$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/899a2d58-4f1c-3e53-a006-10d70be5d9b8.roa File: 899a2d58-4f1c-3e53-a006-10d70be5d9b8.roa (raw, json) Hash identifier: 8EITep4EzQ8RTiN5kCX0MBmPwA0rPJeMP5G1pWCAGyw= Subject key identifier: BB:1A:B5:98:96:D2:C7:6E:37:30:80:14:87:CA:E3:9F:75:95:99:99 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49811C307EC7895A84841380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/899a2d58-4f1c-3e53-a006-10d70be5d9b8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33660 IP address blocks: 50.73.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:1c:30:7e:c7:89:5a:84:84:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8bf9ed00-efc3-4e3e-839f-be109d616ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:13:b8:c2:10:f6:0b:ac:99:2f:3f:2f:0d:48: 8b:41:d9:ab:91:c2:81:c7:7c:ff:f2:3e:35:2e:e1: c5:ee:f1:ab:fa:2d:ed:8a:eb:14:1d:05:ef:a4:92: 04:a7:a6:7e:91:f9:d8:4e:23:8a:75:be:73:b7:b8: 95:19:8f:03:8d:c3:34:a6:96:d2:b3:48:66:41:4f: 90:70:3d:ba:45:26:ab:4a:3e:04:91:47:cf:14:50: a1:8a:b1:d4:9f:74:3a:4f:04:73:c0:15:b0:ce:97: 07:b7:07:23:80:b2:17:bd:ad:90:3d:06:da:97:1e: 63:20:9d:f8:bb:77:9a:84:56:f8:f5:31:70:f3:2b: 7a:72:51:96:d6:ca:d5:be:f9:4e:4b:f8:71:0a:09: 21:15:e7:ad:39:30:50:ae:84:82:ba:cd:84:ca:f2: dd:2a:d1:b3:10:35:e8:6a:b8:7e:a7:0d:72:1b:3f: e7:90:84:7b:54:33:49:b2:93:f2:c5:bf:ad:8e:69: 2f:d2:d0:9b:f1:d1:9e:7f:c0:cd:bc:4b:58:0a:8e: c0:65:c4:bd:ff:93:bc:09:e8:5d:47:39:6f:7c:39: af:70:a5:1f:06:67:19:99:6e:af:bb:90:68:0f:03: 08:9b:fb:9c:64:53:9f:b9:27:9e:78:b9:a2:ba:a4: 61:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1A:B5:98:96:D2:C7:6E:37:30:80:14:87:CA:E3:9F:75:95:99:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/899a2d58-4f1c-3e53-a006-10d70be5d9b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.73.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:f5:49:87:7d:1d:c5:9e:9d:47:3b:51:c2:08:e5:2b:62:39: 3f:7a:b8:27:ff:ea:bc:4c:d8:e4:ca:d0:a9:6d:6f:17:12:72: a4:16:8e:63:48:bc:65:71:ce:00:75:ef:6e:ff:24:1c:a9:ec: b2:21:45:af:77:fb:9b:d9:a0:ac:19:95:c5:cc:07:66:75:01: 65:92:70:71:01:3d:48:41:ec:51:77:42:98:41:cf:5c:f8:cc: 7e:9c:ef:98:74:e3:67:7a:2a:f2:1c:48:ef:c2:08:1b:fa:33: fe:ff:85:9d:6b:22:e8:43:3b:bf:a9:4a:e3:1c:05:d3:d1:f0: c7:5f:83:89:3c:53:b2:61:cd:64:01:ab:35:95:83:61:14:ad: 0b:a3:6b:bf:90:d5:0e:c6:56:a9:ec:db:bd:83:ba:3e:d0:bd: ba:bf:cf:4f:17:da:46:f5:91:5c:b1:31:98:fd:9a:40:c7:ad: b3:f4:b7:7c:76:53:e8:7a:d1:49:32:93:cc:5a:c2:5d:bb:e0: 49:35:07:23:a0:04:b9:9a:98:ea:d0:15:d9:35:10:af:2c:e6: 46:75:fc:43:2d:3d:9f:93:57:17:7c:26:e9:c7:4c:25:b3:76: ec:e9:2c:62:d6:03:f6:c6:9d:78:ea:f9:a1:ee:04:23:e0:11: eb:07:b0:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgRwwfseJWoSEE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGJmOWVkMDAtZWZjMy00ZTNlLTgzOWYtYmUxMDlkNjE2Y2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRO4whD2C6yZLz8vDUiLQdmrkcKBx3z/8j41 LuHF7vGr+i3tiusUHQXvpJIEp6Z+kfnYTiOKdb5zt7iVGY8DjcM0ppbSs0hmQU+Q cD26RSarSj4EkUfPFFChirHUn3Q6TwRzwBWwzpcHtwcjgLIXva2QPQbalx5jIJ34 u3eahFb49TFw8yt6clGW1srVvvlOS/hxCgkhFeetOTBQroSCus2EyvLdKtGzEDXo arh+pw1yGz/nkIR7VDNJspPyxb+tjmkv0tCb8dGef8DNvEtYCo7AZcS9/5O8Cehd RzlvfDmvcKUfBmcZmW6vu5BoDwMIm/ucZFOfuSeeeLmiuqRh2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsatZiW0sduNzCAFIfK4591lZmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk5YTJkNTgtNGYxYy0z ZTUzLWEwMDYtMTBkNzBiZTVkOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMkkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJT1SYd9HcWenUc7UcII5StiOT96uCf/6rxM2OTK0KltbxcScqQWjmNI vGVxzgB1727/JByp7LIhRa93+5vZoKwZlcXMB2Z1AWWScHEBPUhB7FF3QphBz1z4 zH6c75h042d6KvIcSO/CCBv6M/7/hZ1rIuhDO7+pSuMcBdPR8Mdfg4k8U7JhzWQB qzWVg2EUrQuja7+Q1Q7GVqns272Duj7Qvbq/z08X2kb1kVyxMZj9mkDHrbP0t3x2 U+h60Ukyk8xawl274Ek1ByOgBLmamOrQFdk1EK8s5kZ1/EMtPZ+TVxd8JunHTCWz duzpLGLWA/bGnXjq+aHuBCPgEesHsIc= -----END CERTIFICATE-----Generated at Tue Sep 29 13:26:39 2026 by rpki-client