$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5436a3fc-4fc0-3d25-b794-c0f731a01dc3.roa File: 5436a3fc-4fc0-3d25-b794-c0f731a01dc3.roa (raw, json) Hash identifier: 1uVeqiAdrTFN8xABNGNcCJoc6Khly+o3b7XCx20PmnU= Subject key identifier: C8:9D:E3:CD:F4:8C:39:3B:52:4B:FB:84:F7:AF:8D:67:B2:30:40:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4EF9C40FC2EA77CCF2D300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5436a3fc-4fc0-3d25-b794-c0f731a01dc3.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33490 IP address blocks: 73.96.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:f9:c4:0f:c2:ea:77:cc:f2:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=24ba012c-eab8-4b86-bd77-7ce9b38085a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:61:74:54:c1:d1:6e:65:e5:4e:bb:89:f4: 26:d7:f0:b9:7e:80:cc:36:5d:84:d7:dc:6a:8e:c5: da:76:a6:d3:8a:b9:d2:9a:64:4d:49:41:ed:19:ee: a7:29:57:18:45:b1:87:9d:6e:e0:9a:cf:77:b8:c1: 3d:fa:5d:ae:c4:95:50:e2:d7:b8:d1:3b:12:7a:d5: 19:cf:ff:04:ca:78:e0:3c:5e:57:8d:f8:53:a9:47: bf:ab:bb:f4:7f:be:88:be:8a:8b:5c:da:73:7f:5d: 47:fb:b7:8a:3f:99:2c:9b:c0:1c:06:83:54:1d:5b: 90:1c:08:4d:48:2a:34:de:c9:2e:f3:9d:83:16:49: b3:10:ee:d5:68:cd:5f:59:5b:fd:8d:3c:a0:16:5a: f3:b0:2f:ac:42:0e:7f:20:0e:74:b9:ea:bc:f1:cd: 8a:f3:30:f3:fe:0f:51:b7:ff:8d:b5:f5:45:7f:12: a5:ca:5d:ae:f4:e4:97:6e:8c:57:ea:8f:94:5f:6d: d1:33:cc:8d:94:59:c0:18:92:46:2f:bd:5a:53:eb: 88:14:c4:11:a7:f0:16:c4:61:21:aa:d6:e2:a1:53: 4c:2e:f8:2d:3a:63:00:e0:07:15:0c:7d:2a:28:f5: 29:64:b3:98:7a:97:d4:36:2b:0a:aa:dd:0d:26:e0: a7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9D:E3:CD:F4:8C:39:3B:52:4B:FB:84:F7:AF:8D:67:B2:30:40:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5436a3fc-4fc0-3d25-b794-c0f731a01dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.96.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:af:63:f7:ea:ca:32:6f:69:71:e5:56:c4:8e:17:64:26:f5: b9:c0:46:dc:92:0d:60:42:e1:25:6e:f4:45:f8:e3:bc:11:b4: 3b:3e:f4:7d:1c:a4:84:99:9c:66:69:c2:35:19:af:6e:db:3a: 8b:54:2f:26:a7:a2:9c:bf:08:10:a0:4b:c5:ce:f8:18:8b:93: 2f:ea:00:72:18:15:b6:7a:cb:09:6b:39:80:c9:0f:6e:18:91: 5a:da:83:e4:9d:e7:44:1a:20:8a:b6:df:21:c1:f7:e3:a4:35: 9f:06:17:ee:82:e1:0d:20:00:e3:4d:37:09:73:bf:c3:d4:10: 83:15:7d:f7:04:6a:99:20:90:12:59:1f:db:ee:38:70:f4:b5: 1c:dd:0d:7c:e4:b4:eb:ee:17:ba:af:2c:ac:6e:a5:ce:3b:d5: fe:93:b1:99:cb:df:de:96:55:11:41:ac:9a:f2:28:21:09:d4: 5b:53:ae:ea:58:26:d1:6d:0e:6a:b9:7b:55:d2:3c:44:e8:7b: a9:cc:a4:5b:ac:20:65:fa:9e:d8:d8:0e:63:14:9f:5f:ca:1a: 19:d7:bb:94:b0:69:a5:3f:ce:1c:49:6e:dc:a7:13:42:d6:ac: 5f:96:6f:23:43:41:ae:2c:b2:86:c6:f7:ae:5b:70:31:66:79: 1a:17:80:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TvnED8Lqd8zy0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MjRiYTAxMmMtZWFiOC00Yjg2LWJkNzctN2NlOWIzODA4NWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyNhdFTB0W5l5U67ifQm1/C5foDMNl2E19xq jsXadqbTirnSmmRNSUHtGe6nKVcYRbGHnW7gms93uME9+l2uxJVQ4te40TsSetUZ z/8EynjgPF5XjfhTqUe/q7v0f76IvoqLXNpzf11H+7eKP5ksm8AcBoNUHVuQHAhN SCo03sku852DFkmzEO7VaM1fWVv9jTygFlrzsC+sQg5/IA50ueq88c2K8zDz/g9R t/+NtfVFfxKlyl2u9OSXboxX6o+UX23RM8yNlFnAGJJGL71aU+uIFMQRp/AWxGEh qtbioVNMLvgtOmMA4AcVDH0qKPUpZLOYepfUNisKqt0NJuCncQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMid4830jDk7Ukv7hPevjWeyMEBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQzNmEzZmMtNGZjMC0z ZDI1LWI3OTQtYzBmNzMxYTAxZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSWCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGvY/fqyjJvaXHlVsSOF2Qm9bnARtySDWBC4SVu9EX447wRtDs+9H0c pISZnGZpwjUZr27bOotULyanopy/CBCgS8XO+BiLky/qAHIYFbZ6ywlrOYDJD24Y kVrag+Sd50QaIIq23yHB9+OkNZ8GF+6C4Q0gAONNNwlzv8PUEIMVffcEapkgkBJZ H9vuOHD0tRzdDXzktOvuF7qvLKxupc471f6TsZnL396WVRFBrJryKCEJ1FtTrupY JtFtDmq5e1XSPEToe6nMpFusIGX6ntjYDmMUn1/KGhnXu5SwaaU/zhxJbtynE0LW rF+WbyNDQa4ssobG965bcDFmeRoXgEY= -----END CERTIFICATE-----Generated at Tue Oct 20 18:28:53 2026 by rpki-client