$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8611a1dc-6f74-3072-a0b9-447d82ac2a3a.roa File: 8611a1dc-6f74-3072-a0b9-447d82ac2a3a.roa (raw, json) Hash identifier: KvW0NVIVxDPp8e6ofkalGHuQ+b4QZT1Iypw6ozELTno= Subject key identifier: 7D:C9:5B:17:B6:A1:F6:4C:AC:72:C9:6C:71:6B:6F:19:65:67:09:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E26241EAA6CF7686F7A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8611a1dc-6f74-3072-a0b9-447d82ac2a3a.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7015 IP address blocks: 73.249.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:26:24:1e:aa:6c:f7:68:6f:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=b438f218-3890-4fcc-999f-71bd7dd27fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:50:58:8c:0c:a7:9b:33:de:b9:47:01:d1: 20:53:c2:a8:6b:01:15:da:05:91:b3:2a:ae:95:b5: 2c:d8:e9:4d:ba:4c:dc:eb:7a:75:64:75:31:c5:27: de:56:5c:94:90:76:06:88:30:b4:e5:df:04:06:ed: a4:f0:de:98:8f:1f:2b:b0:e0:5a:ef:28:be:35:41: 5e:4c:fb:96:19:72:d9:c8:60:6a:26:63:1a:52:bf: c9:de:3c:cf:ac:b7:ea:12:bc:e9:23:27:0b:00:4c: 4f:47:b2:80:fc:15:36:1b:c0:0b:d5:20:c4:1c:e8: bd:d9:da:59:91:62:34:e4:5f:15:70:d1:9b:8b:a3: 60:a5:d1:6a:45:39:a6:21:8a:3a:84:6f:17:0b:3a: 9c:20:14:10:91:51:c4:d4:02:c6:44:0f:ce:12:64: 42:26:b9:3c:3e:a9:3a:94:77:a2:8e:01:78:fd:36: 5d:d3:0b:ed:4a:57:fd:0f:ee:21:a2:e8:8a:a7:42: 6a:44:51:60:a8:24:fa:65:2a:9b:54:c2:e4:c7:4d: 94:26:2a:a3:a5:0c:0c:9f:a0:53:7e:78:17:73:aa: fe:43:62:84:71:e5:39:b6:b0:c0:a1:eb:79:49:07: 5b:db:25:f5:4e:f0:30:0a:51:0c:e1:0e:4a:0b:d3: 50:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C9:5B:17:B6:A1:F6:4C:AC:72:C9:6C:71:6B:6F:19:65:67:09:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8611a1dc-6f74-3072-a0b9-447d82ac2a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.249.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:27:2d:ef:f5:ec:45:1a:64:6a:73:f6:fc:9d:b6:70:51:41: e0:b8:09:76:3e:3e:af:02:9c:de:3a:d1:b4:32:1c:91:ca:1b: 61:05:1b:2a:b8:b8:79:a2:3c:68:57:c7:79:02:3b:e6:2b:2c: f9:b1:19:af:8e:41:3d:29:f7:36:ce:c7:be:d0:56:0e:3e:07: c4:af:2b:70:b2:23:c4:ef:64:99:9d:86:20:8e:92:03:e1:8b: ad:40:eb:f9:c6:76:53:1d:61:72:a3:82:bb:e9:94:91:9e:04: 26:2c:27:af:6b:8a:17:39:31:0f:c8:39:e3:60:83:7d:ac:a5: b8:09:7e:8e:9f:da:34:48:a8:51:62:65:df:78:e9:b4:63:b6: 89:41:c7:b7:bf:00:c2:6a:8d:98:14:67:7d:76:32:b3:f6:b6: 3f:d8:60:91:27:45:35:09:55:e9:64:af:43:9d:4f:06:f0:a7: 5e:f1:95:08:45:54:15:5d:7a:8e:d7:bf:1b:99:db:9b:7e:cf: 69:66:1c:d4:ba:c5:08:48:a8:ac:b5:df:4e:70:84:dd:7f:dd: 99:7a:f7:67:a2:50:60:42:4b:ac:20:4e:22:5c:2f:5f:f8:b9: 2a:11:3d:ab:b1:cf:e5:5d:d5:36:37:04:33:44:e7:dd:cf:7f: 09:3e:da:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TiYkHqps92hvegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YjQzOGYyMTgtMzg5MC00ZmNjLTk5OWYtNzFiZDdkZDI3ZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa1QWIwMp5sz3rlHAdEgU8KoawEV2gWRsyqu lbUs2OlNukzc63p1ZHUxxSfeVlyUkHYGiDC05d8EBu2k8N6Yjx8rsOBa7yi+NUFe TPuWGXLZyGBqJmMaUr/J3jzPrLfqErzpIycLAExPR7KA/BU2G8AL1SDEHOi92dpZ kWI05F8VcNGbi6NgpdFqRTmmIYo6hG8XCzqcIBQQkVHE1ALGRA/OEmRCJrk8Pqk6 lHeijgF4/TZd0wvtSlf9D+4houiKp0JqRFFgqCT6ZSqbVMLkx02UJiqjpQwMn6BT fngXc6r+Q2KEceU5trDAoet5SQdb2yX1TvAwClEM4Q5KC9NQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3JWxe2ofZMrHLJbHFrbxllZwm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODYxMWExZGMtNmY3NC0z MDcyLWEwYjktNDQ3ZDgyYWMyYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASfm9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMnLe/17EUaZGpz9vydtnBRQeC4CXY+Pq8CnN460bQyHJHKG2EFGyq4 uHmiPGhXx3kCO+YrLPmxGa+OQT0p9zbOx77QVg4+B8SvK3CyI8TvZJmdhiCOkgPh i61A6/nGdlMdYXKjgrvplJGeBCYsJ69rihc5MQ/IOeNgg32spbgJfo6f2jRIqFFi Zd946bRjtolBx7e/AMJqjZgUZ312MrP2tj/YYJEnRTUJVelkr0OdTwbwp17xlQhF VBVdeo7XvxuZ25t+z2lmHNS6xQhIqKy1305whN1/3Zl692eiUGBCS6wgTiJcL1/4 uSoRPauxz+Vd1TY3BDNE593Pfwk+2mI= -----END CERTIFICATE-----Generated at Thu Nov 5 04:04:37 2026 by rpki-client