$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a70ba91-e357-3ca8-8159-358ce9f225e1.roa File: 4a70ba91-e357-3ca8-8159-358ce9f225e1.roa (raw, json) Hash identifier: NLb980Ujomr6/DpX73scNmJlBg1D6AMPAZf2S93XPL4= Subject key identifier: 77:C5:57:40:AC:C9:17:A4:35:DE:D3:61:15:71:DB:CD:C0:2F:E0:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4DBA409FDDA74C32404100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a70ba91-e357-3ca8-8159-358ce9f225e1.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 73.240.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:ba:40:9f:dd:a7:4c:32:40:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=52831c5c-c156-481d-b0d6-3a8ba5c20b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:25:b6:dd:9b:b4:ca:61:8e:e0:ce:ee:77:bd: 90:57:76:30:60:b9:3a:54:ab:bb:ba:95:cd:5a:32: ec:29:74:c0:08:e7:b6:2e:09:5e:1f:eb:18:72:66: 7b:a8:0a:56:45:0c:d7:3e:32:a0:be:9e:6a:74:5a: a3:64:78:9e:3b:60:b9:04:e4:7f:a7:5b:bb:1b:bd: 68:4e:0c:47:0f:e7:de:5f:7c:b5:2f:1e:86:aa:05: 1b:eb:4a:69:93:fe:e5:ce:58:04:f4:44:96:71:72: 21:42:4f:04:16:2e:e8:18:25:46:09:b3:f9:67:33: 95:d8:01:ed:19:e5:cf:49:a1:0e:2f:d2:ee:92:a3: 1e:65:c8:8f:50:21:d4:40:22:88:ba:12:b8:48:99: fc:85:ae:c4:e7:3f:4b:fd:1d:25:85:62:72:12:bc: d4:2c:dd:94:b8:92:3b:a7:54:ae:5c:cd:b0:67:19: 80:42:7e:4a:88:68:84:74:96:8f:7a:82:b2:e9:1b: e8:3b:cb:8e:3b:c3:01:8e:19:d4:66:78:6d:a1:c5: 07:ff:85:f0:20:f9:de:79:06:ee:fa:08:a7:5a:a8: e9:99:d4:f8:a1:8a:ae:68:96:43:99:ee:04:3c:08: cc:02:41:0c:19:7d:c8:e6:c0:45:90:7b:a3:ae:37: 99:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C5:57:40:AC:C9:17:A4:35:DE:D3:61:15:71:DB:CD:C0:2F:E0:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a70ba91-e357-3ca8-8159-358ce9f225e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.240.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:45:39:86:c1:09:33:dc:40:e3:e6:6e:ba:20:b9:f5:c4:4e: 1f:24:b9:e9:b3:07:48:3b:67:3a:cc:e0:69:2e:ea:c8:79:7d: f5:3f:66:89:20:f7:72:97:d8:0d:8e:55:21:75:7e:34:bb:0e: 25:c8:2e:c8:25:e3:d1:60:3c:db:e8:73:c2:d4:92:fc:a8:f8: 6c:44:17:47:4d:2e:91:e0:b6:5b:10:03:b9:ba:e2:30:79:c7: 40:48:b9:e6:81:13:d6:00:e7:ac:d6:f6:b6:0c:9d:ca:ca:b7: 60:74:f7:4b:aa:b0:de:2c:e4:3d:ef:ed:1f:00:d5:7b:99:bc: 07:2b:3c:ba:70:27:65:31:a9:a5:b5:b6:fb:a2:9e:76:83:f0: 64:97:c0:72:4c:1b:e3:5c:23:63:4c:d3:92:06:3d:5a:46:82: 95:20:8d:df:d6:dc:ab:3e:36:58:f5:d1:67:6f:c9:84:26:0e: 9d:62:85:a4:27:8e:f1:26:7a:2f:7e:3e:2d:75:59:fa:cf:9c: 54:1a:5b:75:4f:93:80:9a:84:74:ec:eb:2d:6d:eb:4d:4c:67: 4f:af:6a:50:7d:5e:92:7e:63:b8:a6:8e:a2:8b:19:e0:76:29: 53:e0:33:ff:c9:39:df:ab:e7:44:46:78:c4:03:17:ef:dc:1a: 9e:54:37:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TbpAn92nTDJAQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NTI4MzFjNWMtYzE1Ni00ODFkLWIwZDYtM2E4YmE1YzIwYjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiW23Zu0ymGO4M7ud72QV3YwYLk6VKu7upXN WjLsKXTACOe2LgleH+sYcmZ7qApWRQzXPjKgvp5qdFqjZHieO2C5BOR/p1u7G71o TgxHD+feX3y1Lx6GqgUb60ppk/7lzlgE9ESWcXIhQk8EFi7oGCVGCbP5ZzOV2AHt GeXPSaEOL9LukqMeZciPUCHUQCKIuhK4SJn8ha7E5z9L/R0lhWJyErzULN2UuJI7 p1SuXM2wZxmAQn5KiGiEdJaPeoKy6RvoO8uOO8MBjhnUZnhtocUH/4XwIPneeQbu +ginWqjpmdT4oYquaJZDme4EPAjMAkEMGX3I5sBFkHujrjeZ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfFV0CsyRekNd7TYRVx283AL+CRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGE3MGJhOTEtZTM1Ny0z Y2E4LTgxNTktMzU4Y2U5ZjIyNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASfAOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhFOYbBCTPcQOPmbrogufXETh8kuemzB0g7ZzrM4Gku6sh5ffU/Zokg 93KX2A2OVSF1fjS7DiXILsgl49FgPNvoc8LUkvyo+GxEF0dNLpHgtlsQA7m64jB5 x0BIueaBE9YA56zW9rYMncrKt2B090uqsN4s5D3v7R8A1XuZvAcrPLpwJ2UxqaW1 tvuinnaD8GSXwHJMG+NcI2NM05IGPVpGgpUgjd/W3Ks+Nlj10WdvyYQmDp1ihaQn jvEmei9+Pi11WfrPnFQaW3VPk4CahHTs6y1t601MZ0+valB9XpJ+Y7imjqKLGeB2 KVPgM//JOd+r50RGeMQDF+/cGp5UN1E= -----END CERTIFICATE-----Generated at Tue Oct 20 18:24:06 2026 by rpki-client