$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2faa0c1a-6868-31a6-a449-f7fbd2ea594e.roa File: 2faa0c1a-6868-31a6-a449-f7fbd2ea594e.roa (raw, json) Hash identifier: brlfOSDFtjPWhWASPLrXFfZXhWJDSBBTk6/CFxt82VY= Subject key identifier: 6E:47:A7:72:86:0C:F4:AE:E3:2B:2F:42:DF:4A:3A:7A:85:D1:02:10 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119DCD4B78E9C4A884B8B220 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2faa0c1a-6868-31a6-a449-f7fbd2ea594e.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 73.120.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:cd:4b:78:e9:c4:a8:84:b8:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=7716a247-084e-4bec-97fd-ccf9846f1ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:f0:42:a6:53:44:cb:f2:4d:fe:02:ab:04: 18:ad:a4:a0:89:d6:d9:2b:c6:16:5d:ff:65:3d:13: dc:9b:a7:77:4b:b0:35:c0:b1:cf:bf:31:49:31:66: 4c:32:09:bf:59:89:b5:54:44:0a:5c:19:49:71:52: 03:e9:b5:03:a6:62:90:b3:fb:3d:0e:5f:c0:79:a6: 97:ec:5f:88:fe:1f:2d:39:0d:cd:9f:3b:05:f3:74: ec:0a:ea:05:a2:66:8a:6e:e8:f6:9e:2b:97:10:69: 68:03:7f:82:68:bc:36:8d:ed:c9:6a:62:f8:5c:a5: 99:2b:08:f6:e6:96:d3:31:93:72:20:23:73:fd:28: 28:5c:fc:b4:76:65:bc:af:1f:9e:fc:0e:a1:11:85: 51:c1:c6:de:af:14:f3:25:fc:66:fe:e1:8a:2e:98: 63:db:3b:f2:ea:74:f6:c7:03:df:f7:14:83:f3:de: 17:1f:e7:2f:f5:7e:24:af:43:f2:0c:e8:6d:72:2c: ae:8f:ff:4a:ab:a4:c8:6f:01:28:50:7e:d2:37:f4: 45:5a:18:a8:01:13:20:c5:92:33:cc:64:6b:86:5d: 96:d9:e8:31:af:3f:39:b0:c0:21:dd:23:80:ef:af: fe:95:c9:97:37:af:e2:8c:50:7c:cf:00:e0:85:4b: 25:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:47:A7:72:86:0C:F4:AE:E3:2B:2F:42:DF:4A:3A:7A:85:D1:02:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2faa0c1a-6868-31a6-a449-f7fbd2ea594e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.120.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:0c:49:db:a7:2a:b4:9d:8f:64:c4:47:75:dd:49:fc:9c:a0: 25:25:73:61:0f:8d:40:b2:28:6d:db:6e:61:4b:3c:d8:04:05: 7d:47:50:e3:60:2c:de:44:97:b0:7a:77:81:62:b1:3f:a1:e1: 46:16:8c:a4:62:31:61:50:f1:97:1b:ac:e2:48:25:71:a2:07: 68:fd:08:b6:6f:98:6b:66:28:3c:b9:f8:44:30:b9:3f:01:a8: bf:a4:94:5c:02:4a:be:77:bd:ba:ee:c5:08:7b:89:83:cc:38: 82:e9:40:09:81:30:c5:3c:d5:b1:8a:13:0f:d5:33:30:bb:49: ed:46:08:b3:9a:56:cf:2f:f0:e1:86:fa:d3:a0:b5:07:84:5a: 2e:d4:cc:25:41:81:dd:b7:78:1d:82:19:50:df:c6:89:42:bd: 4b:5d:cc:ba:a6:17:cc:9a:57:b6:72:54:f6:9e:d6:ed:14:94: a1:c4:b5:06:f5:e9:90:3d:c2:4e:15:99:e9:35:2d:24:ed:b5: 69:fd:8d:a1:33:7f:bf:47:d1:94:bc:42:94:a5:5b:2c:a5:e5: 52:07:15:8d:bc:08:1a:fa:3e:02:75:0f:3f:94:81:aa:95:14: a0:e1:ee:a9:d9:41:13:44:3a:2e:c5:9b:8b:c3:a1:2a:61:b4: 7e:97:94:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnc1LeOnEqIS4siAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NzcxNmEyNDctMDg0ZS00YmVjLTk3ZmQtY2NmOTg0NmYxYWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAjwQqZTRMvyTf4CqwQYraSgidbZK8YWXf9l PRPcm6d3S7A1wLHPvzFJMWZMMgm/WYm1VEQKXBlJcVID6bUDpmKQs/s9Dl/AeaaX 7F+I/h8tOQ3NnzsF83TsCuoFomaKbuj2niuXEGloA3+CaLw2je3JamL4XKWZKwj2 5pbTMZNyICNz/SgoXPy0dmW8rx+e/A6hEYVRwcberxTzJfxm/uGKLphj2zvy6nT2 xwPf9xSD894XH+cv9X4kr0PyDOhtciyuj/9Kq6TIbwEoUH7SN/RFWhioARMgxZIz zGRrhl2W2egxrz85sMAh3SOA76/+lcmXN6/ijFB8zwDghUsl1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5Hp3KGDPSu4ysvQt9KOnqF0QIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmZhYTBjMWEtNjg2OC0z MWE2LWE0NDktZjdmYmQyZWE1OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSXjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcMSdunKrSdj2TER3XdSfycoCUlc2EPjUCyKG3bbmFLPNgEBX1HUONg LN5El7B6d4FisT+h4UYWjKRiMWFQ8ZcbrOJIJXGiB2j9CLZvmGtmKDy5+EQwuT8B qL+klFwCSr53vbruxQh7iYPMOILpQAmBMMU81bGKEw/VMzC7Se1GCLOaVs8v8OGG +tOgtQeEWi7UzCVBgd23eB2CGVDfxolCvUtdzLqmF8yaV7ZyVPae1u0UlKHEtQb1 6ZA9wk4Vmek1LSTttWn9jaEzf79H0ZS8QpSlWyyl5VIHFY28CBr6PgJ1Dz+UgaqV FKDh7qnZQRNEOi7Fm4vDoSphtH6XlBc= -----END CERTIFICATE-----Generated at Sat Sep 5 14:21:39 2026 by rpki-client