$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/996b0e3e-c3e4-33f2-809d-535431c13ef8.roa File: 996b0e3e-c3e4-33f2-809d-535431c13ef8.roa (raw, json) Hash identifier: uwXP8SkANnAJUiVzyYOb2M9xRZqRvajz2DLXSv5QaI0= Subject key identifier: 59:FF:BD:52:ED:6D:B6:28:CF:82:B1:F2:4F:17:DC:25:64:58:9D:FE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119F2DFC96A2AB4DCF6E2E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/996b0e3e-c3e4-33f2-809d-535431c13ef8.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 73.146.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:2d:fc:96:a2:ab:4d:cf:6e:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=68925ec7-51ea-47e2-905b-364b13995079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:53:11:86:c5:a6:25:08:c6:d6:fd:5e:45: ff:96:9e:26:d4:7b:8a:1b:1b:2a:3a:19:e8:37:61: 98:6b:b8:f3:4b:74:c6:4f:3f:ad:a4:48:0b:e8:5a: 5b:b9:51:d2:07:c8:c6:86:f2:68:89:1e:53:fb:bd: 79:2c:aa:b1:af:12:1c:32:be:e6:21:02:05:37:85: 7c:16:59:de:ed:6c:91:7b:02:2b:5f:e7:c7:e9:02: 4d:1b:92:2d:fb:a7:54:a3:bb:c6:7b:56:2c:6d:ae: 40:7d:95:69:84:c2:8d:ad:62:4a:71:cb:39:3f:21: 5c:f3:f2:84:35:74:7d:c1:7f:76:48:5d:61:63:33: 5f:d0:5e:1c:d0:ab:3a:76:43:af:31:28:4c:82:75: 81:53:15:5c:6d:66:e7:e6:c5:7b:ac:43:27:22:d3: dc:72:e4:09:28:78:2f:0c:dd:92:21:ce:80:e8:18: 38:66:a3:1e:03:8e:ae:22:65:f9:3d:ba:82:35:ff: 4d:ff:d1:46:af:13:0c:be:fb:c1:fc:6d:36:9a:8d: 95:45:22:90:cf:6a:23:6e:ea:18:90:98:7d:5e:a0: 93:49:e2:47:4c:e7:42:21:97:3b:cb:c2:53:0e:fa: 9b:71:eb:e4:22:d9:f2:35:84:67:85:fd:05:59:49: b4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FF:BD:52:ED:6D:B6:28:CF:82:B1:F2:4F:17:DC:25:64:58:9D:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/996b0e3e-c3e4-33f2-809d-535431c13ef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.146.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:1b:46:19:5f:02:76:96:49:c1:1a:d4:32:c4:bc:f2:e9:a1: e1:e4:c5:13:0d:b2:99:ea:23:c4:7b:42:14:43:bc:90:84:14: 3b:e7:53:99:88:01:c6:76:fb:21:c6:74:9a:41:ca:b0:57:26: d0:72:57:24:72:30:ed:ac:0e:c0:51:44:0c:76:67:6b:23:73: 2f:e6:a7:2b:ea:34:d2:29:11:a0:57:f3:df:ea:47:d3:59:bc: a4:f0:e6:07:0d:0d:76:c1:91:8a:d6:65:c3:96:80:92:2b:ab: b1:87:e1:08:c2:28:39:1d:37:45:62:8e:66:0a:be:9d:90:c2: 41:da:d0:54:6d:5d:4e:50:dd:2a:e9:9e:b7:f6:c3:92:08:5d: 50:c2:fb:80:de:ff:57:00:25:09:1d:b1:6b:14:bd:a8:8f:91: ea:3c:6e:4a:c7:fe:79:89:b7:bb:e0:6b:3d:0a:14:66:76:1a: ac:91:d1:97:1c:a5:ae:27:fc:76:9f:a1:c3:3c:eb:73:47:57: 82:32:48:f6:a9:f3:2b:52:00:dd:4c:78:3c:43:2f:f3:e0:11: c6:2c:4b:7f:a0:9b:56:02:0b:e0:4a:bb:f3:dc:b0:ad:1b:7e: 19:e3:cb:ef:ab:80:8d:b6:b1:cd:a8:0c:a9:b9:2a:3e:56:90: 1b:dd:b9:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rny38lqKrTc9uLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Njg5MjVlYzctNTFlYS00N2UyLTkwNWItMzY0YjEzOTk1MDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxdTEYbFpiUIxtb9XkX/lp4m1HuKGxsqOhno N2GYa7jzS3TGTz+tpEgL6FpbuVHSB8jGhvJoiR5T+715LKqxrxIcMr7mIQIFN4V8 Flne7WyRewIrX+fH6QJNG5It+6dUo7vGe1Ysba5AfZVphMKNrWJKccs5PyFc8/KE NXR9wX92SF1hYzNf0F4c0Ks6dkOvMShMgnWBUxVcbWbn5sV7rEMnItPccuQJKHgv DN2SIc6A6Bg4ZqMeA46uImX5PbqCNf9N/9FGrxMMvvvB/G02mo2VRSKQz2ojbuoY kJh9XqCTSeJHTOdCIZc7y8JTDvqbcevkItnyNYRnhf0FWUm0WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn/vVLtbbYoz4Kx8k8X3CVkWJ3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTk2YjBlM2UtYzNlNC0z M2YyLTgwOWQtNTM1NDMxYzEzZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASZLzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8bRhlfAnaWScEa1DLEvPLpoeHkxRMNspnqI8R7QhRDvJCEFDvnU5mI AcZ2+yHGdJpByrBXJtByVyRyMO2sDsBRRAx2Z2sjcy/mpyvqNNIpEaBX89/qR9NZ vKTw5gcNDXbBkYrWZcOWgJIrq7GH4QjCKDkdN0VijmYKvp2QwkHa0FRtXU5Q3Srp nrf2w5IIXVDC+4De/1cAJQkdsWsUvaiPkeo8bkrH/nmJt7vgaz0KFGZ2GqyR0Zcc pa4n/HafocM863NHV4IySPap8ytSAN1MeDxDL/PgEcYsS3+gm1YCC+BKu/PcsK0b fhnjy++rgI22sc2oDKm5Kj5WkBvduTM= -----END CERTIFICATE-----Generated at Sat Sep 5 16:56:43 2026 by rpki-client