$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bad45c34-1d8f-3103-9ced-cd1aa90d36de.roa File: bad45c34-1d8f-3103-9ced-cd1aa90d36de.roa (raw, json) Hash identifier: WKCTehIig43GIC73gFgO9REJetAZcb5vNYIwS/9Oah0= Subject key identifier: 31:CA:3E:58:E8:96:2D:27:9D:5B:AA:96:02:5E:27:D3:B5:F6:9D:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E819269C2A5C42DA87BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bad45c34-1d8f-3103-9ced-cd1aa90d36de.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 73.161.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:81:92:69:c2:a5:c4:2d:a8:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=4fc64a42-c41a-4f94-b8c3-1f1167c77540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3f:9a:80:ab:c5:96:c3:88:b4:75:d2:c3:f2: 56:42:ce:4b:66:16:b2:23:53:f9:fa:9e:5d:f8:bd: df:26:58:ab:ca:b4:9e:51:75:9a:58:a4:08:ca:e8: 2a:a0:2e:8e:97:c3:68:78:6e:12:e7:a8:f1:01:8c: 6f:c9:19:4b:d4:b8:23:62:b7:e9:b3:eb:33:34:dd: d7:77:ce:7e:a8:7d:27:dd:73:8f:63:52:d6:af:7f: 64:eb:71:8c:7d:e7:14:71:79:89:b8:f2:94:85:c7: 62:99:54:fd:84:30:e6:51:fc:bf:79:ad:62:9b:50: 4b:f7:03:3a:c3:57:d4:25:ae:35:12:3d:62:b7:d0: 3f:1a:fd:8a:11:d6:5b:9f:03:b2:4d:86:a0:e5:7a: 95:31:2b:6a:60:b9:db:a8:35:6e:cc:f0:04:64:06: 58:d1:c1:bb:79:8e:00:a8:90:2d:9f:88:65:8d:e9: ca:93:31:b9:c0:6b:17:b3:72:63:ff:d9:87:bf:f2: 45:fd:fe:c9:6a:8b:15:15:fe:1a:e1:e0:f0:88:89: 53:67:2a:82:2a:27:98:42:d4:37:d1:f7:dd:b2:cc: d4:7f:3e:8d:2f:69:71:00:98:3a:78:59:77:1c:f1: 4d:b1:44:70:bb:55:ca:57:26:ce:16:7a:d2:64:f0: 64:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CA:3E:58:E8:96:2D:27:9D:5B:AA:96:02:5E:27:D3:B5:F6:9D:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bad45c34-1d8f-3103-9ced-cd1aa90d36de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ae:be:75:cc:83:d5:8e:ba:48:93:0c:99:15:e5:fa:e7:3e: 72:a4:59:05:48:72:bd:e3:a5:ec:ee:f4:92:d4:20:cd:6a:76: c3:5f:b1:d9:db:4e:cd:84:3f:93:16:70:e4:69:d6:43:c8:03: a2:fb:50:27:7c:40:38:59:d0:74:fd:87:a1:88:bc:f2:d0:13: fd:f1:88:a7:f3:35:43:49:a5:dd:1a:28:8c:49:d3:e1:7c:f6: 9d:e4:6c:67:0f:6a:28:a3:52:6d:fb:09:19:f2:ab:ea:c8:fe: 4a:7f:b7:2d:0e:f9:d4:49:52:7f:d4:e3:7e:75:09:77:57:41: 07:ad:a2:85:26:48:f3:da:7c:55:e7:75:c4:76:04:fa:83:c8: d6:23:84:0e:87:b3:de:72:18:f8:32:07:34:3b:e1:5e:21:a1: 64:5b:4c:d0:ba:44:ad:24:73:e5:26:b9:03:aa:95:8a:61:25: e4:b6:50:16:86:a7:80:d7:81:a5:7d:95:cb:1f:69:34:b5:13: 1b:c3:16:3c:26:2d:af:4a:b3:58:1a:e2:ac:0f:16:81:dc:a6: 24:3c:46:10:5b:db:e1:d8:2e:eb:f6:ec:06:e0:d8:e1:8b:1e: 05:11:76:3c:18:c9:93:49:66:3f:5c:21:69:61:b7:88:ca:48: 03:ea:d7:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96ToGSacKlxC2oe8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NGZjNjRhNDItYzQxYS00Zjk0LWI4YzMtMWYxMTY3Yzc3NTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD+agKvFlsOItHXSw/JWQs5LZhayI1P5+p5d +L3fJliryrSeUXWaWKQIyugqoC6Ol8NoeG4S56jxAYxvyRlL1LgjYrfps+szNN3X d85+qH0n3XOPY1LWr39k63GMfecUcXmJuPKUhcdimVT9hDDmUfy/ea1im1BL9wM6 w1fUJa41Ej1it9A/Gv2KEdZbnwOyTYag5XqVMStqYLnbqDVuzPAEZAZY0cG7eY4A qJAtn4hljenKkzG5wGsXs3Jj/9mHv/JF/f7JaosVFf4a4eDwiIlTZyqCKieYQtQ3 0ffdsszUfz6NL2lxAJg6eFl3HPFNsURwu1XKVybOFnrSZPBkIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHKPljoli0nnVuqlgJeJ9O19p0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFkNDVjMzQtMWQ4Zi0z MTAzLTljZWQtY2QxYWE5MGQzNmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSaEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWuvnXMg9WOukiTDJkV5frnPnKkWQVIcr3jpezu9JLUIM1qdsNfsdnb Ts2EP5MWcORp1kPIA6L7UCd8QDhZ0HT9h6GIvPLQE/3xiKfzNUNJpd0aKIxJ0+F8 9p3kbGcPaiijUm37CRnyq+rI/kp/ty0O+dRJUn/U4351CXdXQQetooUmSPPafFXn dcR2BPqDyNYjhA6Hs95yGPgyBzQ74V4hoWRbTNC6RK0kc+UmuQOqlYphJeS2UBaG p4DXgaV9lcsfaTS1ExvDFjwmLa9Ks1ga4qwPFoHcpiQ8RhBb2+HYLuv27Abg2OGL HgURdjwYyZNJZj9cIWlht4jKSAPq168= -----END CERTIFICATE-----Generated at Wed Oct 21 13:53:54 2026 by rpki-client