$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07733e18-b73f-395d-b813-361a2364cd70.roa File: 07733e18-b73f-395d-b813-361a2364cd70.roa (raw, json) Hash identifier: xpw8tgG5N+0Uz32d+3fe1NQHW2AWaGC+iUCmJlVLEsU= Subject key identifier: 95:AA:45:C6:8D:52:5F:26:31:9D:9B:37:8C:EA:6F:72:D2:E4:95:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EB82E6ADCCDFF134E0F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07733e18-b73f-395d-b813-361a2364cd70.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 73.248.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:b8:2e:6a:dc:cd:ff:13:4e:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=20405dcc-c27e-4187-8a8f-263b7d61eff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:23:70:a0:9a:6e:e0:5d:9f:28:90:b6:3e: d6:8e:75:5e:8e:f4:b0:cc:2d:dc:98:fa:b3:1f:ef: d8:06:81:35:2d:6a:91:5c:23:ba:33:97:10:23:ff: 04:55:05:f3:de:3b:f3:a3:02:14:9c:3b:1a:1a:68: 50:bd:f5:8c:8d:26:18:cb:18:f7:9d:ba:d1:d9:f4: d3:4e:28:08:0f:3d:c4:72:25:25:cf:59:9f:06:08: 5f:c3:43:e9:95:a6:4c:33:d2:da:2f:29:ed:5b:28: 51:bc:68:c5:13:72:2d:d4:e5:97:d7:8c:e6:dc:52: bd:ce:37:19:b2:5a:0b:44:d0:b1:c6:9c:11:61:e8: ab:de:f7:fd:da:78:fe:00:5f:45:63:50:cc:a3:b0: 89:75:32:db:5a:54:cb:35:67:2b:8b:47:ff:31:04: d3:86:17:6f:9f:0c:bd:d9:e4:46:72:59:83:60:03: 16:17:da:b9:33:f0:b3:31:16:25:23:93:a5:cc:7c: ea:c3:f1:7c:b4:db:4e:00:20:09:ab:0f:a7:58:4e: 93:ca:bb:c3:71:35:0f:ef:9b:e9:12:2f:fa:d8:d8: 71:3a:8a:21:6d:01:22:6b:a1:3f:b3:72:60:a9:48: cf:73:b3:d3:34:54:12:9e:6a:44:58:aa:df:51:31: 0f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AA:45:C6:8D:52:5F:26:31:9D:9B:37:8C:EA:6F:72:D2:E4:95:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07733e18-b73f-395d-b813-361a2364cd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:77:3e:e8:ce:a4:ed:55:b9:d8:30:c5:84:45:7a:0d:82:8e: da:68:44:62:50:72:f4:e8:24:e3:0c:19:63:6b:87:bc:e6:25: b4:71:e8:16:1d:57:9d:9a:30:f4:ee:87:83:d3:01:2a:e8:ce: f0:63:e2:fc:f7:2e:14:c6:95:be:ee:c5:89:e2:1e:1a:12:71: 89:7b:ba:22:2c:e4:4f:28:e6:2b:a7:d4:33:94:5d:e2:1a:c8: 2f:ee:5c:c4:b2:c5:5f:d6:aa:38:e7:04:23:33:59:28:cc:21: 2c:06:ef:9d:e4:63:39:bc:05:37:cc:09:6d:97:35:fb:09:86: 3d:82:6e:44:2d:f1:b9:01:9f:69:0b:03:25:e6:37:18:99:d7: 25:12:4f:62:c8:cf:c3:23:d3:3b:29:0c:a5:35:d1:6f:0b:f8: 6f:42:cd:61:cd:a2:27:7f:56:63:3c:03:07:e2:9c:83:80:ec: 97:17:00:c9:39:3f:a5:7a:2d:6d:19:af:3c:d1:43:4c:b2:25: 6f:f9:21:e8:e5:be:34:10:39:93:9a:86:d4:b2:f8:d7:46:6e: 92:ae:6d:fa:fa:30:95:25:8f:8b:bf:5e:7d:88:21:2b:d3:29: 8c:ac:5e:28:ce:97:78:0f:67:89:ca:fe:36:f5:ce:f3:ed:a5: 71:c5:cb:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnrguatzN/xNOD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MjA0MDVkY2MtYzI3ZS00MTg3LThhOGYtMjYzYjdkNjFlZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUUjcKCabuBdnyiQtj7WjnVejvSwzC3cmPqz H+/YBoE1LWqRXCO6M5cQI/8EVQXz3jvzowIUnDsaGmhQvfWMjSYYyxj3nbrR2fTT TigIDz3EciUlz1mfBghfw0PplaZMM9LaLyntWyhRvGjFE3It1OWX14zm3FK9zjcZ sloLRNCxxpwRYeir3vf92nj+AF9FY1DMo7CJdTLbWlTLNWcri0f/MQTThhdvnwy9 2eRGclmDYAMWF9q5M/CzMRYlI5OlzHzqw/F8tNtOACAJqw+nWE6TyrvDcTUP75vp Ei/62NhxOoohbQEia6E/s3JgqUjPc7PTNFQSnmpEWKrfUTEPfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWqRcaNUl8mMZ2bN4zqb3LS5JXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDc3MzNlMTgtYjczZi0z OTVkLWI4MTMtMzYxYTIzNjRjZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZ3PujOpO1VudgwxYRFeg2CjtpoRGJQcvToJOMMGWNrh7zmJbRx6BYd V52aMPTuh4PTASrozvBj4vz3LhTGlb7uxYniHhoScYl7uiIs5E8o5iun1DOUXeIa yC/uXMSyxV/WqjjnBCMzWSjMISwG753kYzm8BTfMCW2XNfsJhj2CbkQt8bkBn2kL AyXmNxiZ1yUST2LIz8Mj0zspDKU10W8L+G9CzWHNoid/VmM8AwfinIOA7JcXAMk5 P6V6LW0ZrzzRQ0yyJW/5IejlvjQQOZOahtSy+NdGbpKubfr6MJUlj4u/Xn2IISvT KYysXijOl3gPZ4nK/jb1zvPtpXHFy70= -----END CERTIFICATE-----Generated at Tue Sep 22 21:17:25 2026 by rpki-client