$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e25030e-aaf1-3468-9bad-6f9f524442b3.roa File: 3e25030e-aaf1-3468-9bad-6f9f524442b3.roa (raw, json) Hash identifier: lft8+bwEt2o7w5hePxROqZmCLUapdFMN8hig1yo1oO8= Subject key identifier: 61:12:AC:21:E9:9D:B5:14:70:75:18:61:20:80:45:00:56:16:1D:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E81164ABA716AF66A0680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e25030e-aaf1-3468-9bad-6f9f524442b3.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 73.161.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:81:16:4a:ba:71:6a:f6:6a:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=5fd86047-95bc-4ed7-8f80-70ce2ae22424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:90:b6:d8:17:02:3e:d7:af:e4:8a:73:16:4b: 62:3a:17:32:a7:64:6c:82:1c:c5:39:1d:a3:86:0d: e4:37:76:1f:42:89:a0:45:dc:02:ee:a6:9a:95:88: 65:19:33:f6:e6:69:8b:1e:9c:8a:c5:86:fa:b4:94: 39:3d:8e:b8:08:ab:44:93:1e:7e:32:1e:31:42:8e: 5a:b3:d0:0a:07:a1:f0:b7:c3:98:86:87:6c:91:9a: 2f:48:f3:d5:f1:90:2a:9f:7e:cf:12:9b:ae:5d:e2: 31:b4:62:4e:95:7d:50:5e:12:2e:ae:90:55:7d:3f: 49:c1:63:9e:7a:6a:a2:7d:b1:4e:e2:95:d6:28:e3: 8e:d5:11:9b:f6:9d:10:b8:6b:ec:8b:38:e4:ee:77: e7:58:29:b7:c6:8c:11:07:fe:a9:2c:0e:3a:05:cb: e7:4e:c1:ce:d3:e8:24:91:17:61:56:7b:12:ff:54: 5d:21:1d:b8:3c:53:c5:7a:99:67:db:af:de:b0:ca: 30:72:39:02:f8:2d:1f:2c:42:02:cd:dc:34:24:85: f8:22:42:f1:23:e6:26:92:7f:51:05:e8:67:6d:68: bd:c2:cd:a5:b8:dd:58:79:f2:02:a6:2d:02:d7:4c: 43:c7:ad:9c:f9:a0:52:89:57:1b:77:21:45:c8:2c: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:12:AC:21:E9:9D:B5:14:70:75:18:61:20:80:45:00:56:16:1D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e25030e-aaf1-3468-9bad-6f9f524442b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:2a:42:12:e6:f3:23:0f:63:02:1c:76:c6:b3:f3:fb:81:8a: ce:85:c0:9c:ac:11:04:19:57:b2:be:92:5f:8f:79:07:8f:94: 49:cf:ae:dc:55:65:04:96:26:b7:c7:67:9b:14:00:5c:10:ce: ed:f7:95:77:c5:e2:45:52:88:fa:ff:cf:db:d6:84:2c:26:1b: 92:5c:56:49:eb:40:92:c9:fb:f4:48:e1:70:a6:53:66:4c:4a: 97:65:bc:33:5c:d8:56:99:85:7f:c3:06:b3:24:dc:80:70:08: 51:e8:58:f4:db:21:cd:3c:0d:4b:1a:88:32:63:ed:3c:0b:8d: be:52:3e:79:c5:15:69:23:c9:7a:3c:79:0a:e6:77:7f:48:39: c4:a4:b5:ae:42:85:3a:d0:eb:2b:f0:ca:e0:3c:ac:4d:34:57: 00:2a:03:58:c4:87:bc:fc:1d:b3:2e:7b:23:08:10:32:74:4e: d4:98:2f:66:c8:b2:d9:d0:81:0f:43:77:c5:de:9e:4d:4a:4c: f0:75:b1:6c:5b:ae:e5:99:ce:98:c6:4a:be:52:77:00:45:71: 6f:1c:95:79:df:5c:7f:2b:05:a3:8a:49:ef:da:ac:f1:2c:ed: 7d:6c:f3:c5:c8:10:86:0e:07:4d:64:b7:f9:2f:92:65:93:20: b6:98:9a:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96ToEWSrpxavZqBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NWZkODYwNDctOTViYy00ZWQ3LThmODAtNzBjZTJhZTIyNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopC22BcCPtev5IpzFktiOhcyp2RsghzFOR2j hg3kN3YfQomgRdwC7qaalYhlGTP25mmLHpyKxYb6tJQ5PY64CKtEkx5+Mh4xQo5a s9AKB6Hwt8OYhodskZovSPPV8ZAqn37PEpuuXeIxtGJOlX1QXhIurpBVfT9JwWOe emqifbFO4pXWKOOO1RGb9p0QuGvsizjk7nfnWCm3xowRB/6pLA46BcvnTsHO0+gk kRdhVnsS/1RdIR24PFPFepln26/esMowcjkC+C0fLEICzdw0JIX4IkLxI+Ymkn9R BehnbWi9ws2luN1YefICpi0C10xDx62c+aBSiVcbdyFFyCyogQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGESrCHpnbUUcHUYYSCARQBWFh39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2UyNTAzMGUtYWFmMS0z NDY4LTliYWQtNmY5ZjUyNDQ0MmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASaHfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoqQhLm8yMPYwIcdsaz8/uBis6FwJysEQQZV7K+kl+PeQePlEnPrtxV ZQSWJrfHZ5sUAFwQzu33lXfF4kVSiPr/z9vWhCwmG5JcVknrQJLJ+/RI4XCmU2ZM SpdlvDNc2FaZhX/DBrMk3IBwCFHoWPTbIc08DUsaiDJj7TwLjb5SPnnFFWkjyXo8 eQrmd39IOcSkta5ChTrQ6yvwyuA8rE00VwAqA1jEh7z8HbMueyMIEDJ0TtSYL2bI stnQgQ9Dd8Xenk1KTPB1sWxbruWZzpjGSr5SdwBFcW8clXnfXH8rBaOKSe/arPEs 7X1s88XIEIYOB01kt/kvkmWTILaYmvo= -----END CERTIFICATE-----Generated at Fri Oct 23 18:57:07 2026 by rpki-client