$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/325434ac-44d2-3f6a-979f-c0072a0e11e9.roa File: 325434ac-44d2-3f6a-979f-c0072a0e11e9.roa (raw, json) Hash identifier: dOWZIKDPS+ckSxge+3FKzhWjipNnv7SgwFyeSHgSQ7Q= Subject key identifier: B0:0A:29:90:37:6A:72:5C:7B:92:06:85:0A:3D:6E:0C:26:EF:86:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3A8FA86BCFE3EBD4A88B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/325434ac-44d2-3f6a-979f-c0072a0e11e9.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33659 IP address blocks: 73.248.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:8f:a8:6b:cf:e3:eb:d4:a8:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=b8c71255-aca1-4d4e-a4a9-e9ec64c270a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:86:33:7a:f0:82:64:63:51:8f:81:9e:43: 1c:5a:5a:34:51:d8:f8:d7:c7:07:5c:0d:01:53:28: a9:e8:6b:e0:2a:ef:f4:8e:da:17:8e:70:25:ed:d4: e7:12:70:50:41:14:ef:a6:eb:8f:b3:dc:db:ee:dd: c6:15:a5:35:c9:27:d9:a7:d4:fe:53:5d:88:09:f2: 61:60:6d:d3:cf:27:35:62:1b:6d:29:f5:3f:72:18: cf:90:f1:b0:5e:55:ce:e3:1f:88:db:2e:9e:c8:08: bd:96:5f:aa:00:d4:76:43:ba:f6:bf:a4:34:62:f4: a9:57:ce:84:2f:bf:9a:c6:2b:d1:7d:c2:e4:e5:16: 8f:8d:a5:05:79:10:8b:78:e9:68:cd:37:41:54:ae: 07:ed:0c:cf:92:70:08:9f:fd:4f:fc:41:98:a4:75: 99:16:c4:d8:f8:3a:17:da:e9:82:5a:60:2b:a4:aa: 7a:96:ff:2b:15:db:79:c1:8e:4d:0b:50:e1:68:bf: 3d:fb:5a:66:de:a9:50:6a:80:54:38:a5:f3:cd:76: af:7e:66:f4:9a:a4:42:64:f2:f6:07:c7:de:46:7d: 5d:78:5f:bb:63:97:2f:37:fa:18:8a:c8:94:ba:65: 48:f2:ad:df:f4:32:17:9a:83:1e:77:5e:2b:aa:80: 7c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0A:29:90:37:6A:72:5C:7B:92:06:85:0A:3D:6E:0C:26:EF:86:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/325434ac-44d2-3f6a-979f-c0072a0e11e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:29:39:79:32:6f:68:4d:8e:0a:85:f0:a5:a4:c5:0c:f6:a4: ac:0f:14:c7:f0:24:ed:02:49:fd:04:ab:aa:6e:dd:2a:4e:31: 2d:06:35:95:33:0b:c1:e1:4a:42:91:06:c5:a6:23:b0:ec:4d: 35:ce:d2:d2:3f:ae:9b:12:64:db:ab:d9:cb:28:55:92:ee:36: 97:63:31:81:1e:36:51:b1:76:d1:ac:c1:70:8a:f2:38:0d:ff: 93:b1:9d:db:fc:db:5c:31:6f:48:11:71:5a:73:3d:c5:18:ce: 9f:46:07:0a:75:94:ef:d2:cb:10:86:74:71:b0:59:63:72:b1: 66:3d:60:2e:95:97:d2:25:2a:ff:42:b7:a1:4a:bf:5e:53:25: f0:7f:fc:28:90:6c:5b:44:cd:36:e5:88:50:cc:35:34:4b:34: b8:c2:e5:3c:be:61:59:8f:54:5e:95:77:7a:09:54:16:e5:f9: 05:45:55:77:bd:96:8b:93:17:34:21:66:f8:99:a9:38:77:a5: b3:78:3f:d3:8e:48:ad:83:a9:dd:5a:3e:86:f8:4a:a2:ee:f7: 8a:84:0b:c9:f8:b0:1d:51:6d:6f:0f:55:e2:a7:55:c7:8d:29: 9f:19:b8:c1:c0:91:2f:62:73:46:f5:c9:ad:fd:fd:12:c8:2e: cb:bd:0f:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOo+oa8/j69SoiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk YjhjNzEyNTUtYWNhMS00ZDRlLWE0YTktZTllYzY0YzI3MGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rSGM3rwgmRjUY+BnkMcWlo0Udj418cHXA0B Uyip6GvgKu/0jtoXjnAl7dTnEnBQQRTvpuuPs9zb7t3GFaU1ySfZp9T+U12ICfJh YG3Tzyc1YhttKfU/chjPkPGwXlXO4x+I2y6eyAi9ll+qANR2Q7r2v6Q0YvSpV86E L7+axivRfcLk5RaPjaUFeRCLeOlozTdBVK4H7QzPknAIn/1P/EGYpHWZFsTY+DoX 2umCWmArpKp6lv8rFdt5wY5NC1DhaL89+1pm3qlQaoBUOKXzzXavfmb0mqRCZPL2 B8feRn1deF+7Y5cvN/oYisiUumVI8q3f9DIXmoMed14rqoB8FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAKKZA3anJce5IGhQo9bgwm74bKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI1NDM0YWMtNDRkMi0z ZjZhLTk3OWYtYzAwNzJhMGUxMWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANkpOXkyb2hNjgqF8KWkxQz2pKwPFMfwJO0CSf0Eq6pu3SpOMS0GNZUz C8HhSkKRBsWmI7DsTTXO0tI/rpsSZNur2csoVZLuNpdjMYEeNlGxdtGswXCK8jgN /5Oxndv821wxb0gRcVpzPcUYzp9GBwp1lO/SyxCGdHGwWWNysWY9YC6Vl9IlKv9C t6FKv15TJfB//CiQbFtEzTbliFDMNTRLNLjC5Ty+YVmPVF6Vd3oJVBbl+QVFVXe9 louTFzQhZviZqTh3pbN4P9OOSK2Dqd1aPob4SqLu94qEC8n4sB1RbW8PVeKnVceN KZ8ZuMHAkS9ic0b1ya39/RLILsu9D2k= -----END CERTIFICATE-----Generated at Tue Jul 21 20:10:45 2026 by rpki-client