$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/607dbe9a-bddd-3d58-b4de-a6f5548e30e8.roa File: 607dbe9a-bddd-3d58-b4de-a6f5548e30e8.roa (raw, json) Hash identifier: jFyCinRb41VnrIrGlAm7VTLUh+eJtdSz8zvt7on4pE8= Subject key identifier: 82:E4:AA:1C:60:9E:8A:5C:FE:9B:EA:3B:7A:83:9B:86:3F:B4:DE:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EB04E593F7452C6E3F100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/607dbe9a-bddd-3d58-b4de-a6f5548e30e8.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 73.198.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:b0:4e:59:3f:74:52:c6:e3:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c65304c8-5d20-47cb-942c-96244612ca0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:c0:41:79:9c:07:c4:d8:fb:23:3f:b6:e3: f1:23:d0:84:2d:d7:d6:4e:66:70:ec:25:d1:19:1b: db:0b:49:1c:7d:6e:77:a2:06:12:bf:3b:d7:0f:a1: 24:bd:a3:e0:32:25:c5:fa:d1:66:49:6f:c1:a7:65: 35:cc:b6:ba:ae:94:7f:41:f3:22:54:dc:e6:b4:47: 5f:23:1b:ed:3b:3c:9c:46:69:3b:92:c1:dc:db:52: ea:db:15:ba:d0:b6:44:47:09:99:97:7e:b1:c3:32: dd:18:e2:d2:a3:f1:bd:08:79:56:51:76:32:e7:27: 43:46:38:63:69:f3:ea:54:56:b9:b4:c4:5a:45:a2: e1:b0:5d:08:4c:8d:6c:28:15:2a:12:da:da:13:4c: 0a:ce:34:b9:48:e5:ca:7e:d0:20:f9:47:00:49:4d: 6b:ee:10:5a:b2:c5:b2:91:c4:1a:cc:8f:da:1d:f2: 00:5f:a3:47:cb:30:42:d7:18:c2:c9:7d:82:49:9c: a0:fa:09:a1:9d:b9:3b:b6:3e:59:68:7d:bd:28:e3: 62:24:d1:d7:59:0a:6b:9e:e4:d4:52:06:fa:a4:c1: ac:38:54:2a:fa:a0:a3:16:eb:21:3a:4f:1f:8e:0d: 7b:5a:b4:53:c5:04:70:fb:4d:2d:45:f3:97:be:f1: 2a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E4:AA:1C:60:9E:8A:5C:FE:9B:EA:3B:7A:83:9B:86:3F:B4:DE:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/607dbe9a-bddd-3d58-b4de-a6f5548e30e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.198.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:6a:f7:66:46:7a:97:bf:71:e9:2a:46:b1:52:3a:6f:4e:96: ea:75:25:6a:2f:f1:d1:cf:de:12:01:cf:9c:20:ad:68:fa:3f: 17:48:8c:8e:3b:d6:80:e2:44:5e:cc:d0:01:0d:61:22:ef:9b: 3f:a6:3f:aa:fd:d9:9f:cb:cb:63:39:77:5f:18:ad:0c:a0:da: 1e:96:6d:89:ca:12:f9:98:2e:dc:0f:33:f9:8d:59:ab:ce:98: 34:cd:dd:77:15:26:8e:c9:cf:b2:0a:3b:b4:f9:35:72:3f:0b: 2f:6c:3e:24:ab:05:e2:8e:3c:9f:93:d2:0c:43:07:90:53:45: 62:5c:0d:bf:33:da:29:1d:bb:1f:1d:85:28:00:db:06:26:cb: d2:16:f6:5a:63:c7:4e:ac:e4:c9:dc:2e:2d:f5:93:89:3f:d3: c8:bb:40:0d:21:ad:c7:d4:ce:58:3b:59:ed:9e:81:79:76:46: 97:cb:6f:35:e5:8f:29:b0:ee:75:f3:1c:4a:42:5d:c1:e0:b4: e8:95:2b:b6:4d:84:14:1a:40:75:1a:1f:fa:47:8d:a3:e7:ab: 0d:da:cb:a9:b9:c1:79:8b:75:33:39:91:36:d6:41:27:d4:3b: 9f:36:54:0d:34:5b:78:9e:ca:4b:49:8a:1e:18:74:dd:1f:00: 5f:a4:78:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnrBOWT90Usbj8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzY1MzA0YzgtNWQyMC00N2NiLTk0MmMtOTYyNDQ2MTJjYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC/AQXmcB8TY+yM/tuPxI9CELdfWTmZw7CXR GRvbC0kcfW53ogYSvzvXD6EkvaPgMiXF+tFmSW/Bp2U1zLa6rpR/QfMiVNzmtEdf IxvtOzycRmk7ksHc21Lq2xW60LZERwmZl36xwzLdGOLSo/G9CHlWUXYy5ydDRjhj afPqVFa5tMRaRaLhsF0ITI1sKBUqEtraE0wKzjS5SOXKftAg+UcASU1r7hBassWy kcQazI/aHfIAX6NHyzBC1xjCyX2CSZyg+gmhnbk7tj5ZaH29KONiJNHXWQprnuTU Ugb6pMGsOFQq+qCjFushOk8fjg17WrRTxQRw+00tRfOXvvEqfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILkqhxgnopc/pvqO3qDm4Y/tN5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjA3ZGJlOWEtYmRkZC0z ZDU4LWI0ZGUtYTZmNTU0OGUzMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxq92ZGepe/cekqRrFSOm9Olup1JWov8dHP3hIBz5wgrWj6PxdIjI47 1oDiRF7M0AENYSLvmz+mP6r92Z/Ly2M5d18YrQyg2h6WbYnKEvmYLtwPM/mNWavO mDTN3XcVJo7Jz7IKO7T5NXI/Cy9sPiSrBeKOPJ+T0gxDB5BTRWJcDb8z2ikdux8d hSgA2wYmy9IW9lpjx06s5MncLi31k4k/08i7QA0hrcfUzlg7We2egXl2RpfLbzXl jymw7nXzHEpCXcHgtOiVK7ZNhBQaQHUaH/pHjaPnqw3ay6m5wXmLdTM5kTbWQSfU O582VA00W3ieyktJih4YdN0fAF+keHM= -----END CERTIFICATE-----Generated at Mon Sep 21 14:00:40 2026 by rpki-client