$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aae9ba5-3cd4-39e2-b3c8-5f2fe6e8be7d.roa File: 4aae9ba5-3cd4-39e2-b3c8-5f2fe6e8be7d.roa (raw, json) Hash identifier: zvMMvIdj+e9Qd0nLi0Dj6emEIWshmqBDEf40ZMs0WZg= Subject key identifier: BA:67:D6:6B:51:69:AF:F4:33:92:16:8C:44:12:8B:C8:FD:0D:64:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E9FD32BB2A05D2FAAD280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aae9ba5-3cd4-39e2-b3c8-5f2fe6e8be7d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 73.33.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:9f:d3:2b:b2:a0:5d:2f:aa:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=68f5ddbc-cca5-44ba-be51-7f9b8a5052a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:e2:0e:ba:f9:ea:67:f1:b8:b6:e3:80:9f: 79:71:ed:b4:d5:93:51:a5:ad:d7:4a:85:c2:ac:18: a9:ee:4e:1b:76:bf:d3:0c:55:8a:fa:16:60:ec:03: 6c:15:bb:bd:6d:3a:0a:da:26:5f:f0:77:24:e2:75: 44:01:51:ff:de:ca:c2:5c:7b:3a:65:19:ce:53:c1: d9:67:d9:66:11:4c:4c:13:73:ca:02:5c:30:6d:fa: 29:ba:8c:2b:2d:f5:ed:38:f5:9a:1e:f8:cc:7b:ec: 36:e1:17:86:de:b4:51:ee:f8:7c:91:5d:c8:ca:67: d7:d5:a6:ec:f7:5c:42:b8:d3:6b:65:f9:a4:88:9e: 40:68:bb:fb:1f:05:7f:c5:4c:0b:c2:eb:d2:12:fe: 05:36:21:dc:0e:14:29:77:dc:32:c7:40:b8:80:4a: 57:dd:aa:87:46:47:a1:4d:a1:55:6a:d6:30:c1:23: 8e:8c:b9:a0:45:67:58:17:94:e3:e3:5b:d6:95:c9: e0:1c:0e:5e:c1:56:fa:4e:39:cf:7f:86:9a:c8:aa: f6:24:2a:e3:95:2d:0d:ea:65:61:bc:2b:41:d8:06: 6b:ca:cc:6a:79:d8:80:63:e2:b4:4e:e8:fe:2d:9f: e7:ef:16:34:b0:29:72:76:5f:d8:fc:d5:c2:06:99: 82:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:67:D6:6B:51:69:AF:F4:33:92:16:8C:44:12:8B:C8:FD:0D:64:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aae9ba5-3cd4-39e2-b3c8-5f2fe6e8be7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.33.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:61:ba:fe:57:41:0b:88:51:0f:62:f2:88:16:a2:97:f6:52: 58:de:4c:03:83:b7:07:a2:5a:59:9f:67:cf:c2:7d:6d:30:a9: 68:4d:ad:c5:5b:de:61:9b:f2:a7:7e:71:b1:49:f1:9f:cb:1a: f8:e9:85:a4:d7:46:07:24:a6:d9:c2:40:f7:3a:71:1d:53:8d: 4b:e8:f6:83:9d:e4:cb:7e:ed:70:b5:78:e0:d0:c9:b9:77:b7: 8d:75:ef:bd:2e:ab:63:02:5a:2b:cf:59:35:ae:17:6c:27:a0: 1b:2f:5d:1d:45:61:d6:db:e9:a7:2b:9c:f6:13:d6:bd:02:58: 6c:7e:12:e2:c8:03:03:03:86:c8:28:7d:72:86:80:e8:54:eb: e4:71:f9:49:8d:20:57:74:82:2e:42:35:8d:c4:29:c5:ca:4b: b0:b1:2d:9a:52:e5:63:14:3f:a2:e9:12:e4:4e:98:e4:fe:13: 52:5f:6c:ac:6b:0d:55:8d:0d:c8:6d:ae:db:2d:61:67:dd:fa: 4e:2a:a1:d0:47:a7:f9:2b:02:38:47:e5:83:5d:5b:6a:be:c7: 7e:e1:2a:4f:7d:32:a6:eb:92:43:58:1a:df:fc:45:00:5b:82: 94:29:71:81:c2:0c:7e:bb:ea:98:5b:2e:79:51:4a:1f:06:c8: a2:c1:fa:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnp/TK7KgXS+q0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NjhmNWRkYmMtY2NhNS00NGJhLWJlNTEtN2Y5YjhhNTA1MmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8XiDrr56mfxuLbjgJ95ce201ZNRpa3XSoXC rBip7k4bdr/TDFWK+hZg7ANsFbu9bToK2iZf8Hck4nVEAVH/3srCXHs6ZRnOU8HZ Z9lmEUxME3PKAlwwbfopuowrLfXtOPWaHvjMe+w24ReG3rRR7vh8kV3IymfX1abs 91xCuNNrZfmkiJ5AaLv7HwV/xUwLwuvSEv4FNiHcDhQpd9wyx0C4gEpX3aqHRkeh TaFVatYwwSOOjLmgRWdYF5Tj41vWlcngHA5ewVb6TjnPf4aayKr2JCrjlS0N6mVh vCtB2AZrysxqediAY+K0Tuj+LZ/n7xY0sClydl/Y/NXCBpmCBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpn1mtRaa/0M5IWjEQSi8j9DWQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFhZTliYTUtM2NkNC0z OWUyLWIzYzgtNWYyZmU2ZThiZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSSGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRhuv5XQQuIUQ9i8ogWopf2UljeTAODtweiWlmfZ8/CfW0wqWhNrcVb 3mGb8qd+cbFJ8Z/LGvjphaTXRgckptnCQPc6cR1TjUvo9oOd5Mt+7XC1eODQybl3 t411770uq2MCWivPWTWuF2wnoBsvXR1FYdbb6acrnPYT1r0CWGx+EuLIAwMDhsgo fXKGgOhU6+Rx+UmNIFd0gi5CNY3EKcXKS7CxLZpS5WMUP6LpEuROmOT+E1JfbKxr DVWNDchtrtstYWfd+k4qodBHp/krAjhH5YNdW2q+x37hKk99MqbrkkNYGt/8RQBb gpQpcYHCDH676phbLnlRSh8GyKLB+v0= -----END CERTIFICATE-----Generated at Mon Sep 21 03:35:37 2026 by rpki-client