$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa4d7980-90df-385b-985c-117a5de7b8b0.roa File: aa4d7980-90df-385b-985c-117a5de7b8b0.roa (raw, json) Hash identifier: QBREi6/Q+yu79YsrEFtfa4oulhxhnFLYG7b6OUZ9Ncg= Subject key identifier: 9D:94:21:88:DC:65:F0:91:6D:41:E1:52:22:01:C7:39:87:56:A6:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8633B3CFE7990C1AAF1A640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa4d7980-90df-385b-985c-117a5de7b8b0.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33490 IP address blocks: 73.240.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:3b:3c:fe:79:90:c1:aa:f1:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=69b3a670-5421-443c-845d-5d282fbdc41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:3a:c2:ea:b6:28:ba:7b:16:e4:0f:d8:53: 2f:45:bb:3e:e0:e3:18:01:84:b1:1e:54:4d:99:55: 0d:f4:f8:28:03:c9:ad:dc:d6:cf:ce:f7:1c:52:e7: 49:7d:73:80:24:4f:5f:f4:5d:3d:8f:02:69:b1:bc: 27:42:63:62:69:02:bf:37:b7:38:6d:e3:62:2c:24: 87:3c:67:42:35:0a:d6:d9:b8:c0:6e:42:2e:a0:87: 99:00:0e:e9:f9:e4:71:5a:21:fe:50:64:59:84:95: 09:ea:a5:bc:f7:fa:be:37:11:c7:27:67:ff:ff:1f: 9d:18:1c:02:f0:d3:6e:63:22:1f:04:a0:1b:f2:80: 17:29:b1:8c:42:ef:75:bd:bb:a6:4f:2a:11:9e:2d: d2:a9:df:12:43:76:79:32:a5:cc:0d:1d:66:73:52: 04:ba:45:10:20:4f:38:88:19:8e:c2:b8:7d:97:cb: 8f:bb:1e:dd:7d:84:e3:8a:e7:52:1c:06:ed:1c:55: a0:0f:6e:5b:bf:a6:e8:91:ca:03:cd:01:00:e3:26: c7:fa:89:b4:55:9c:8b:60:a7:50:20:e4:41:ae:52: ed:0d:e5:3d:99:95:81:b4:3c:f5:f3:c7:1b:60:72: 82:93:1e:42:f9:fe:53:2a:02:e6:1b:6b:a0:78:87: 28:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:94:21:88:DC:65:F0:91:6D:41:E1:52:22:01:C7:39:87:56:A6:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa4d7980-90df-385b-985c-117a5de7b8b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.240.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:77:53:b0:cf:f9:14:68:3f:8e:64:a8:5f:75:ae:a1:fc:ff: cc:1c:05:9c:00:c1:d0:78:83:73:4e:da:aa:f2:d8:ca:aa:2f: 95:2b:7d:b1:1d:2f:24:4c:57:a2:be:27:b8:ba:15:11:42:43: d5:c6:5e:30:ae:8e:8d:e3:9c:68:a8:ca:35:78:18:42:c5:9a: 5a:04:8d:2d:63:99:02:20:8d:ce:24:e2:f1:57:89:de:79:06: eb:69:c8:9c:ec:58:3c:c1:08:24:cc:fb:44:a5:b3:cf:58:0c: 51:06:2b:f2:e9:d8:a4:41:71:98:14:36:61:c0:b4:d4:53:51: 38:63:85:9d:17:00:5a:7b:18:ae:1d:66:1e:33:22:9b:fd:8a: bf:a6:64:92:8d:9f:a7:8e:99:b8:43:6f:34:ce:0c:73:ec:39: f2:3b:29:18:16:76:1c:cb:d2:e8:e2:81:17:c8:40:b4:9d:4c: f3:6c:1e:1d:54:54:5a:7a:ee:92:d3:56:80:cd:43:01:7c:be: 9c:30:d1:24:de:2b:cd:0b:db:da:29:9d:41:2b:d2:dd:47:b1: 0d:60:4c:b3:a5:7a:89:ac:cf:6a:72:cb:1e:b6:57:5f:fd:f2: 3b:d3:0b:fd:0f:f2:e7:4a:fd:a8:37:b6:aa:34:9b:73:34:04: 22:a6:0f:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYzs8/nmQwarxpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NjliM2E2NzAtNTQyMS00NDNjLTg0NWQtNWQyODJmYmRjNDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYM6wuq2KLp7FuQP2FMvRbs+4OMYAYSxHlRN mVUN9PgoA8mt3NbPzvccUudJfXOAJE9f9F09jwJpsbwnQmNiaQK/N7c4beNiLCSH PGdCNQrW2bjAbkIuoIeZAA7p+eRxWiH+UGRZhJUJ6qW89/q+NxHHJ2f//x+dGBwC 8NNuYyIfBKAb8oAXKbGMQu91vbumTyoRni3Sqd8SQ3Z5MqXMDR1mc1IEukUQIE84 iBmOwrh9l8uPux7dfYTjiudSHAbtHFWgD25bv6bokcoDzQEA4ybH+om0VZyLYKdQ IORBrlLtDeU9mZWBtDz188cbYHKCkx5C+f5TKgLmG2ugeIcoIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2UIYjcZfCRbUHhUiIBxzmHVqabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE0ZDc5ODAtOTBkZi0z ODViLTk4NWMtMTE3YTVkZTdiOGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASfAkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJh3U7DP+RRoP45kqF91rqH8/8wcBZwAwdB4g3NO2qry2MqqL5UrfbEd LyRMV6K+J7i6FRFCQ9XGXjCujo3jnGioyjV4GELFmloEjS1jmQIgjc4k4vFXid55 ButpyJzsWDzBCCTM+0Sls89YDFEGK/Lp2KRBcZgUNmHAtNRTUThjhZ0XAFp7GK4d Zh4zIpv9ir+mZJKNn6eOmbhDbzTODHPsOfI7KRgWdhzL0ujigRfIQLSdTPNsHh1U VFp67pLTVoDNQwF8vpww0STeK80L29opnUEr0t1HsQ1gTLOleomsz2pyyx62V1/9 8jvTC/0P8udK/ag3tqo0m3M0BCKmD/E= -----END CERTIFICATE-----Generated at Sat Sep 5 08:49:32 2026 by rpki-client