$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5d9cf40-9f6a-3332-b7a8-264e2d5c65fe.roa File: a5d9cf40-9f6a-3332-b7a8-264e2d5c65fe.roa (raw, json) Hash identifier: Hv/h6wGQ4OGgTrhlFdHTO6kfdAUqY8t5RM3CMmUyPOA= Subject key identifier: 1C:55:23:E9:D8:D9:9B:CE:F4:BF:D9:3A:C3:DC:64:6E:D6:E6:E8:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E46B78BDFFC74C857C7A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5d9cf40-9f6a-3332-b7a8-264e2d5c65fe.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 73.202.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:46:b7:8b:df:fc:74:c8:57:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=b1f53352-0c0f-4116-b6f0-f1ded21e63d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:16:c8:90:a6:0b:d4:3a:de:f0:b5:82:d0:b5: 52:75:14:50:12:f4:1c:9b:23:28:9a:cd:67:81:4c: ad:37:13:f8:68:5a:d6:36:fb:ab:a0:a4:a7:0c:17: 89:a2:0f:c2:eb:e5:d9:78:fc:ed:f2:3e:d8:45:5b: 54:c3:a6:a0:7c:04:e1:79:bd:be:ad:a7:ea:08:09: 18:ce:0c:9e:94:18:0b:1e:d5:67:67:0e:af:46:7e: 3e:54:26:76:25:a8:d5:63:ce:88:35:34:b5:c7:ea: 73:3b:1e:e6:b1:90:3a:7e:37:07:82:f1:6b:16:d7: 89:e7:3c:0e:44:c6:d9:74:fb:dd:0d:c2:48:ae:94: 96:cc:53:51:1b:2a:5c:85:87:e2:a1:eb:39:56:ac: d7:7f:0e:75:07:bd:0d:b1:ae:78:62:ab:50:28:ed: 43:de:11:cd:19:05:0c:7b:fc:56:ab:b3:15:f2:dd: 89:c8:ed:1b:0d:37:e2:48:37:0d:9a:36:0e:ee:ef: e5:a4:cb:f4:cd:d8:2b:62:23:c5:d1:a0:35:d7:cd: 30:5f:59:75:ec:28:fc:2e:5a:2b:8d:3f:9b:00:5c: fd:d9:be:99:95:fe:6e:2e:1c:36:b7:49:4f:e5:27: fb:e2:38:87:1c:e4:4d:b7:a7:94:94:2d:27:5c:d5: 94:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:55:23:E9:D8:D9:9B:CE:F4:BF:D9:3A:C3:DC:64:6E:D6:E6:E8:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5d9cf40-9f6a-3332-b7a8-264e2d5c65fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.202.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:37:76:68:91:1b:1e:f0:28:4e:53:4d:1d:37:f6:2c:65:30: f1:9e:18:35:84:af:c0:9c:86:d4:63:36:c8:17:cb:8f:96:60: 49:12:1f:98:c6:61:c7:7b:bd:41:85:31:b5:3d:f8:cc:6f:a9: e2:60:f0:d8:79:8b:f2:44:d1:53:f4:2a:00:79:f7:56:44:ee: e8:09:b2:71:c0:bc:2f:b1:d3:bf:80:f4:9a:94:e3:15:5f:01: ff:64:a7:4b:32:24:c1:30:e4:1e:1d:1b:fe:04:76:70:02:b2: bb:7b:b7:c6:ac:96:76:bf:aa:5f:bb:8a:95:14:49:5c:e2:74: 11:97:41:e2:99:bc:c1:c6:1d:71:78:af:79:24:0e:a9:11:3d: c3:39:0e:33:71:5b:a6:1f:08:b7:ca:a7:17:ec:1f:50:96:c0: 33:0d:20:d1:96:c7:d6:2b:6a:c8:5c:c1:f1:77:cb:29:3f:ad: 5d:ce:bc:5d:61:17:3b:27:f6:49:49:1f:ce:b9:60:6d:e6:13: 69:29:62:7d:f4:62:9d:ac:3b:2b:95:c7:81:d7:52:fe:66:3d: 8a:f5:0b:8e:da:37:8c:a6:be:83:20:25:e2:9e:33:2d:f1:80: f7:0c:8f:04:b0:79:ed:12:96:fb:ac:5f:a5:b6:ee:f6:47:64: fd:d4:90:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnka3i9/8dMhXx6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YjFmNTMzNTItMGMwZi00MTE2LWI2ZjAtZjFkZWQyMWU2M2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihbIkKYL1Dre8LWC0LVSdRRQEvQcmyMoms1n gUytNxP4aFrWNvuroKSnDBeJog/C6+XZePzt8j7YRVtUw6agfATheb2+rafqCAkY zgyelBgLHtVnZw6vRn4+VCZ2JajVY86INTS1x+pzOx7msZA6fjcHgvFrFteJ5zwO RMbZdPvdDcJIrpSWzFNRGypchYfioes5VqzXfw51B70Nsa54YqtQKO1D3hHNGQUM e/xWq7MV8t2JyO0bDTfiSDcNmjYO7u/lpMv0zdgrYiPF0aA1180wX1l17Cj8Llor jT+bAFz92b6Zlf5uLhw2t0lP5Sf74jiHHORNt6eUlC0nXNWUZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxVI+nY2ZvO9L/ZOsPcZG7W5uhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTVkOWNmNDAtOWY2YS0z MzMyLWI3YTgtMjY0ZTJkNWM2NWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCScpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMc3dmiRGx7wKE5TTR039ixlMPGeGDWEr8CchtRjNsgXy4+WYEkSH5jG Ycd7vUGFMbU9+MxvqeJg8Nh5i/JE0VP0KgB591ZE7ugJsnHAvC+x07+A9JqU4xVf Af9kp0syJMEw5B4dG/4EdnACsrt7t8aslna/ql+7ipUUSVzidBGXQeKZvMHGHXF4 r3kkDqkRPcM5DjNxW6YfCLfKpxfsH1CWwDMNINGWx9YrashcwfF3yyk/rV3OvF1h Fzsn9klJH865YG3mE2kpYn30Yp2sOyuVx4HXUv5mPYr1C47aN4ymvoMgJeKeMy3x gPcMjwSwee0SlvusX6W27vZHZP3UkEg= -----END CERTIFICATE-----Generated at Sat Sep 5 04:54:35 2026 by rpki-client