$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d9063c-f1be-3864-8d5a-37aef0ce1bad.roa File: 34d9063c-f1be-3864-8d5a-37aef0ce1bad.roa (raw, json) Hash identifier: gfpX9M76rwsBicO0Uaqzvn0+th7vUaBRzzxN4K39Czs= Subject key identifier: 1A:D6:9C:BB:85:29:72:60:C2:A6:7B:07:25:EA:30:AF:64:79:3C:5E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E801F99841E88F26AE820 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d9063c-f1be-3864-8d5a-37aef0ce1bad.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 73.161.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:80:1f:99:84:1e:88:f2:6a:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=bad9014a-25c2-4964-bf41-6be826de91b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a5:f0:9b:b5:b9:cc:b1:04:20:e7:eb:22:b7: b3:aa:28:b9:9e:5d:38:fd:ba:6f:02:4e:04:d5:a5: 53:90:ad:f6:0e:0a:ea:10:39:81:a4:f2:fe:00:76: 55:8b:22:f0:32:45:25:f2:cd:36:f0:34:01:f7:5a: da:d9:b4:af:d5:67:9d:6a:c1:5d:01:46:52:37:12: 65:cb:85:0a:c4:b2:70:87:e8:11:da:39:80:68:91: d2:05:07:90:5a:1d:33:cd:5b:2d:a6:68:a3:35:e9: d4:e7:f6:cd:26:fa:c4:8a:28:6a:33:06:14:13:72: 79:04:c2:9b:96:6c:d2:fa:11:cd:ac:e1:a4:d2:cf: 1c:7f:e6:f9:25:ad:18:07:07:84:82:f6:76:3c:57: 23:b3:ae:4d:20:15:56:b6:06:73:31:0c:85:78:b6: 3c:74:ae:94:c8:2b:6c:1f:88:32:28:6d:4d:5a:c5: ac:18:4d:43:37:18:41:b8:fd:12:db:8c:17:87:1a: 78:37:79:0b:fa:ce:ee:b6:99:06:e6:5c:07:c5:fd: 19:c3:96:f3:9f:fc:86:43:5c:95:6f:d3:fe:e4:c2: 88:30:5b:ca:54:86:54:ca:6e:cf:40:47:b6:cb:6f: a5:5a:7e:6a:55:a7:4a:a8:7c:04:94:35:85:b9:f0: 17:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D6:9C:BB:85:29:72:60:C2:A6:7B:07:25:EA:30:AF:64:79:3C:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d9063c-f1be-3864-8d5a-37aef0ce1bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:b9:1c:e4:10:2c:f7:f1:39:dc:02:87:1b:d3:6b:d1:89:ea: db:9f:2d:1e:18:e9:54:c0:c6:1d:09:24:1d:6d:31:24:7d:ef: c0:0c:9a:14:50:b1:68:03:cf:58:19:53:e8:8e:71:7c:a1:36: a2:8b:07:b4:43:ab:5a:10:bf:ad:46:67:49:b7:99:05:83:bf: 44:a2:9c:e2:6d:4b:5d:d6:b8:75:82:27:42:d5:bc:c2:a5:6e: 63:26:2f:96:c7:d9:76:bb:4a:e8:a5:af:6d:a0:dc:68:13:d9: 36:0d:ea:52:f6:57:95:84:fa:10:42:37:f4:a7:a5:cb:ec:1b: 83:cc:e8:99:d3:df:58:53:44:21:41:0f:1a:44:9d:a6:6f:37: c2:54:b0:e1:b8:2a:c6:22:6e:79:bb:f7:fb:a9:1f:9f:d1:6b: a9:9d:57:c3:7b:63:f1:2d:7a:41:3c:21:bf:70:78:76:9d:3f: 08:3f:74:88:f9:2f:ae:21:7c:a0:78:e8:89:03:9c:74:59:d9: fe:b6:09:83:8d:f2:cd:36:10:74:b1:6d:ff:10:3b:63:61:ba: 0f:f8:5c:14:30:d7:9c:00:ff:dd:7d:ac:f5:b6:68:25:af:6f: de:0f:0f:65:5d:da:71:52:e6:7d:f2:61:4b:9f:37:06:4e:9c: a0:33:7f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96ToAfmYQeiPJq6CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YmFkOTAxNGEtMjVjMi00OTY0LWJmNDEtNmJlODI2ZGU5MWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KXwm7W5zLEEIOfrIrezqii5nl04/bpvAk4E 1aVTkK32DgrqEDmBpPL+AHZViyLwMkUl8s028DQB91ra2bSv1WedasFdAUZSNxJl y4UKxLJwh+gR2jmAaJHSBQeQWh0zzVstpmijNenU5/bNJvrEiihqMwYUE3J5BMKb lmzS+hHNrOGk0s8cf+b5Ja0YBweEgvZ2PFcjs65NIBVWtgZzMQyFeLY8dK6UyCts H4gyKG1NWsWsGE1DNxhBuP0S24wXhxp4N3kL+s7utpkG5lwHxf0Zw5bzn/yGQ1yV b9P+5MKIMFvKVIZUym7PQEe2y2+lWn5qVadKqHwElDWFufAX9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrWnLuFKXJgwqZ7ByXqMK9keTxeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzRkOTA2M2MtZjFiZS0z ODY0LThkNWEtMzdhZWYwY2UxYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKe5HOQQLPfxOdwChxvTa9GJ6tufLR4Y6VTAxh0JJB1tMSR978AMmhRQ sWgDz1gZU+iOcXyhNqKLB7RDq1oQv61GZ0m3mQWDv0SinOJtS13WuHWCJ0LVvMKl bmMmL5bH2Xa7Suilr22g3GgT2TYN6lL2V5WE+hBCN/SnpcvsG4PM6JnT31hTRCFB DxpEnaZvN8JUsOG4KsYibnm79/upH5/Ra6mdV8N7Y/EtekE8Ib9weHadPwg/dIj5 L64hfKB46IkDnHRZ2f62CYON8s02EHSxbf8QO2Nhug/4XBQw15wA/919rPW2aCWv b94PD2Vd2nFS5n3yYUufNwZOnKAzf/k= -----END CERTIFICATE-----Generated at Tue Oct 27 17:32:39 2026 by rpki-client