy+V45sqwZuM6PyDJTZeX OGKJ6ozM68TBZXhjGyEkapP6v7ZIpeQ= -----END CERTIFICATE-----Generated at Mon Sep 14 20:46:39 2026 by rpki-client