$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a17e14b8-2e01-355d-aec3-b6ca728a427c.roa File: a17e14b8-2e01-355d-aec3-b6ca728a427c.roa (raw, json) Hash identifier: 9BenpkgJlI2IqujdaqMEnRqdfemXOSgy7+hPzqI8vvQ= Subject key identifier: 76:87:EA:8A:FF:61:50:61:DE:C4:04:C3:A0:18:5F:C1:66:5C:C1:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E381898F12C0FAA256300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a17e14b8-2e01-355d-aec3-b6ca728a427c.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7015 IP address blocks: 73.89.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:38:18:98:f1:2c:0f:aa:25:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=4c5d2e35-e905-4549-be33-71bf0e8f86f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ab:ed:06:45:7e:56:9b:e5:bd:f1:4f:2f:1f: 21:ce:c5:80:62:54:0b:4d:0b:60:95:24:ab:a4:71: c8:df:c5:31:7a:37:16:40:30:9a:b8:c4:db:df:46: 5d:ab:1a:b5:a1:90:04:c1:4f:94:8c:30:61:a4:ef: 4b:b6:bc:f3:f7:8c:a4:0b:62:91:68:61:c2:79:25: 34:52:b2:74:ae:8b:3c:02:73:35:18:60:8c:7b:be: e6:2f:f5:93:dd:1c:d3:5b:7c:32:b6:ab:bc:0e:f0: ec:13:ca:0e:25:99:cd:43:ef:4a:20:9d:44:7c:09: c8:08:56:a1:f0:80:d4:18:44:02:5c:ad:43:95:be: a1:aa:7c:f1:74:93:ca:8a:da:d6:fe:0a:75:36:e3: 01:41:83:c1:65:70:e7:92:c9:01:a5:20:f4:c6:3a: 76:08:51:4f:60:f8:4c:81:72:9d:b8:52:55:13:54: 09:87:6b:d4:1e:5c:aa:1b:41:38:f7:aa:54:37:4e: 6b:50:6f:d4:24:e4:f1:6d:69:5c:f2:14:6b:bf:f9: 92:5f:cd:a8:fd:66:a3:7f:ae:ef:0a:db:1f:7e:96: ba:7b:c0:77:2d:96:2f:97:0e:27:2c:da:e0:9c:7d: 39:31:05:12:e2:43:f2:fd:48:ab:9b:13:18:10:fa: fe:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:87:EA:8A:FF:61:50:61:DE:C4:04:C3:A0:18:5F:C1:66:5C:C1:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a17e14b8-2e01-355d-aec3-b6ca728a427c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.89.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:73:cc:16:47:14:fe:20:b4:a1:4e:a5:15:29:60:d4:97:8c: 57:9a:a2:b6:5b:4f:6c:6e:6c:26:8a:8c:67:c6:7d:41:84:b7: 53:5e:d0:25:34:21:ed:49:01:8f:86:53:f5:1e:51:de:5b:24: 5d:49:83:6a:48:52:d0:3a:c4:91:43:bc:73:b0:28:87:38:b6: f4:32:89:dc:c7:3b:7b:9f:d9:3e:51:c4:fc:eb:a6:76:75:95: 17:d3:9d:08:1a:08:a2:af:8b:e5:7d:81:8c:67:6a:fa:a8:30: 77:4b:82:01:d0:47:3d:58:fc:7c:7c:f0:fb:16:ec:32:d2:05: f9:85:a5:57:2d:87:0f:4d:12:a5:9f:42:13:eb:12:0a:d2:d4: 6d:bf:53:d4:34:b5:80:b4:03:9c:ff:6a:b3:f0:97:83:37:d3: 4e:14:04:e7:6b:30:53:e5:fd:a7:0b:29:d8:d6:dd:68:59:dd: c5:cf:7f:55:c1:a5:e1:33:05:94:5d:99:ab:b6:c4:24:35:c8: 78:f7:5c:a3:5b:8a:5e:f0:4c:e4:ce:5e:fb:11:ea:5b:8f:fe: 88:44:29:a5:51:d0:92:74:22:17:aa:e9:32:d4:95:5a:5f:83: 4e:b3:f8:91:0e:33:f6:7a:a7:04:17:d4:60:85:17:ef:1e:fd: 19:d7:9b:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TjgYmPEsD6olYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NGM1ZDJlMzUtZTkwNS00NTQ5LWJlMzMtNzFiZjBlOGY4NmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmavtBkV+VpvlvfFPLx8hzsWAYlQLTQtglSSr pHHI38UxejcWQDCauMTb30Zdqxq1oZAEwU+UjDBhpO9Ltrzz94ykC2KRaGHCeSU0 UrJ0ros8AnM1GGCMe77mL/WT3RzTW3wytqu8DvDsE8oOJZnNQ+9KIJ1EfAnICFah 8IDUGEQCXK1Dlb6hqnzxdJPKitrW/gp1NuMBQYPBZXDnkskBpSD0xjp2CFFPYPhM gXKduFJVE1QJh2vUHlyqG0E496pUN05rUG/UJOTxbWlc8hRrv/mSX82o/Wajf67v Ctsffpa6e8B3LZYvlw4nLNrgnH05MQUS4kPy/UirmxMYEPr+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaH6or/YVBh3sQEw6AYX8FmXMG8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTE3ZTE0YjgtMmUwMS0z NTVkLWFlYzMtYjZjYTcyOGE0MjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSVm8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElzzBZHFP4gtKFOpRUpYNSXjFeaorZbT2xubCaKjGfGfUGEt1Ne0CU0 Ie1JAY+GU/UeUd5bJF1Jg2pIUtA6xJFDvHOwKIc4tvQyidzHO3uf2T5RxPzrpnZ1 lRfTnQgaCKKvi+V9gYxnavqoMHdLggHQRz1Y/Hx88PsW7DLSBfmFpVcthw9NEqWf QhPrEgrS1G2/U9Q0tYC0A5z/arPwl4M3004UBOdrMFPl/acLKdjW3WhZ3cXPf1XB peEzBZRdmau2xCQ1yHj3XKNbil7wTOTOXvsR6luP/ohEKaVR0JJ0Iheq6TLUlVpf g06z+JEOM/Z6pwQX1GCFF+8e/RnXm18= -----END CERTIFICATE-----Generated at Thu Nov 5 15:03:07 2026 by rpki-client