$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d497ab-6f71-3e40-aa46-b1efa9f454f1.roa File: b2d497ab-6f71-3e40-aa46-b1efa9f454f1.roa (raw, json) Hash identifier: IJGa70pJk/Swrj0O0R8n0lb15NXKBZFKgweK7ftGZ6s= Subject key identifier: EC:49:9C:FE:A0:6C:85:2F:6B:5E:0D:A5:5D:D3:EF:32:BD:E8:A1:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8639C4BA79EBC4F61F0DF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d497ab-6f71-3e40-aa46-b1efa9f454f1.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7015 IP address blocks: 73.249.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:9c:4b:a7:9e:bc:4f:61:f0:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=4fdac174-32d7-469f-988e-6db5f8895073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a2:78:1c:a2:e6:0d:31:2d:da:79:82:84:b0: 38:c2:fd:5b:ea:50:7b:8c:71:ff:40:a8:de:44:c5: c9:a2:25:1e:82:a9:c2:ac:34:c9:3f:78:b1:52:01: 65:c7:74:15:89:10:cb:55:7a:57:95:73:b6:14:07: 89:c8:9d:67:60:e2:10:de:cd:34:36:8d:37:9d:89: ec:05:a0:58:9d:7a:e5:2f:86:84:d5:1f:b6:cc:f8: cb:79:fc:1e:44:fe:90:4d:87:21:f5:17:02:c9:a0: 2f:27:66:fa:31:f1:b7:24:50:60:42:64:59:d8:e1: 4f:ec:77:bd:55:72:59:62:8a:b4:53:b7:17:49:c8: 82:e1:1f:f4:42:c5:08:d9:fa:9d:2b:05:34:61:c3: 46:ab:39:64:e4:d6:29:20:0f:7b:09:46:c2:1f:5f: f3:5d:f9:35:66:16:33:19:a9:4d:1c:46:7c:a8:0c: 13:41:c9:bf:a6:d6:e3:00:29:8d:e1:09:bc:af:11: 61:1d:4d:d0:58:c8:4a:18:ba:22:e5:11:e1:7d:87: f5:4c:ef:ac:45:06:a6:26:9e:2d:27:12:f1:96:ff: 38:de:f7:36:ae:ee:e7:cd:61:2d:1d:0f:7c:54:ed: 4d:a3:89:71:f4:56:ee:a4:29:95:18:d3:64:78:02: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:49:9C:FE:A0:6C:85:2F:6B:5E:0D:A5:5D:D3:EF:32:BD:E8:A1:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d497ab-6f71-3e40-aa46-b1efa9f454f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.249.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ad:82:9b:89:90:d5:25:16:9c:1a:59:db:9c:9b:88:ca:ab: d2:d9:23:f3:89:cb:32:19:b3:07:aa:7b:b1:88:0e:ae:bc:15: 7e:c1:72:d0:36:28:20:21:f3:f5:96:e3:40:08:02:d6:e9:4f: f5:ef:3d:f8:db:db:4e:07:03:ac:aa:b8:94:32:2f:d0:ac:95: ae:1b:92:c5:af:13:ba:b6:c5:12:1c:48:ae:72:d6:21:eb:be: 0e:13:09:56:d2:e7:1d:46:c3:2e:d0:24:e0:7a:a3:13:50:bd: 19:a4:4c:8a:de:e9:42:00:47:16:6b:da:9c:79:17:cf:84:02: 8f:9a:57:86:2d:70:1e:fa:0d:f0:0e:ce:36:88:90:54:80:f7: 08:ae:62:26:49:10:de:eb:31:e6:9d:01:59:36:eb:61:8a:ba: 40:61:b4:70:a9:0b:7d:c4:52:15:32:9f:0f:ac:38:59:b5:cf: 66:71:8e:fe:8c:01:16:94:d5:da:90:75:d5:12:2f:eb:e6:71: f2:c7:d1:5d:b5:d1:a6:f9:54:63:30:88:ad:98:47:2a:53:06: 44:80:aa:03:42:c8:a9:49:44:06:16:55:20:f6:03:3a:5d:64: ba:75:71:72:3b:35:27:b0:46:57:b5:0c:d3:0d:8e:5d:d1:ee: 59:11:14:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY5xLp568T2Hw34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NGZkYWMxNzQtMzJkNy00NjlmLTk4OGUtNmRiNWY4ODk1MDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaJ4HKLmDTEt2nmChLA4wv1b6lB7jHH/QKje RMXJoiUegqnCrDTJP3ixUgFlx3QViRDLVXpXlXO2FAeJyJ1nYOIQ3s00No03nYns BaBYnXrlL4aE1R+2zPjLefweRP6QTYch9RcCyaAvJ2b6MfG3JFBgQmRZ2OFP7He9 VXJZYoq0U7cXSciC4R/0QsUI2fqdKwU0YcNGqzlk5NYpIA97CUbCH1/zXfk1ZhYz GalNHEZ8qAwTQcm/ptbjACmN4Qm8rxFhHU3QWMhKGLoi5RHhfYf1TO+sRQamJp4t JxLxlv843vc2ru7nzWEtHQ98VO1No4lx9FbupCmVGNNkeAIMWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxJnP6gbIUva14NpV3T7zK96KEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjJkNDk3YWItNmY3MS0z ZTQwLWFhNDYtYjFlZmE5ZjQ1NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSfmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmtgpuJkNUlFpwaWducm4jKq9LZI/OJyzIZsweqe7GIDq68FX7BctA2 KCAh8/WW40AIAtbpT/XvPfjb204HA6yquJQyL9Csla4bksWvE7q2xRIcSK5y1iHr vg4TCVbS5x1Gwy7QJOB6oxNQvRmkTIre6UIARxZr2px5F8+EAo+aV4YtcB76DfAO zjaIkFSA9wiuYiZJEN7rMeadAVk262GKukBhtHCpC33EUhUynw+sOFm1z2Zxjv6M ARaU1dqQddUSL+vmcfLH0V210ab5VGMwiK2YRypTBkSAqgNCyKlJRAYWVSD2Azpd ZLp1cXI7NSewRle1DNMNjl3R7lkRFMk= -----END CERTIFICATE-----Generated at Mon Sep 14 20:16:11 2026 by rpki-client