$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fa285a0-686a-31c7-915d-6423db6a6459.roa File: 5fa285a0-686a-31c7-915d-6423db6a6459.roa (raw, json) Hash identifier: 65flGqR5Bg88BUEww4phvfcMmLNtvgGZCbhr8tI2gqI= Subject key identifier: D7:35:61:60:31:C5:18:7A:A3:9B:5C:05:A1:57:15:5D:BF:70:E0:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119DE098BD36DBEB4CFEE1C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fa285a0-686a-31c7-915d-6423db6a6459.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 73.246.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:e0:98:bd:36:db:eb:4c:fe:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=343303be-5671-4704-8b9c-9fdd142937a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fe:e2:a4:57:f0:1b:ab:b6:82:de:55:36:95: bf:71:ea:c3:f4:46:12:3b:d6:7c:a8:5d:0c:ae:aa: 34:9b:9d:a3:7e:d0:50:e6:af:89:65:b5:e7:d3:bb: bb:c3:83:85:6e:25:a9:ce:05:f5:44:a4:47:f2:f8: 36:b1:a9:82:ee:41:fc:0d:6a:3a:ff:76:bf:45:a3: fa:5f:ee:fa:45:de:f2:63:c6:10:50:aa:13:21:62: 20:b2:2c:f2:83:6c:b5:9d:13:a1:89:1a:a9:4c:98: e3:58:57:bb:6b:b9:f8:8c:88:9f:6d:ef:e4:f3:30: 8a:be:03:fe:f0:0d:a3:bf:79:df:e5:24:72:58:50: 5f:74:1e:b7:d0:91:58:fb:6c:25:26:a4:8c:91:2d: f2:78:42:29:0e:70:5f:f1:48:cb:1d:1b:45:6b:b4: 65:c0:19:6e:2d:9e:c6:54:e9:63:fe:31:8d:79:14: 3a:a6:9e:a2:7f:db:f0:b7:15:79:d0:90:00:65:bf: f3:c2:77:89:5f:ff:0f:86:95:f6:59:ce:40:01:cb: 22:cf:7a:fc:9f:85:84:74:73:35:ae:9b:98:1b:5e: 84:36:ea:59:d0:9c:03:bc:6c:79:f3:9e:1d:ab:6f: 6b:b6:b1:18:f2:a3:24:0b:0d:a5:99:da:6c:19:46: 95:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:35:61:60:31:C5:18:7A:A3:9B:5C:05:A1:57:15:5D:BF:70:E0:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fa285a0-686a-31c7-915d-6423db6a6459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.246.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:ea:ff:d5:1f:f8:5e:a1:04:c4:48:ed:b1:7e:66:0e:85:44: 91:c6:49:3a:51:ad:a7:37:e6:a4:64:70:e7:1d:de:61:62:dd: 87:2d:21:2c:27:0b:7e:8b:b5:c7:3e:ff:fe:55:14:26:3e:98: c3:8c:b1:5e:ee:dd:64:06:1e:9d:e2:ab:d9:3d:97:c9:d8:bc: 30:84:51:72:da:be:ff:c7:72:da:de:ce:23:e6:c2:27:cd:ce: 5a:8e:97:0f:ee:25:fc:87:38:ff:12:16:7e:fd:ef:ac:da:91: fe:a5:55:1c:61:e6:bc:42:e6:1c:10:5f:2b:47:5d:ac:fd:73: 72:da:6e:1d:41:54:54:57:90:db:f7:ca:16:d7:a9:c4:7d:e7: 2a:2c:03:47:0f:57:49:b8:8c:67:98:da:86:49:db:b9:f6:1c: 9a:5a:e4:3b:70:c2:db:07:fa:c8:b9:b2:2c:9c:ae:f1:88:c2: 1a:aa:12:9c:3c:4f:4a:29:c4:ee:18:73:65:a9:5c:66:82:a9: a2:38:9c:16:52:74:2d:89:a0:a4:64:85:b5:1a:f9:f5:bb:07: 9b:6b:0b:93:a8:f2:e5:f8:9d:d4:6f:08:07:68:72:99:fd:82: ed:32:6d:2c:27:f8:da:79:a4:c3:ca:5c:2f:99:d0:be:53:86: 37:30:d1:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RneCYvTbb60z+4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MzQzMzAzYmUtNTY3MS00NzA0LThiOWMtOWZkZDE0MjkzN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif7ipFfwG6u2gt5VNpW/cerD9EYSO9Z8qF0M rqo0m52jftBQ5q+JZbXn07u7w4OFbiWpzgX1RKRH8vg2samC7kH8DWo6/3a/RaP6 X+76Rd7yY8YQUKoTIWIgsizyg2y1nROhiRqpTJjjWFe7a7n4jIifbe/k8zCKvgP+ 8A2jv3nf5SRyWFBfdB630JFY+2wlJqSMkS3yeEIpDnBf8UjLHRtFa7RlwBluLZ7G VOlj/jGNeRQ6pp6if9vwtxV50JAAZb/zwneJX/8PhpX2Wc5AAcsiz3r8n4WEdHM1 rpuYG16ENupZ0JwDvGx5854dq29rtrEY8qMkCw2lmdpsGUaVcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc1YWAxxRh6o5tcBaFXFV2/cOAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWZhMjg1YTAtNjg2YS0z MWM3LTkxNWQtNjQyM2RiNmE2NDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/q/9Uf+F6hBMRI7bF+Zg6FRJHGSTpRrac35qRkcOcd3mFi3YctISwn C36Ltcc+//5VFCY+mMOMsV7u3WQGHp3iq9k9l8nYvDCEUXLavv/HctreziPmwifN zlqOlw/uJfyHOP8SFn7976zakf6lVRxh5rxC5hwQXytHXaz9c3Labh1BVFRXkNv3 yhbXqcR95yosA0cPV0m4jGeY2oZJ27n2HJpa5DtwwtsH+si5siycrvGIwhqqEpw8 T0opxO4Yc2WpXGaCqaI4nBZSdC2JoKRkhbUa+fW7B5trC5Oo8uX4ndRvCAdocpn9 gu0ybSwn+Np5pMPKXC+Z0L5Thjcw0W4= -----END CERTIFICATE-----Generated at Sat Sep 5 12:43:07 2026 by rpki-client