$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cec64aa-4974-3e63-9fd3-6b1ec464e971.roa File: 8cec64aa-4974-3e63-9fd3-6b1ec464e971.roa (raw, json) Hash identifier: NvPDjCrk1tyMDfsCxGbQyNDWIwL/uAw7HUDVfqB93jg= Subject key identifier: C4:AA:65:72:0C:95:2A:E0:80:D9:CB:E9:C9:19:5D:79:5B:EC:93:DF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3B6CCC010973E57CEB7740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cec64aa-4974-3e63-9fd3-6b1ec464e971.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33651 IP address blocks: 73.223.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:6c:cc:01:09:73:e5:7c:eb:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=04243d68-c8aa-4626-a900-9d642774e041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:1c:ce:63:39:86:07:59:78:44:6a:36:fe: 4f:22:0f:bb:35:dc:c4:55:4b:37:ec:e9:02:0e:6b: 9f:e9:23:9c:bd:5a:55:31:25:8a:f0:1e:67:1b:96: 4e:e2:03:dc:fc:27:da:e7:7a:74:f2:06:87:db:bd: ae:c2:19:83:3b:21:57:4e:12:51:a7:b2:f1:be:d0: 49:4b:fe:cb:75:94:ae:65:81:07:a9:e0:dc:28:af: 60:a9:81:43:4c:20:23:84:53:cc:b1:63:ed:51:bd: 16:2b:2d:f6:27:77:5d:a2:d9:26:6f:7c:2c:a1:16: 78:71:4d:7d:64:f7:99:39:ee:50:dd:ba:b4:2b:68: 8e:7a:ae:e2:bb:21:dc:9b:fb:3a:c3:4f:62:f7:3f: a3:15:a0:21:6d:8a:9f:00:dd:1f:36:c9:60:8a:01: d7:4e:c3:db:6e:82:fd:03:e3:90:50:e0:28:c8:2d: 2e:3c:5d:58:87:6c:8d:97:3f:34:44:ec:1f:0b:19: a0:5c:55:6c:07:09:65:a6:a2:36:92:84:d3:ff:57: ab:26:35:7b:70:be:8c:3b:71:30:d4:81:cb:54:13: 41:4b:f3:86:fe:81:10:9f:a1:7b:e8:a1:c6:b7:11: 99:23:71:5d:ea:06:36:e5:18:45:4f:96:01:df:19: 33:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AA:65:72:0C:95:2A:E0:80:D9:CB:E9:C9:19:5D:79:5B:EC:93:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cec64aa-4974-3e63-9fd3-6b1ec464e971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:19:a3:dc:f9:fa:5a:29:cb:41:6a:08:34:67:bf:b1:79:79: 00:02:db:45:1c:3e:9d:be:28:b5:ca:b3:cf:32:15:59:31:26: 29:6f:1d:b0:78:ae:30:ae:ab:d0:d4:e0:3a:40:f3:40:4d:d0: 59:18:c8:0e:a7:80:62:c0:09:bd:71:47:64:3e:58:4c:0d:e3: 66:d5:91:12:9b:01:28:b1:ee:5b:e2:3a:c8:57:a3:99:4d:57: 14:32:b4:0e:d6:91:fb:74:2a:4d:4f:59:7e:31:e7:96:d4:ec: 3b:bd:76:18:86:b2:23:bf:f3:d9:8c:a6:f8:5c:65:af:aa:67: 85:94:8c:58:79:0e:5b:24:1d:52:ed:2a:06:12:ca:93:39:15: cc:4a:4c:af:70:ef:ab:db:7d:90:5b:ce:4d:65:f2:c4:d2:15: 76:e3:5c:9f:b5:72:b0:47:80:ab:7d:1e:c9:f2:c3:43:f6:ef: 4f:26:98:28:20:9a:9a:96:c9:53:0c:01:77:4f:d3:ea:b3:0a: c6:c7:ec:80:d4:38:f8:06:6d:69:fc:ff:e6:8f:56:54:79:fe: 63:92:d5:0f:bf:39:4e:b6:e0:4f:bd:24:03:91:6c:8e:4b:4e: df:4e:bc:96:8d:58:35:d8:3c:4a:06:14:d4:8d:46:91:0b:6e: cd:42:bc:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO2zMAQlz5Xzrd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MDQyNDNkNjgtYzhhYS00NjI2LWE5MDAtOWQ2NDI3NzRlMDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb8czmM5hgdZeERqNv5PIg+7NdzEVUs37OkC Dmuf6SOcvVpVMSWK8B5nG5ZO4gPc/Cfa53p08gaH272uwhmDOyFXThJRp7LxvtBJ S/7LdZSuZYEHqeDcKK9gqYFDTCAjhFPMsWPtUb0WKy32J3ddotkmb3wsoRZ4cU19 ZPeZOe5Q3bq0K2iOeq7iuyHcm/s6w09i9z+jFaAhbYqfAN0fNslgigHXTsPbboL9 A+OQUOAoyC0uPF1Yh2yNlz80ROwfCxmgXFVsBwllpqI2koTT/1erJjV7cL6MO3Ew 1IHLVBNBS/OG/oEQn6F76KHGtxGZI3Fd6gY25RhFT5YB3xkzhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSqZXIMlSrggNnL6ckZXXlb7JPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGNlYzY0YWEtNDk3NC0z ZTYzLTlmZDMtNmIxZWM0NjRlOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcZo9z5+lopy0FqCDRnv7F5eQAC20UcPp2+KLXKs88yFVkxJilvHbB4 rjCuq9DU4DpA80BN0FkYyA6ngGLACb1xR2Q+WEwN42bVkRKbASix7lviOshXo5lN VxQytA7Wkft0Kk1PWX4x55bU7Du9dhiGsiO/89mMpvhcZa+qZ4WUjFh5DlskHVLt KgYSypM5FcxKTK9w76vbfZBbzk1l8sTSFXbjXJ+1crBHgKt9Hsnyw0P2708mmCgg mpqWyVMMAXdP0+qzCsbH7IDUOPgGbWn8/+aPVlR5/mOS1Q+/OU624E+9JAORbI5L Tt9OvJaNWDXYPEoGFNSNRpELbs1CvEs= -----END CERTIFICATE-----Generated at Tue Jul 21 20:07:59 2026 by rpki-client