$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b5b0c98-0e03-3a77-a40f-e574a01656e9.roa File: 3b5b0c98-0e03-3a77-a40f-e574a01656e9.roa (raw, json) Hash identifier: xvkmhr3Y9dA8o/YXf4IvyT5nyWt7MPvx3w1C1iI/cQM= Subject key identifier: A4:43:12:3B:E4:8D:E6:DF:8D:D4:16:9E:56:1A:5A:05:A6:AC:D9:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D404CBF3F64A82AD01160 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b5b0c98-0e03-3a77-a40f-e574a01656e9.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 73.29.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:40:4c:bf:3f:64:a8:2a:d0:11:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=b50d2fd3-1d0c-43f9-a288-87561735b7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8a:f4:df:37:a0:43:3f:ef:3c:60:4b:90:92: 2f:9a:62:57:25:43:67:80:b5:b1:4c:62:32:71:f6: 91:ac:85:d1:4e:52:d7:38:e7:fd:ae:cc:05:0f:8a: 78:19:5c:2d:da:42:f1:58:bf:49:66:e1:3a:e8:86: 3a:34:8e:42:7f:b7:93:bc:2d:3d:fa:ec:65:28:23: 2c:5d:5d:90:f1:42:83:ff:63:ae:c9:fc:db:75:62: 0e:b9:53:94:73:21:bf:de:cf:b5:97:d3:ec:43:53: ff:89:01:a4:a7:78:1e:57:fd:c9:71:35:a4:d9:e9: 6e:cf:aa:24:58:94:8e:c0:db:e1:8a:04:70:a5:9d: d7:23:ab:3a:7e:a7:b7:5c:2e:1f:a8:8d:da:ec:ef: fa:88:96:4b:68:47:02:c5:77:9e:a8:b1:59:52:b7: b2:2f:ec:dd:2f:68:56:53:f3:2b:52:bc:ad:fd:87: 86:54:47:49:75:f1:ea:1e:8f:09:bb:18:79:16:34: d7:9b:cd:79:bd:58:e6:4d:b1:3f:25:dc:a9:99:e3: 06:00:b3:b1:e9:03:72:26:35:00:bf:54:56:2e:ed: 2a:71:a1:18:9d:ab:cd:07:5f:4d:dc:ce:e2:9a:62: a9:94:26:76:bb:5f:54:35:df:cf:07:93:12:0e:f1: 21:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:43:12:3B:E4:8D:E6:DF:8D:D4:16:9E:56:1A:5A:05:A6:AC:D9:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b5b0c98-0e03-3a77-a40f-e574a01656e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.29.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:4d:c6:52:66:40:24:fb:80:5c:fc:9f:c2:b8:f7:84:76:11: 68:2a:dc:18:75:81:6e:36:70:56:9c:f4:40:fe:2d:04:54:a4: 87:b1:40:e7:18:b6:09:90:29:7c:b1:df:6d:84:fd:14:f0:c3: 32:9b:91:85:71:47:d5:ed:99:4d:5b:5e:e6:1b:0e:00:03:11: 5b:c8:51:b7:f9:5c:3a:0c:51:9e:0b:be:08:16:26:d1:6d:1d: 0c:9e:34:2b:30:53:79:c2:ff:bc:92:e9:e6:72:9c:f8:dc:3c: 19:12:5b:9d:89:5a:a2:2f:8d:fd:eb:68:b0:95:f3:a4:cb:5d: 41:5b:f5:cb:c9:8d:57:9e:76:72:52:a3:6e:98:19:07:2d:87: 66:07:5a:23:0a:10:bf:31:49:5f:b3:e8:0a:5c:c3:a6:ac:a4: 4b:29:3a:8c:d7:91:26:0f:fe:fd:ca:9c:ee:86:54:4e:32:de: 9d:be:d4:8c:29:fb:6a:16:68:3b:85:39:d2:0d:5c:9e:a3:e5: 39:f2:ba:c8:bd:72:e0:e3:34:f2:9d:19:83:2f:21:c5:00:b7: 03:e4:cb:dd:d3:cb:e3:94:c0:c8:1a:f7:1f:26:96:8b:19:b0: ea:a8:ec:d8:d4:27:59:de:f7:2d:b1:51:89:91:ff:67:db:f7: 58:a8:5e:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnUBMvz9kqCrQEWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YjUwZDJmZDMtMWQwYy00M2Y5LWEyODgtODc1NjE3MzViN2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4r03zegQz/vPGBLkJIvmmJXJUNngLWxTGIy cfaRrIXRTlLXOOf9rswFD4p4GVwt2kLxWL9JZuE66IY6NI5Cf7eTvC09+uxlKCMs XV2Q8UKD/2OuyfzbdWIOuVOUcyG/3s+1l9PsQ1P/iQGkp3geV/3JcTWk2eluz6ok WJSOwNvhigRwpZ3XI6s6fqe3XC4fqI3a7O/6iJZLaEcCxXeeqLFZUreyL+zdL2hW U/MrUryt/YeGVEdJdfHqHo8Juxh5FjTXm815vVjmTbE/JdypmeMGALOx6QNyJjUA v1RWLu0qcaEYnavNB19N3M7immKplCZ2u19UNd/PB5MSDvEhqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRDEjvkjebfjdQWnlYaWgWmrNn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2I1YjBjOTgtMGUwMy0z YTc3LWE0MGYtZTU3NGEwMTY1NmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSR3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5NxlJmQCT7gFz8n8K494R2EWgq3Bh1gW42cFac9ED+LQRUpIexQOcY tgmQKXyx322E/RTwwzKbkYVxR9XtmU1bXuYbDgADEVvIUbf5XDoMUZ4LvggWJtFt HQyeNCswU3nC/7yS6eZynPjcPBkSW52JWqIvjf3raLCV86TLXUFb9cvJjVeednJS o26YGQcth2YHWiMKEL8xSV+z6Apcw6aspEspOozXkSYP/v3KnO6GVE4y3p2+1Iwp +2oWaDuFOdINXJ6j5Tnyusi9cuDjNPKdGYMvIcUAtwPky93Ty+OUwMga9x8mlosZ sOqo7NjUJ1ne9y2xUYmR/2fb91ioXlY= -----END CERTIFICATE-----Generated at Mon Sep 21 23:52:09 2026 by rpki-client