$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4efa377f-ef40-3fdc-b59a-316b4dc6a1b3.roa File: 4efa377f-ef40-3fdc-b59a-316b4dc6a1b3.roa (raw, json) Hash identifier: xRNfGr25YEwdz8Bh7bGSuedB+syYwXPFdqYjBD3LpcY= Subject key identifier: 47:3C:38:3C:98:D0:D0:C4:32:57:E0:A6:1F:A1:10:A5:32:03:35:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E36001ECCF52FFF30DC6C4D40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4efa377f-ef40-3fdc-b59a-316b4dc6a1b3.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 33662 IP address blocks: 73.232.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:00:1e:cc:f5:2f:ff:30:dc:6c:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=780c1b75-abda-4c82-a121-420bc997bf02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f0:e0:9f:9d:4b:4a:23:24:ae:d6:e6:f3:c6: 16:89:f6:16:13:f4:4d:c5:0b:e0:b9:18:9c:83:9c: 99:2f:c4:0d:54:d8:e6:59:7e:26:ff:ed:f1:02:e0: fb:32:e6:16:b7:de:cd:75:b7:9f:ea:77:75:92:4f: 9a:5b:dd:1f:37:87:d2:7c:79:bc:12:2c:d7:ce:17: e0:fb:5a:e9:aa:90:a8:2d:6f:7c:8f:f6:cd:51:f9: 55:59:52:f4:3d:38:db:67:e3:2b:60:51:2b:07:ab: 4e:72:65:4a:f3:dd:2c:7c:8a:93:5e:9e:52:47:db: 9c:c5:5d:96:79:22:02:74:dd:53:30:aa:85:72:49: 5a:d3:a4:69:0b:99:9e:79:3d:40:94:cc:97:3c:af: bf:6e:ec:b3:78:00:d8:56:ac:38:36:81:99:79:15: cd:d1:25:2e:c2:ff:b3:56:d6:94:88:d2:46:69:76: d3:37:c7:2e:c4:96:fc:09:8c:19:34:7c:2f:f2:d1: 82:fa:0d:6f:51:ad:98:e1:03:fe:9b:58:f2:51:d2: 52:42:c7:25:74:48:e7:f1:36:ee:d9:79:6b:86:41: e2:a0:d7:50:78:e8:c4:52:20:03:0e:ff:db:00:ca: 64:fc:2e:da:a6:ef:d3:d1:2e:37:84:ff:77:65:b6: a4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3C:38:3C:98:D0:D0:C4:32:57:E0:A6:1F:A1:10:A5:32:03:35:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4efa377f-ef40-3fdc-b59a-316b4dc6a1b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.232.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:08:d8:c5:9e:c5:ff:95:87:50:ee:f1:91:1c:8f:72:11:2c: 52:0a:58:6e:c6:1d:96:62:a3:17:52:6a:d5:a2:ed:9e:83:23: 52:57:06:ca:ad:23:e4:74:23:12:d5:bd:28:23:ed:e7:a7:ad: ec:1b:2b:e5:d5:3a:fd:10:b5:c1:88:15:09:c4:e9:36:7d:f9: 23:9e:15:3e:a1:0d:13:a8:08:b2:35:2c:98:a8:91:10:62:d6: 34:7b:24:e0:a6:02:8b:b7:5b:ec:09:e1:c5:f2:6e:89:80:e1: e0:4e:ce:ad:8d:43:c4:77:06:72:3b:5c:c7:f2:4f:ed:92:e2: 3b:b6:1c:1b:cb:6f:1c:9f:3e:67:80:23:1a:16:8e:8d:25:dc: a9:c2:c7:bf:0a:ff:9e:14:90:6c:c6:3b:78:ad:d3:f6:01:79: 02:07:09:88:6a:77:83:c4:4a:2d:e1:bc:75:91:57:00:3c:8c: 89:7b:86:da:0d:1b:e5:4f:ce:a2:11:c3:6c:b7:7d:74:79:e6: 72:10:06:8a:93:f7:04:95:06:0b:dd:bd:73:2e:38:46:0f:74: 3a:5e:82:b2:9d:9d:54:4f:cb:51:67:f7:39:ff:06:0f:b9:ef: f0:10:16:e0:9a:a6:5f:25:d4:3e:e5:91:17:a2:a2:87:3d:36: 03:de:21:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AB7M9S//MNxsTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk NzgwYzFiNzUtYWJkYS00YzgyLWExMjEtNDIwYmM5OTdiZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/Dgn51LSiMkrtbm88YWifYWE/RNxQvguRic g5yZL8QNVNjmWX4m/+3xAuD7MuYWt97Ndbef6nd1kk+aW90fN4fSfHm8EizXzhfg +1rpqpCoLW98j/bNUflVWVL0PTjbZ+MrYFErB6tOcmVK890sfIqTXp5SR9ucxV2W eSICdN1TMKqFckla06RpC5meeT1AlMyXPK+/buyzeADYVqw4NoGZeRXN0SUuwv+z VtaUiNJGaXbTN8cuxJb8CYwZNHwv8tGC+g1vUa2Y4QP+m1jyUdJSQscldEjn8Tbu 2XlrhkHioNdQeOjEUiADDv/bAMpk/C7apu/T0S43hP93Zbak4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEc8ODyY0NDEMlfgph+hEKUyAzUxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGVmYTM3N2YtZWY0MC0z ZmRjLWI1OWEtMzE2YjRkYzZhMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSegoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwI2MWexf+Vh1Du8ZEcj3IRLFIKWG7GHZZioxdSatWi7Z6DI1JXBsqt I+R0IxLVvSgj7eenrewbK+XVOv0QtcGIFQnE6TZ9+SOeFT6hDROoCLI1LJiokRBi 1jR7JOCmAou3W+wJ4cXybomA4eBOzq2NQ8R3BnI7XMfyT+2S4ju2HBvLbxyfPmeA IxoWjo0l3KnCx78K/54UkGzGO3it0/YBeQIHCYhqd4PESi3hvHWRVwA8jIl7htoN G+VPzqIRw2y3fXR55nIQBoqT9wSVBgvdvXMuOEYPdDpegrKdnVRPy1Fn9zn/Bg+5 7/AQFuCapl8l1D7lkReiooc9NgPeIZs= -----END CERTIFICATE-----Generated at Tue Jul 21 22:40:43 2026 by rpki-client