$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a4f0af5-6ebe-3d2d-837f-944f555e5648.roa File: 8a4f0af5-6ebe-3d2d-837f-944f555e5648.roa (raw, json) Hash identifier: kbX6cYne1Do+BpfTGBhkwvOMqPJSvtZe3CJInrq7Cy4= Subject key identifier: E9:04:ED:86:7C:8D:A7:F4:B8:7A:E1:C1:74:30:7F:91:39:B7:1B:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3CB3EAB56D5641926452C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a4f0af5-6ebe-3d2d-837f-944f555e5648.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33491 IP address blocks: 73.45.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3c:b3:ea:b5:6d:56:41:92:64:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=63a106d7-9a9a-4d6b-be6e-54863fb6fcb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:4f:16:81:57:42:e0:9e:c7:a0:60:1a:6b: 58:e5:8d:06:eb:c6:fa:b1:cc:da:9c:4c:dd:56:94: 5f:bc:31:b2:68:e2:e4:3d:6e:81:de:86:42:41:80: 33:49:9f:24:bd:1f:b7:23:78:f3:7c:6e:2b:11:e4: 58:ca:58:43:22:a0:cf:7c:bb:59:08:29:61:eb:28: 29:82:cb:89:9f:f3:fd:4f:05:c4:88:8f:6f:12:8b: fe:3d:97:41:59:ba:62:ce:a6:cc:47:aa:9d:88:78: 67:af:37:d1:0d:53:14:c8:f8:ca:b9:0d:d4:78:e3: d9:f8:7c:55:ac:7b:19:6b:da:e4:41:24:03:97:08: 6a:59:f5:b9:ca:51:aa:92:60:45:db:d0:fc:82:3a: 7a:b1:9e:b6:7f:44:59:3f:59:7e:71:06:9a:b7:b6: e8:5e:b6:5d:d9:e9:c8:db:fe:01:d8:28:70:d2:59: ee:06:74:6a:76:3a:90:71:d4:fa:2c:71:76:18:7e: 9d:71:9f:21:6c:9a:07:3e:7b:05:f2:00:28:1a:60: 77:ac:40:b4:37:16:21:5b:41:a1:eb:5c:c3:cd:3c: 6d:51:44:15:e5:b8:bb:ed:e5:2a:2e:6f:ec:64:d6: d4:24:d2:5d:ce:bc:a7:8f:18:3b:97:ee:f3:88:2a: 8a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:04:ED:86:7C:8D:A7:F4:B8:7A:E1:C1:74:30:7F:91:39:B7:1B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a4f0af5-6ebe-3d2d-837f-944f555e5648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.45.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0d:a7:f3:2f:9f:1f:4d:fa:25:44:b6:c0:e6:3a:98:ae:3c: 13:ba:25:a9:f3:b1:c0:60:11:2c:58:a9:56:17:b4:63:e2:cc: 30:e0:85:b7:06:81:25:ca:bc:af:38:af:98:10:01:38:2b:42: 35:7a:f1:af:10:ac:77:9d:e0:f0:51:0e:49:74:47:c0:d2:7b: fe:de:0a:55:0e:b2:a2:13:93:60:74:a6:31:84:b6:b3:e2:1a: 68:4a:64:68:d0:52:18:51:1b:52:07:14:3b:a5:2f:19:87:b1: e8:4e:b2:85:2b:f3:65:e6:28:c2:b5:64:ca:e7:e1:76:4a:37: 60:27:48:e1:e2:d9:a9:f9:b3:81:5f:17:db:a6:04:76:a6:ce: de:d9:ab:ef:fc:c5:0e:c7:ff:3e:4c:4b:40:20:3e:28:52:c2: 3f:bf:fa:db:36:58:df:10:3c:58:31:71:d8:d6:6b:a6:16:41: a0:f9:81:55:9b:e0:79:95:c7:19:76:1f:91:a3:bc:54:b3:bf: 4a:1b:35:05:03:fb:bb:a7:85:52:de:66:d1:8e:8f:4e:13:d9: d1:cf:43:fb:77:ac:36:25:a1:27:07:3f:e7:86:cb:29:e5:ba: f9:3a:2f:23:3c:b6:2c:fe:12:cb:c6:e7:53:08:56:79:e0:24: 60:34:33:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPLPqtW1WQZJkUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NjNhMTA2ZDctOWE5YS00ZDZiLWJlNmUtNTQ4NjNmYjZmY2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLBPFoFXQuCex6BgGmtY5Y0G68b6sczanEzd VpRfvDGyaOLkPW6B3oZCQYAzSZ8kvR+3I3jzfG4rEeRYylhDIqDPfLtZCClh6ygp gsuJn/P9TwXEiI9vEov+PZdBWbpizqbMR6qdiHhnrzfRDVMUyPjKuQ3UeOPZ+HxV rHsZa9rkQSQDlwhqWfW5ylGqkmBF29D8gjp6sZ62f0RZP1l+cQaat7boXrZd2enI 2/4B2Chw0lnuBnRqdjqQcdT6LHF2GH6dcZ8hbJoHPnsF8gAoGmB3rEC0NxYhW0Gh 61zDzTxtUUQV5bi77eUqLm/sZNbUJNJdzrynjxg7l+7ziCqKXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkE7YZ8jaf0uHrhwXQwf5E5txtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE0ZjBhZjUtNmViZS0z ZDJkLTgzN2YtOTQ0ZjU1NWU1NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSS2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMNp/Mvnx9N+iVEtsDmOpiuPBO6JanzscBgESxYqVYXtGPizDDghbcG gSXKvK84r5gQATgrQjV68a8QrHed4PBRDkl0R8DSe/7eClUOsqITk2B0pjGEtrPi GmhKZGjQUhhRG1IHFDulLxmHsehOsoUr82XmKMK1ZMrn4XZKN2AnSOHi2an5s4Ff F9umBHamzt7Zq+/8xQ7H/z5MS0AgPihSwj+/+ts2WN8QPFgxcdjWa6YWQaD5gVWb 4HmVxxl2H5GjvFSzv0obNQUD+7unhVLeZtGOj04T2dHPQ/t3rDYloScHP+eGyynl uvk6LyM8tiz+EsvG51MIVnngJGA0M8M= -----END CERTIFICATE-----Generated at Wed Jul 22 02:05:17 2026 by rpki-client