$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2ab4b99-01a7-3e92-b6d2-d5436626e437.roa File: a2ab4b99-01a7-3e92-b6d2-d5436626e437.roa (raw, json) Hash identifier: GQdP4mevIgujSbYXHqGeIv0HVnD7ALqdQFvXQFKlrKM= Subject key identifier: 48:6E:1D:E1:40:4C:18:E2:27:F2:84:4D:22:FE:3A:CB:D0:71:63:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E2AAC32C74C444D3A6000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2ab4b99-01a7-3e92-b6d2-d5436626e437.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7015 IP address blocks: 73.38.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:2a:ac:32:c7:4c:44:4d:3a:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=2fa6e940-a5d9-4809-8880-c407bdd45c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:f4:af:fd:a5:c7:e8:b3:21:97:54:0f:4e: 18:4f:c3:db:02:67:78:fd:00:85:7a:fc:37:d5:10: c8:af:ea:89:9a:42:12:fc:d1:66:78:90:0a:0b:fb: d1:87:d0:b2:c6:ac:30:0b:8c:a2:e3:25:47:d0:73: 8f:43:99:b5:56:15:62:f9:82:16:88:64:8c:90:00: 8d:bc:31:48:e6:df:de:89:fe:60:76:63:0c:c9:3d: 43:9e:b9:a5:1d:01:97:f5:ae:0f:66:21:ed:ee:8d: 31:42:b6:e4:8a:cb:fe:56:f9:0f:79:7d:89:78:fd: 68:f0:c7:71:70:aa:ed:af:c7:36:f5:c0:28:9e:79: 37:f5:6e:45:9b:9e:56:bb:39:db:dc:8a:74:19:9d: 15:14:d1:4e:ff:5d:f3:02:03:91:72:de:df:8b:bd: d8:fa:0a:4c:80:1e:99:bd:fe:f4:e8:bf:24:de:d4: 39:b3:a4:30:bf:d0:3d:8b:cc:77:2b:d7:21:38:c7: 27:4a:0f:03:15:63:0c:bd:70:fa:75:8a:37:55:f9: 79:45:5c:fb:11:1d:9e:86:e1:25:f3:f3:66:35:d6: b9:d1:4b:2e:15:36:47:92:49:5f:98:e7:22:49:f3: 04:5a:72:1e:71:96:d6:e3:57:d5:a9:20:1b:8f:c1: 0f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6E:1D:E1:40:4C:18:E2:27:F2:84:4D:22:FE:3A:CB:D0:71:63:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2ab4b99-01a7-3e92-b6d2-d5436626e437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.38.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:cd:f1:2d:a3:19:64:a3:d5:54:51:f0:92:6c:65:e1:b5:f3: 18:a1:93:a8:94:ce:d4:89:93:6a:98:6e:96:ff:8b:00:23:92: ba:43:31:a6:66:69:22:70:6f:5b:16:d9:06:2e:ca:43:e2:97: 5b:80:04:0a:7b:0e:0b:e5:47:65:21:1b:31:62:86:9e:b6:5a: 58:33:8c:d8:18:f0:69:d1:1b:8b:62:f6:b7:23:8a:28:72:07: 1f:9f:86:af:a0:e8:4f:db:e6:1a:dc:13:08:de:6f:96:93:49: 75:61:b2:ab:21:9b:40:94:0f:04:32:42:da:48:9e:5d:c3:95: 29:3a:8a:02:5a:46:fc:74:df:18:9b:f7:86:2f:e4:c7:15:e5: 46:26:9d:55:29:12:e0:3b:92:16:16:ce:ee:5d:e2:aa:de:a9: 7c:fa:05:09:bc:13:a4:66:76:87:a6:61:ac:d2:16:df:ae:83: f8:cd:e6:7b:4a:76:13:49:1c:99:16:a3:12:76:d0:fd:6c:37: b2:7f:c2:5d:6d:f6:46:d5:0d:83:ff:53:32:f5:3a:56:c4:5a: 5a:2a:fa:84:1b:96:11:50:e0:0b:f5:fa:22:37:58:62:73:56: 85:e9:2e:e3:89:65:2f:8c:85:eb:12:4e:f0:83:eb:93:94:96: 85:19:fa:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TiqsMsdMRE06YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MmZhNmU5NDAtYTVkOS00ODA5LTg4ODAtYzQwN2JkZDQ1YzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyL0r/2lx+izIZdUD04YT8PbAmd4/QCFevw3 1RDIr+qJmkIS/NFmeJAKC/vRh9CyxqwwC4yi4yVH0HOPQ5m1VhVi+YIWiGSMkACN vDFI5t/eif5gdmMMyT1DnrmlHQGX9a4PZiHt7o0xQrbkisv+VvkPeX2JeP1o8Mdx cKrtr8c29cAonnk39W5Fm55Wuznb3Ip0GZ0VFNFO/13zAgORct7fi73Y+gpMgB6Z vf706L8k3tQ5s6Qwv9A9i8x3K9chOMcnSg8DFWMMvXD6dYo3Vfl5RVz7ER2ehuEl 8/NmNda50UsuFTZHkklfmOciSfMEWnIecZbW41fVqSAbj8EPeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhuHeFATBjiJ/KETSL+OsvQcWOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTJhYjRiOTktMDFhNy0z ZTkyLWI2ZDItZDU0MzY2MjZlNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASSa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHN8S2jGWSj1VRR8JJsZeG18xihk6iUztSJk2qYbpb/iwAjkrpDMaZm aSJwb1sW2QYuykPil1uABAp7DgvlR2UhGzFihp62WlgzjNgY8GnRG4ti9rcjiihy Bx+fhq+g6E/b5hrcEwjeb5aTSXVhsqshm0CUDwQyQtpInl3DlSk6igJaRvx03xib 94Yv5McV5UYmnVUpEuA7khYWzu5d4qreqXz6BQm8E6RmdoemYazSFt+ug/jN5ntK dhNJHJkWoxJ20P1sN7J/wl1t9kbVDYP/UzL1OlbEWloq+oQblhFQ4Av1+iI3WGJz VoXpLuOJZS+MhesSTvCD65OUloUZ+hs= -----END CERTIFICATE-----Generated at Thu Nov 5 16:49:33 2026 by rpki-client