$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7cfe43-938b-36bf-8f85-5f834a114059.roa File: 8a7cfe43-938b-36bf-8f85-5f834a114059.roa (raw, json) Hash identifier: 32J/sJVuQKhfN1gU+FUOVyQFD8Sn6gI5z/t/vwqFaFo= Subject key identifier: 5F:4C:09:88:D4:21:96:0C:C2:58:F7:A0:02:9E:6A:A3:DA:E4:E1:6B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119F3F8A96C5AF4392C2D740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7cfe43-938b-36bf-8f85-5f834a114059.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 73.211.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:3f:8a:96:c5:af:43:92:c2:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f57a2e4d-a3ec-4dc7-8f57-6cee87c942ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:43:cf:50:01:d1:7b:9f:0b:29:84:ef:26: 87:00:43:9e:0f:84:73:d2:64:e6:fb:3a:bc:22:a5: a0:e0:62:b9:06:e9:d8:52:90:49:1d:d7:14:8c:ce: 58:ec:cb:21:e9:8f:6d:b5:3d:e0:cb:74:c5:5d:a6: 36:a7:66:65:60:86:27:33:11:ca:60:d9:9d:20:aa: 27:35:cd:c5:5b:79:11:c9:e2:48:f6:ef:fd:45:c7: fa:8e:ba:2a:55:e2:9d:07:9d:cf:d2:ff:bb:41:d8: f1:14:13:39:1c:ff:1a:33:c3:43:a5:72:99:b0:6a: 33:cc:97:67:fe:2e:bd:11:b5:8e:ad:e0:e5:dd:f9: 3f:91:3d:0c:45:cf:02:cf:78:3b:70:90:f4:8a:5e: 34:06:e3:b1:5a:28:97:cc:e3:ec:f7:40:d8:e6:e9: 68:10:fb:79:b3:16:c0:12:9d:01:97:3e:b3:84:97: 7b:a9:86:f6:06:9b:94:99:d9:f9:b5:85:b0:af:bb: 59:25:c2:81:1e:ad:c5:cc:6b:bb:56:3b:cd:34:c5: cf:14:48:58:80:53:67:61:06:60:ce:c6:87:0e:3a: 81:1d:7e:e1:c4:47:48:b1:b3:24:71:83:0b:c4:89: 8a:a7:92:b4:26:34:85:2c:61:9f:88:ca:08:58:13: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4C:09:88:D4:21:96:0C:C2:58:F7:A0:02:9E:6A:A3:DA:E4:E1:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7cfe43-938b-36bf-8f85-5f834a114059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.211.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:31:a4:b0:ea:c8:c9:ad:2d:e0:9b:dc:b8:bd:ff:ba:75:92: 1f:0c:9b:0e:0e:bb:32:5d:c2:5f:7c:62:4d:e7:18:b2:39:8f: 3c:40:87:a6:2e:a9:be:28:4a:09:dd:20:f8:55:44:65:8d:f2: b8:0f:98:18:7f:c2:7f:1d:18:4a:a8:6e:23:a0:fa:9f:e7:f1: 57:4f:88:03:7a:10:41:c7:65:a5:2b:08:8f:3b:c7:0b:e4:1a: f5:b4:a0:ea:89:20:a1:b9:67:26:d2:ab:f3:f9:06:f7:6d:6f: 74:6e:d2:94:d0:3f:64:55:66:6a:34:f9:85:35:f8:be:46:44: b4:a0:39:5c:3f:87:49:ba:00:8b:50:26:b8:1a:5c:80:a8:46: 72:4c:24:47:4c:ac:37:b6:c3:97:06:96:c1:63:48:a3:87:84: cf:f7:4c:97:04:70:44:8b:4d:24:e3:55:4b:85:e8:ce:d7:f2: cc:b3:75:c7:60:0c:e3:84:e1:5f:3c:14:76:2b:5a:f4:89:b8: d2:92:c6:9d:39:c7:55:4f:ac:d3:95:46:7b:1b:7d:68:e4:dd: 67:13:34:c8:a9:40:e0:33:35:ae:e9:1b:bb:62:f2:bb:79:2d: 86:74:35:3a:21:b4:58:36:d8:4d:39:0c:93:53:42:f0:84:14: 25:45:24:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnz+KlsWvQ5LC10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjU3YTJlNGQtYTNlYy00ZGM3LThmNTctNmNlZTg3Yzk0MmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdJDz1AB0XufCymE7yaHAEOeD4Rz0mTm+zq8 IqWg4GK5BunYUpBJHdcUjM5Y7Msh6Y9ttT3gy3TFXaY2p2ZlYIYnMxHKYNmdIKon Nc3FW3kRyeJI9u/9Rcf6jroqVeKdB53P0v+7QdjxFBM5HP8aM8NDpXKZsGozzJdn /i69EbWOreDl3fk/kT0MRc8Cz3g7cJD0il40BuOxWiiXzOPs90DY5uloEPt5sxbA Ep0Blz6zhJd7qYb2BpuUmdn5tYWwr7tZJcKBHq3FzGu7VjvNNMXPFEhYgFNnYQZg zsaHDjqBHX7hxEdIsbMkcYMLxImKp5K0JjSFLGGfiMoIWBM5AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9MCYjUIZYMwlj3oAKeaqPa5OFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE3Y2ZlNDMtOTM4Yi0z NmJmLThmODUtNWY4MzRhMTE0MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdPCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoxpLDqyMmtLeCb3Li9/7p1kh8Mmw4OuzJdwl98Yk3nGLI5jzxAh6Yu qb4oSgndIPhVRGWN8rgPmBh/wn8dGEqobiOg+p/n8VdPiAN6EEHHZaUrCI87xwvk GvW0oOqJIKG5ZybSq/P5Bvdtb3Ru0pTQP2RVZmo0+YU1+L5GRLSgOVw/h0m6AItQ JrgaXICoRnJMJEdMrDe2w5cGlsFjSKOHhM/3TJcEcESLTSTjVUuF6M7X8syzdcdg DOOE4V88FHYrWvSJuNKSxp05x1VPrNOVRnsbfWjk3WcTNMipQOAzNa7pG7ti8rt5 LYZ0NTohtFg22E05DJNTQvCEFCVFJLE= -----END CERTIFICATE-----Generated at Sat Sep 5 14:22:26 2026 by rpki-client