$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32f24a34-dbf2-3031-a12f-ef8f769fbf7e.roa File: 32f24a34-dbf2-3031-a12f-ef8f769fbf7e.roa (raw, json) Hash identifier: PqCmAY9Mp9QSvqiMY3c8hl0r43RbcYJWBQP0yAyqss4= Subject key identifier: 0E:8B:F4:D1:0A:8B:3E:CC:4F:79:34:D2:B8:9E:D2:64:0B:70:86:6F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4FD20511B319D07D2CE580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32f24a34-dbf2-3031-a12f-ef8f769fbf7e.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 73.206.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:d2:05:11:b3:19:d0:7d:2c:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=20fc0fdf-526a-48bb-aa8b-0d3de6a94043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:0c:4b:ff:6d:94:6a:7e:ed:ca:43:b5:e7: a8:df:93:21:8b:ee:aa:b1:b5:9b:2a:b2:08:c9:f4: 33:c8:ab:28:47:7e:66:ed:da:98:2e:52:86:b3:47: 60:f6:52:11:e9:be:86:af:59:72:e2:c0:14:a8:41: 24:24:c2:29:06:d1:bf:b7:09:10:1c:63:37:2d:68: ca:1d:45:d0:b9:a5:d1:1f:a9:f9:8b:f4:72:d4:a1: 0e:f1:41:6a:4f:f9:1d:aa:34:20:90:a8:97:ef:ee: e5:56:c0:25:8b:03:ba:38:88:8d:31:04:a9:6b:dc: 6a:f9:b0:b2:4b:8f:bb:74:c9:f8:51:e0:84:bc:e2: b9:a5:98:a0:9f:0f:2b:fe:9d:4a:23:c3:f4:ce:f3: a4:1e:6a:f0:5c:5b:b3:e8:68:06:fe:65:7d:75:77: 96:20:8e:ed:69:e1:a6:5e:06:88:f5:ce:1c:b6:e4: 6e:34:d7:b6:70:1b:59:a1:e0:d6:e3:ba:4b:31:13: 95:46:55:6b:04:13:89:34:b6:ca:83:c2:e2:17:ee: 48:44:ea:90:1a:f7:8d:8b:c5:85:32:7f:9d:57:14: b3:e6:a4:fc:07:d1:81:5e:92:f1:a7:72:60:0d:a7: 5a:58:f6:22:b8:79:ff:12:c1:54:d0:a2:4e:e9:18: e5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8B:F4:D1:0A:8B:3E:CC:4F:79:34:D2:B8:9E:D2:64:0B:70:86:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32f24a34-dbf2-3031-a12f-ef8f769fbf7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.206.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:5c:36:4f:20:af:94:10:9c:4f:9b:f2:e6:16:e2:09:43:04: 75:cc:3a:6e:6f:d0:78:fb:a0:14:04:77:6e:d4:4a:b6:a5:a3: 00:b5:15:85:07:c6:b8:c1:01:5e:f1:ff:80:0a:8c:06:a0:da: 44:1f:03:0e:de:31:d4:5c:82:10:0d:97:a5:26:2a:23:6b:91: 6a:15:66:0e:11:72:40:af:73:2c:fd:cb:e0:e0:4e:48:ba:31: df:fb:88:d5:f1:33:ce:0e:f8:4d:1c:4d:05:22:19:f4:56:70: 42:80:ac:ae:4f:0a:e3:63:07:a2:dc:5a:3b:8f:6a:57:c5:d3: 57:05:47:99:cb:1f:d1:74:f4:5d:20:c1:8c:26:a6:a0:0a:62: 95:66:9d:22:4d:8c:02:b4:51:ac:0a:cd:0b:a1:eb:52:73:ae: 9e:33:51:71:c4:f1:d4:3c:f8:22:d0:0a:e0:03:f5:3f:62:34: ed:29:55:8f:dd:80:6a:20:6c:b6:ae:be:7e:79:8c:1f:bb:54: 2c:e1:db:81:cb:90:74:a0:7d:31:99:4d:77:8d:13:4a:c1:af: b8:ee:93:33:60:e0:1d:9f:55:92:82:af:89:ad:9d:56:b4:3e: a9:ca:a3:8f:39:ff:53:0a:ab:2b:35:76:c0:9d:35:ea:5a:7c: 71:57:26:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T9IFEbMZ0H0s5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MjBmYzBmZGYtNTI2YS00OGJiLWFhOGItMGQzZGU2YTk0MDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtkMS/9tlGp+7cpDteeo35Mhi+6qsbWbKrII yfQzyKsoR35m7dqYLlKGs0dg9lIR6b6Gr1ly4sAUqEEkJMIpBtG/twkQHGM3LWjK HUXQuaXRH6n5i/Ry1KEO8UFqT/kdqjQgkKiX7+7lVsAliwO6OIiNMQSpa9xq+bCy S4+7dMn4UeCEvOK5pZignw8r/p1KI8P0zvOkHmrwXFuz6GgG/mV9dXeWII7taeGm XgaI9c4ctuRuNNe2cBtZoeDW47pLMROVRlVrBBOJNLbKg8LiF+5IROqQGveNi8WF Mn+dVxSz5qT8B9GBXpLxp3JgDadaWPYiuHn/EsFU0KJO6RjleQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6L9NEKiz7MT3k00rie0mQLcIZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzJmMjRhMzQtZGJmMi0z MDMxLWExMmYtZWY4Zjc2OWZiZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASc6qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxcNk8gr5QQnE+b8uYW4glDBHXMOm5v0Hj7oBQEd27USralowC1FYUH xrjBAV7x/4AKjAag2kQfAw7eMdRcghANl6UmKiNrkWoVZg4RckCvcyz9y+DgTki6 Md/7iNXxM84O+E0cTQUiGfRWcEKArK5PCuNjB6LcWjuPalfF01cFR5nLH9F09F0g wYwmpqAKYpVmnSJNjAK0UawKzQuh61Jzrp4zUXHE8dQ8+CLQCuAD9T9iNO0pVY/d gGogbLauvn55jB+7VCzh24HLkHSgfTGZTXeNE0rBr7jukzNg4B2fVZKCr4mtnVa0 PqnKo485/1MKqys1dsCdNepafHFXJkE= -----END CERTIFICATE-----Generated at Wed Oct 21 03:15:01 2026 by rpki-client