$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d301296-4ca1-3abb-a682-8f6058fff10e.roa File: 8d301296-4ca1-3abb-a682-8f6058fff10e.roa (raw, json) Hash identifier: 2XpApx8S3mhl/y1CWACtrD4vZMs6+XV1vU5rDnOM96c= Subject key identifier: AA:C6:0B:72:52:D3:19:19:08:D5:EA:C9:46:4E:D8:31:79:11:CE:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A09532CBF7FBD2FD6F97A4 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d301296-4ca1-3abb-a682-8f6058fff10e.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 73.223.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a0:95:32:cb:f7:fb:d2:fd:6f:97:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=3e416508-1505-4279-a963-0ba0a744d076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2a:51:8d:4c:d5:0d:09:f1:45:f0:f9:91:d7: 08:a9:3c:92:c5:7a:1c:51:4c:2f:01:e1:a9:1f:62: 25:c9:55:6f:3d:89:57:f4:18:63:47:3a:5c:dd:96: d3:2d:b6:ec:f0:41:1a:77:a7:d6:2d:00:f5:28:23: 70:14:04:1a:5f:61:20:25:d8:b8:1a:6f:ed:cb:26: 70:10:b9:95:05:b3:76:37:02:c0:49:7e:57:e7:49: 8a:bc:de:2e:1b:3f:10:74:08:88:0a:c4:41:93:bf: a9:59:40:ed:a9:f1:a7:f8:52:e8:70:33:f5:b3:3a: 97:d7:d3:80:c8:a6:6f:14:5b:a1:63:79:b0:59:54: d3:83:e0:c7:9f:d5:42:a5:11:84:ac:a4:93:27:c4: f5:50:ce:12:93:77:dd:4e:20:d2:09:d5:5e:f9:28: cf:c9:1e:13:4c:95:81:1e:23:7a:02:27:2c:53:c5: 5f:86:94:2f:ce:83:0f:04:1b:3b:3e:de:65:ea:91: 9c:24:a4:41:ec:a3:aa:03:e0:cc:cd:05:c7:3a:07: 49:e6:2a:e0:cd:04:ed:f7:04:22:a4:8c:3b:99:b9: 22:bb:3f:36:4b:56:ea:fc:d0:d7:e7:d3:a1:d0:84: 7b:98:06:20:ce:37:a4:84:16:96:1f:7f:98:6e:d8: cc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C6:0B:72:52:D3:19:19:08:D5:EA:C9:46:4E:D8:31:79:11:CE:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d301296-4ca1-3abb-a682-8f6058fff10e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:b0:75:25:c8:c8:d7:02:a9:e7:50:7b:ee:f9:d0:8e:55:54: 1f:ff:f6:b9:e7:91:5a:19:7c:ca:ab:b0:69:2c:45:91:7d:a0: 73:9c:6a:fa:56:be:9c:2d:0c:f6:fb:45:46:2a:7d:07:6a:fb: ed:e7:c0:fd:dc:a2:f0:3a:55:14:7d:8b:86:24:20:b2:69:06: 1f:46:1b:de:f1:de:b3:1d:db:1b:24:f6:7f:9c:6b:4c:c9:1d: c1:93:fc:ca:3d:71:ef:9a:74:40:d3:3e:83:ed:22:82:95:a4: d0:32:03:a2:89:90:c8:09:ca:c3:0f:0c:44:df:53:85:31:e5: 13:b5:c4:53:e6:10:84:19:42:d0:a4:dd:bb:32:b1:54:f5:42: 08:9d:f2:d8:b1:b1:86:33:e8:43:4e:35:b8:63:bb:be:d8:f6: c5:9b:f9:19:6d:7a:8f:62:49:2a:ad:59:d6:94:87:fc:b6:65: 45:66:af:42:67:0e:52:33:35:15:8f:49:cd:79:62:b0:bd:03: 59:66:6e:78:81:8c:0d:66:7b:0c:7d:dd:c7:b4:1c:01:e5:33: f0:00:6e:db:4a:3e:7c:21:8c:f7:71:40:3f:8c:df:a0:0d:fb: b9:03:a6:be:77:e1:c6:44:36:2c:df:b2:fc:6f:2f:35:2c:0e: 39:9f:5f:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoJUyy/f70v1vl6QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk M2U0MTY1MDgtMTUwNS00Mjc5LWE5NjMtMGJhMGE3NDRkMDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCpRjUzVDQnxRfD5kdcIqTySxXocUUwvAeGp H2IlyVVvPYlX9BhjRzpc3ZbTLbbs8EEad6fWLQD1KCNwFAQaX2EgJdi4Gm/tyyZw ELmVBbN2NwLASX5X50mKvN4uGz8QdAiICsRBk7+pWUDtqfGn+FLocDP1szqX19OA yKZvFFuhY3mwWVTTg+DHn9VCpRGErKSTJ8T1UM4Sk3fdTiDSCdVe+SjPyR4TTJWB HiN6AicsU8VfhpQvzoMPBBs7Pt5l6pGcJKRB7KOqA+DMzQXHOgdJ5irgzQTt9wQi pIw7mbkiuz82S1bq/NDX59Oh0IR7mAYgzjekhBaWH3+YbtjMqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrGC3JS0xkZCNXqyUZO2DF5Ec4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQzMDEyOTYtNGNhMS0z YWJiLWE2ODItOGY2MDU4ZmZmMTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd8GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANWwdSXIyNcCqedQe+750I5VVB//9rnnkVoZfMqrsGksRZF9oHOcavpW vpwtDPb7RUYqfQdq++3nwP3covA6VRR9i4YkILJpBh9GG97x3rMd2xsk9n+ca0zJ HcGT/Mo9ce+adEDTPoPtIoKVpNAyA6KJkMgJysMPDETfU4Ux5RO1xFPmEIQZQtCk 3bsysVT1Qgid8tixsYYz6ENONbhju77Y9sWb+Rlteo9iSSqtWdaUh/y2ZUVmr0Jn DlIzNRWPSc15YrC9A1lmbniBjA1mewx93ce0HAHlM/AAbttKPnwhjPdxQD+M36AN +7kDpr534cZENizfsvxvLzUsDjmfX38= -----END CERTIFICATE-----Generated at Mon Sep 21 12:59:15 2026 by rpki-client