$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f9c2fd-db2e-3207-8930-de18b83ef3f4.roa File: d4f9c2fd-db2e-3207-8930-de18b83ef3f4.roa (raw, json) Hash identifier: +rLGzpOaiLUxlU2BQ2sOg2V34zJifffC3fMU11Hw/i0= Subject key identifier: A8:87:02:1D:14:8D:07:77:DD:6F:E0:8F:BC:6B:D3:A8:88:02:A2:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3B5F1447B3C26D07E66980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f9c2fd-db2e-3207-8930-de18b83ef3f4.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33651 IP address blocks: 73.158.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:5f:14:47:b3:c2:6d:07:e6:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=e89c73e1-b77f-476a-bacd-35ba43cf17c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:7d:83:55:b1:b9:82:f9:c1:c3:e4:40:23: c5:04:eb:e4:1e:54:97:2c:be:8d:12:4a:62:12:36: 96:88:8b:b7:e6:ac:f7:93:e1:a0:c1:8c:25:e5:88: 21:01:ec:06:8d:4f:2c:26:30:4f:27:e3:8e:09:e3: 6a:52:81:6c:77:d4:97:69:cb:06:b2:de:95:2c:c8: 27:ac:45:c6:6d:01:46:45:2e:bd:18:5b:7c:af:0c: b2:76:d0:45:53:93:ae:5a:f9:bb:30:0d:eb:f2:7a: ab:53:c8:36:97:4c:fa:f3:d5:7e:99:74:45:a6:48: a6:91:de:4e:90:1a:bb:c6:d6:18:59:bb:37:ae:63: 85:cc:37:f7:7d:4a:eb:24:12:f1:da:62:fb:28:69: e4:98:04:f3:7c:75:bb:d6:77:52:d7:2d:32:36:a2: 1a:34:30:ec:95:be:48:f6:8a:e2:3a:40:30:30:70: c7:f9:1b:c5:49:2e:77:25:74:e4:5b:7d:53:80:f8: e5:78:02:dd:27:c9:f4:48:da:67:a2:12:86:7b:27: f0:e0:35:66:93:59:d1:1f:32:14:64:93:9c:f8:28: 9f:b0:0b:1a:41:3d:5b:7a:bf:4d:06:a7:c9:8c:10: 10:4c:0b:a9:04:56:40:b8:85:6d:2e:b2:ca:d7:6b: 2a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:87:02:1D:14:8D:07:77:DD:6F:E0:8F:BC:6B:D3:A8:88:02:A2:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f9c2fd-db2e-3207-8930-de18b83ef3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.158.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:fa:f2:73:8f:2a:fa:b3:a4:4d:fb:11:5c:f5:55:a7:1d:7d: 1d:dc:fa:b4:87:4a:59:eb:3a:62:ad:f9:ca:24:15:f3:14:07: 16:b2:ed:bd:1f:e5:a1:98:40:49:f3:92:e6:d5:e2:24:c5:51: ba:25:0a:2e:68:f5:c0:76:73:69:e0:47:85:75:76:f8:f9:ee: 96:28:c8:80:70:9c:64:cf:66:67:25:92:0d:3c:f2:d3:4f:e3: b1:74:8c:b8:a8:13:8a:55:c8:fe:36:3b:ed:8f:0e:29:81:f2: ff:d0:90:23:00:b6:01:4f:c4:34:fb:e6:ae:bb:e3:8b:96:86: 49:12:2b:fb:6f:6d:cf:71:a8:09:f3:ef:65:c0:ca:d2:36:43: 02:67:da:51:78:a3:a7:b4:2a:12:e7:1a:59:39:98:38:b1:2a: 14:14:ac:1b:cc:cc:8b:85:52:71:3f:2d:a7:a2:ee:95:a2:e8: 68:9f:cc:a1:2d:ee:5d:7f:a2:dd:c8:a5:8a:36:48:b2:43:a3: e8:22:86:15:a9:73:5c:08:3a:db:da:17:db:07:b8:a3:90:11: 6a:88:2a:68:af:d0:11:79:83:cc:ce:17:4a:af:43:a4:4e:64: 95:d8:95:03:1d:d1:ee:53:ea:46:3f:d0:ea:35:ef:58:0a:6b: 21:2a:d1:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO18UR7PCbQfmaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ZTg5YzczZTEtYjc3Zi00NzZhLWJhY2QtMzViYTQzY2YxN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3x9g1WxuYL5wcPkQCPFBOvkHlSXLL6NEkpi EjaWiIu35qz3k+GgwYwl5YghAewGjU8sJjBPJ+OOCeNqUoFsd9SXacsGst6VLMgn rEXGbQFGRS69GFt8rwyydtBFU5OuWvm7MA3r8nqrU8g2l0z689V+mXRFpkimkd5O kBq7xtYYWbs3rmOFzDf3fUrrJBLx2mL7KGnkmATzfHW71ndS1y0yNqIaNDDslb5I 9oriOkAwMHDH+RvFSS53JXTkW31TgPjleALdJ8n0SNpnohKGeyfw4DVmk1nRHzIU ZJOc+CifsAsaQT1ber9NBqfJjBAQTAupBFZAuIVtLrLK12sqcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiHAh0UjQd33W/gj7xr06iIAqICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDRmOWMyZmQtZGIyZS0z MjA3LTg5MzAtZGUxOGI4M2VmM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn68nOPKvqzpE37EVz1VacdfR3c+rSHSlnrOmKt+cokFfMUBxay7b0f 5aGYQEnzkubV4iTFUbolCi5o9cB2c2ngR4V1dvj57pYoyIBwnGTPZmclkg088tNP 47F0jLioE4pVyP42O+2PDimB8v/QkCMAtgFPxDT75q6744uWhkkSK/tvbc9xqAnz 72XAytI2QwJn2lF4o6e0KhLnGlk5mDixKhQUrBvMzIuFUnE/Laei7pWi6GifzKEt 7l1/ot3IpYo2SLJDo+gihhWpc1wIOtvaF9sHuKOQEWqIKmiv0BF5g8zOF0qvQ6RO ZJXYlQMd0e5T6kY/0Oo171gKayEq0dg= -----END CERTIFICATE-----Generated at Tue Jul 21 20:04:03 2026 by rpki-client