$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48b59366-a6be-31e9-95f8-3e720a65b4b7.roa File: 48b59366-a6be-31e9-95f8-3e720a65b4b7.roa (raw, json) Hash identifier: VJ7XYd67z4EF7dSw9Z7x+KKiW28Z8+dRnT9UwIKhvHU= Subject key identifier: A0:8A:89:DB:16:A0:58:EA:4C:B5:7A:67:CE:98:3D:EE:43:95:B9:56 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E425D05EDEF2825379400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48b59366-a6be-31e9-95f8-3e720a65b4b7.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 73.170.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:42:5d:05:ed:ef:28:25:37:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=9f79ee6c-7d46-45b0-a5e6-9d0d8c0e8c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:75:58:d8:87:74:91:b4:d3:37:4e:64:b6: 92:17:d4:70:ff:63:9e:98:d7:fd:23:b7:fc:6e:5a: 38:9d:1f:0e:45:3f:d0:d1:ed:7e:9e:d1:bd:50:f8: 32:7e:cd:27:af:ac:a6:2e:74:c0:c5:54:b1:a7:3a: da:96:a5:6b:bf:5a:66:d1:f0:98:dd:11:eb:a5:fe: c2:7c:d5:a9:2f:f2:0f:82:0f:92:f2:41:c8:a2:9e: 0b:1f:1c:56:f1:0f:75:3f:75:ca:d6:9f:77:44:ff: 5c:02:e6:21:f8:f3:2d:63:fe:c7:d6:aa:f1:82:a1: 0a:89:a8:08:bb:1e:1a:89:5e:15:b3:16:27:c2:ac: 43:e8:06:fe:ec:48:73:71:9c:5f:9b:5c:d5:79:02: 9a:75:5a:fd:da:3f:dd:92:ac:87:10:7c:cd:94:79: 66:98:1c:d3:2b:77:5b:1c:4c:1e:4f:a6:cb:52:5b: 85:78:40:b0:da:4a:1d:1c:9d:a7:6c:1f:62:90:ca: 54:0c:95:7d:d3:d2:36:43:b8:95:a8:2f:87:78:a1: 7f:d8:a1:a2:57:37:78:a2:44:3e:1f:9e:3b:e9:21: 35:1d:05:ad:79:8a:89:43:ae:9d:08:1f:0b:48:d7: 4e:c5:9c:fb:ce:9f:20:2f:9b:63:89:c5:19:94:96: ca:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8A:89:DB:16:A0:58:EA:4C:B5:7A:67:CE:98:3D:EE:43:95:B9:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48b59366-a6be-31e9-95f8-3e720a65b4b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.170.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:34:3b:3e:fc:9c:0b:6c:38:c6:e8:af:f3:f8:6d:bf:83:2b: 6a:94:29:ed:84:09:a9:26:10:a9:55:61:f7:0c:60:0b:67:b6: a9:eb:cc:17:65:b3:b6:ba:5a:3d:6c:9a:bf:84:49:30:e1:aa: f5:20:ab:59:2c:8a:b3:96:9d:02:36:31:89:b2:d3:be:cc:41: 14:36:43:e8:0a:77:14:7f:e6:7f:a9:b2:3e:4d:27:71:0b:b5: 92:1f:4f:c0:22:2a:d1:b3:7d:97:39:2f:67:98:52:59:59:b6: 24:94:8b:d8:a0:e0:96:c5:1f:3f:db:42:a3:d8:20:b2:ac:79: ac:07:fe:25:0e:86:89:80:a6:55:7f:79:56:db:f7:cb:15:3e: 2c:a8:3d:76:e9:ea:b5:e8:d2:93:c7:4e:f7:b2:1c:71:da:e4: 77:e9:8a:38:e6:fe:e9:7c:a1:80:a9:8a:26:62:06:e8:b4:01: 6a:72:9f:77:42:46:e2:a7:6f:50:0b:f7:8e:28:9e:cb:13:6c: ea:d6:3d:dd:18:83:0f:57:eb:fe:2f:6b:6d:db:7e:88:f5:6c: e9:8e:4d:eb:52:e5:25:16:e7:dd:22:02:f8:25:be:b5:a8:f7: 19:cb:c1:d3:39:15:17:e0:12:44:49:ab:23:3c:e6:80:50:42: a4:6c:8f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnkJdBe3vKCU3lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OWY3OWVlNmMtN2Q0Ni00NWIwLWE1ZTYtOWQwZDhjMGU4YzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXx1WNiHdJG00zdOZLaSF9Rw/2OemNf9I7f8 blo4nR8ORT/Q0e1+ntG9UPgyfs0nr6ymLnTAxVSxpzralqVrv1pm0fCY3RHrpf7C fNWpL/IPgg+S8kHIop4LHxxW8Q91P3XK1p93RP9cAuYh+PMtY/7H1qrxgqEKiagI ux4aiV4VsxYnwqxD6Ab+7EhzcZxfm1zVeQKadVr92j/dkqyHEHzNlHlmmBzTK3db HEweT6bLUluFeECw2kodHJ2nbB9ikMpUDJV909I2Q7iVqC+HeKF/2KGiVzd4okQ+ H5476SE1HQWteYqJQ66dCB8LSNdOxZz7zp8gL5tjicUZlJbKzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCKidsWoFjqTLV6Z86YPe5DlblWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDhiNTkzNjYtYTZiZS0z MWU5LTk1ZjgtM2U3MjBhNjViNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSap4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALk0Oz78nAtsOMbor/P4bb+DK2qUKe2ECakmEKlVYfcMYAtntqnrzBdl s7a6Wj1smr+ESTDhqvUgq1ksirOWnQI2MYmy077MQRQ2Q+gKdxR/5n+psj5NJ3EL tZIfT8AiKtGzfZc5L2eYUllZtiSUi9ig4JbFHz/bQqPYILKseawH/iUOhomAplV/ eVbb98sVPiyoPXbp6rXo0pPHTveyHHHa5Hfpijjm/ul8oYCpiiZiBui0AWpyn3dC RuKnb1AL944onssTbOrWPd0Ygw9X6/4va23bfoj1bOmOTetS5SUW590iAvglvrWo 9xnLwdM5FRfgEkRJqyM85oBQQqRsj3Q= -----END CERTIFICATE-----Generated at Sun Sep 20 17:22:02 2026 by rpki-client