$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c5e66ef-3844-34ff-a23f-e5e4beb9ea5c.roa File: 4c5e66ef-3844-34ff-a23f-e5e4beb9ea5c.roa (raw, json) Hash identifier: jIc90cQxWpa8PlDT8T7s7lZHCkAtLrrqQQvPfZlQfMY= Subject key identifier: C1:F7:CC:5F:E6:F0:0A:8F:B3:6C:06:6C:79:BD:54:01:5E:91:4A:8A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4DC56F7326FACD1A4A0780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c5e66ef-3844-34ff-a23f-e5e4beb9ea5c.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 73.96.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:c5:6f:73:26:fa:cd:1a:4a:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=8d20bdfe-55a9-4b32-ba5d-5cf98dfa5a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:0e:5d:86:a7:ef:8f:de:a1:21:ef:03:8d: d6:cb:ba:66:de:56:0f:b1:88:ae:d1:46:32:30:fa: bd:41:4c:15:89:e5:22:2f:6b:af:c6:83:9d:ea:d6: 08:e8:3e:3f:9a:cc:df:3a:02:e6:02:c5:94:66:16: f6:6d:45:2f:a5:88:b9:3a:ed:5d:13:d2:51:f4:c4: bc:cd:bf:b4:5b:b3:2b:07:9b:f9:24:48:19:70:4c: c9:49:af:da:11:42:e1:04:25:17:58:ef:c7:03:3e: d5:04:03:75:13:0b:ad:19:68:4b:55:92:f5:00:89: e9:44:06:3e:8e:dc:20:2a:43:cd:4f:93:f8:38:8b: 30:1b:1b:32:90:b4:fc:06:2c:1c:c6:fa:9d:f9:ec: 02:c4:48:03:c0:72:38:96:a1:75:35:48:5d:34:d9: b2:1b:62:7b:5f:dc:33:f3:92:51:97:a9:e7:1a:91: f8:18:11:09:46:0a:3a:4b:f3:e0:8b:19:bd:96:15: 1a:98:aa:75:3d:79:41:03:b7:56:0e:ce:af:bb:17: 7c:e2:5e:68:c0:8a:dc:38:92:64:60:b7:0b:0f:a6: 3b:ba:b0:a2:3d:2f:6c:fc:50:5b:d9:ec:42:96:bb: 22:0c:bc:c7:dc:c5:18:f5:67:a2:77:a1:84:28:ab: d5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F7:CC:5F:E6:F0:0A:8F:B3:6C:06:6C:79:BD:54:01:5E:91:4A:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c5e66ef-3844-34ff-a23f-e5e4beb9ea5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.96.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:22:c2:a0:81:4e:48:46:e6:82:28:f8:3b:15:0c:2e:2c:d5: 30:39:e0:6f:2f:52:a3:8d:0e:11:8f:18:0e:a4:4d:dc:9d:99: a2:2f:e7:b5:d2:a7:20:4d:f6:63:68:fe:0b:48:ef:b7:dd:f0: b9:0a:6b:61:36:4d:ac:da:44:6f:18:c2:b8:7c:fd:57:58:1c: 4c:18:3f:10:c2:84:ed:8e:8e:e0:c9:b0:3d:7e:48:6e:93:1a: e8:d8:cb:17:8e:24:60:76:6b:52:91:94:84:69:dd:29:a6:55: d8:d1:0c:7e:07:8b:0d:7f:7c:94:7a:48:f2:9e:75:6f:75:ad: 4b:d4:fd:52:17:a0:27:2d:89:66:9c:ef:70:67:69:2b:fe:cb: 0a:43:12:99:c5:c3:c9:d0:cd:6b:b5:87:16:b4:b2:d6:cf:ab: 9e:1f:a9:14:aa:f6:2d:15:66:c4:cd:91:95:9c:87:ab:d9:9c: ab:3f:7c:a5:6a:b1:27:8e:a3:3c:ca:f7:ec:8f:dd:5d:af:16: 50:b1:d0:e3:9c:fe:c1:cf:93:db:25:4e:db:15:f2:be:17:64: d2:88:b9:3f:c3:c0:94:84:5c:59:17:81:b9:6f:56:02:fa:4a: 55:6d:c2:c4:c9:9f:39:05:d5:3e:fa:ef:6e:4c:1c:4d:b5:6a: 97:32:31:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TcVvcyb6zRpKB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk OGQyMGJkZmUtNTVhOS00YjMyLWJhNWQtNWNmOThkZmE1YThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf4OXYan74/eoSHvA43Wy7pm3lYPsYiu0UYy MPq9QUwVieUiL2uvxoOd6tYI6D4/mszfOgLmAsWUZhb2bUUvpYi5Ou1dE9JR9MS8 zb+0W7MrB5v5JEgZcEzJSa/aEULhBCUXWO/HAz7VBAN1EwutGWhLVZL1AInpRAY+ jtwgKkPNT5P4OIswGxsykLT8Biwcxvqd+ewCxEgDwHI4lqF1NUhdNNmyG2J7X9wz 85JRl6nnGpH4GBEJRgo6S/Pgixm9lhUamKp1PXlBA7dWDs6vuxd84l5owIrcOJJk YLcLD6Y7urCiPS9s/FBb2exClrsiDLzH3MUY9Weid6GEKKvVaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH3zF/m8AqPs2wGbHm9VAFekUqKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGM1ZTY2ZWYtMzg0NC0z NGZmLWEyM2YtZTVlNGJlYjllYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSWCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkiwqCBTkhG5oIo+DsVDC4s1TA54G8vUqONDhGPGA6kTdydmaIv57XS pyBN9mNo/gtI77fd8LkKa2E2TazaRG8Ywrh8/VdYHEwYPxDChO2OjuDJsD1+SG6T GujYyxeOJGB2a1KRlIRp3SmmVdjRDH4Hiw1/fJR6SPKedW91rUvU/VIXoCctiWac 73BnaSv+ywpDEpnFw8nQzWu1hxa0stbPq54fqRSq9i0VZsTNkZWch6vZnKs/fKVq sSeOozzK9+yP3V2vFlCx0OOc/sHPk9slTtsV8r4XZNKIuT/DwJSEXFkXgblvVgL6 SlVtwsTJnzkF1T76725MHE21apcyMRQ= -----END CERTIFICATE-----Generated at Wed Oct 21 10:14:38 2026 by rpki-client