$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfcf7964-4948-3473-96e6-01865df1c363.roa File: cfcf7964-4948-3473-96e6-01865df1c363.roa (raw, json) Hash identifier: rbbOdPcg90dFQiLESn0D+HLDpSw92SYkOf18YKyahxQ= Subject key identifier: 7A:9A:03:B7:E9:9E:54:0D:14:77:E1:11:07:2B:05:76:65:06:9E:AB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E7EB9D9B67C461A383600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfcf7964-4948-3473-96e6-01865df1c363.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 73.145.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:7e:b9:d9:b6:7c:46:1a:38:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=240ab04a-974e-4f99-90ad-ff4d5fe6c790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4c:0c:e5:2b:f3:c4:3c:e2:95:20:15:7b:f1: cb:40:76:b2:65:75:fb:80:75:e4:19:f0:5e:f5:5a: 2e:9c:c8:97:d0:c6:23:ee:80:aa:26:02:1d:31:d3: 4a:11:03:7a:7e:e8:a2:ba:6a:5b:0e:9a:4f:c7:12: 07:3d:18:35:48:e9:dc:e0:36:5b:6f:ef:47:2d:5d: d1:cb:5c:fb:bd:0c:e8:b2:84:26:41:8d:ce:cc:42: b0:9b:9c:83:6d:03:0d:62:06:80:ab:49:25:5d:66: 68:49:14:f8:35:6b:8a:90:ba:71:5f:aa:2b:e1:ac: 36:17:bd:96:e9:2f:0b:92:19:d8:6f:00:3a:48:91: 5e:95:c1:2e:d0:de:49:25:78:42:44:36:4e:bc:3f: 7f:24:6d:52:7e:c9:6e:09:5f:33:5c:d1:f9:2f:b7: 73:30:fb:a3:44:0a:d4:f2:6b:72:e9:8a:f7:f2:3c: de:4c:96:fb:3e:7a:91:48:3c:67:7d:2e:fa:b4:8d: ff:2e:b1:fb:57:76:a1:c7:45:9c:bd:20:a9:83:37: b0:7b:92:52:41:a3:85:11:8e:99:84:bf:55:90:48: 59:9e:12:49:34:8d:bd:90:f6:4e:b2:c1:d3:8e:21: cc:63:4e:18:22:1c:34:0e:50:50:b4:b9:aa:bf:b8: 9b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9A:03:B7:E9:9E:54:0D:14:77:E1:11:07:2B:05:76:65:06:9E:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfcf7964-4948-3473-96e6-01865df1c363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.145.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:28:d9:b7:3d:8a:b1:e7:de:48:15:81:77:1e:38:3f:d0:97: a9:45:af:fb:8f:a0:65:8d:26:05:69:b4:08:9e:c8:18:b9:1c: 6e:87:25:1f:cb:ce:1f:a8:eb:c4:60:d2:0e:5f:1d:ca:49:3d: ce:70:ed:c4:6b:7e:0e:23:07:e2:fa:78:36:5c:8a:fe:ae:ba: ec:29:f1:e6:b8:28:58:67:52:b1:86:6e:97:25:08:e5:1c:ed: d5:4a:8c:44:81:78:8f:85:04:fc:b4:cc:57:9b:da:01:62:0f: 22:cc:3a:c8:49:32:ac:71:a3:79:24:ce:32:38:55:c9:dd:64: ee:15:94:9a:b7:1b:80:5d:ea:38:53:0f:f5:d9:aa:59:27:94: 25:0e:54:2b:98:13:21:35:54:46:02:e5:dd:9c:c7:61:43:51: 36:fd:a3:56:a5:1f:a0:08:35:02:02:50:82:e9:43:ba:a2:78: 9b:c8:7e:c3:50:89:3c:0c:cd:12:05:70:07:30:34:90:76:de: 41:bf:2a:8d:ce:01:e3:55:b3:f0:d4:0a:d5:2c:02:5a:ab:b6: 7d:85:c9:05:ff:25:b6:92:36:38:fe:cb:36:7d:6d:85:26:b8: 37:c4:33:16:f8:c0:34:5f:01:12:df:88:ba:1f:15:b8:05:09: b5:ce:68:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tn652bZ8Rho4NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MjQwYWIwNGEtOTc0ZS00Zjk5LTkwYWQtZmY0ZDVmZTZjNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0wM5SvzxDzilSAVe/HLQHayZXX7gHXkGfBe 9VounMiX0MYj7oCqJgIdMdNKEQN6fuiiumpbDppPxxIHPRg1SOnc4DZbb+9HLV3R y1z7vQzosoQmQY3OzEKwm5yDbQMNYgaAq0klXWZoSRT4NWuKkLpxX6or4aw2F72W 6S8LkhnYbwA6SJFelcEu0N5JJXhCRDZOvD9/JG1SfsluCV8zXNH5L7dzMPujRArU 8mty6Yr38jzeTJb7PnqRSDxnfS76tI3/LrH7V3ahx0WcvSCpgzewe5JSQaOFEY6Z hL9VkEhZnhJJNI29kPZOssHTjiHMY04YIhw0DlBQtLmqv7ib/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqaA7fpnlQNFHfhEQcrBXZlBp6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZjZjc5NjQtNDk0OC0z NDczLTk2ZTYtMDE4NjVkZjFjMzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSZHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANIo2bc9irHn3kgVgXceOD/Ql6lFr/uPoGWNJgVptAieyBi5HG6HJR/L zh+o68Rg0g5fHcpJPc5w7cRrfg4jB+L6eDZciv6uuuwp8ea4KFhnUrGGbpclCOUc 7dVKjESBeI+FBPy0zFeb2gFiDyLMOshJMqxxo3kkzjI4VcndZO4VlJq3G4Bd6jhT D/XZqlknlCUOVCuYEyE1VEYC5d2cx2FDUTb9o1alH6AINQICUILpQ7qieJvIfsNQ iTwMzRIFcAcwNJB23kG/Ko3OAeNVs/DUCtUsAlqrtn2FyQX/JbaSNjj+yzZ9bYUm uDfEMxb4wDRfARLfiLofFbgFCbXOaP8= -----END CERTIFICATE-----Generated at Thu Oct 22 09:42:38 2026 by rpki-client