$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e7e6d78-d148-3d57-8bc0-abd187ff7da2.roa File: 9e7e6d78-d148-3d57-8bc0-abd187ff7da2.roa (raw, json) Hash identifier: MjiJD2wNkMGnZd9lOmipgJvjjEM15Ek+fsv2fllNMRc= Subject key identifier: 16:4F:59:1E:A1:B3:64:1A:7D:C9:4E:91:CF:BD:33:B5:DD:4D:A1:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E9EBAEE1E10D3D84FA480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e7e6d78-d148-3d57-8bc0-abd187ff7da2.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 73.33.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:9e:ba:ee:1e:10:d3:d8:4f:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c05d642a-e341-4bf9-85f5-2e823fa99ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:76:31:2b:5c:cf:25:be:33:78:b5:a8:f4:e9: 9d:f2:95:6e:51:f7:82:6e:d6:72:ca:76:cb:3f:52: e1:38:b7:f3:51:7d:13:63:78:8a:71:91:b4:31:f5: 38:5b:09:d4:0c:9a:db:15:2a:de:76:46:ae:80:18: 6f:ce:44:40:fd:42:ad:e2:28:b3:71:4d:ca:e5:74: 7b:15:c0:42:1b:de:e7:bd:83:47:06:22:b6:c0:1a: bb:ad:62:dd:3c:6b:37:20:0a:36:f4:c1:db:63:00: d4:70:7c:5c:b2:e6:fa:58:4d:9c:bf:89:3f:03:ef: 29:80:8b:49:47:3c:3d:c4:93:30:d4:d7:dc:aa:96: e6:0d:c3:9d:10:fd:e0:fc:02:fd:4b:3f:22:52:2e: 8b:b3:1a:c3:db:d1:e4:1c:ec:82:9d:e1:27:97:e8: 42:ee:6a:f4:27:af:ec:f3:76:d2:46:76:29:70:53: d9:1f:2a:64:38:39:b4:00:6f:12:01:3c:3f:81:62: b4:16:b9:ac:17:8a:55:fe:ab:33:ef:47:1e:32:4e: ba:45:50:1b:04:b2:d1:2e:53:ff:82:0b:20:ea:19: cb:ad:8c:b4:8f:16:17:01:50:73:6f:1b:25:1c:b1: 59:42:fa:3c:2e:4e:2f:c1:51:19:8b:0b:a0:9d:6d: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4F:59:1E:A1:B3:64:1A:7D:C9:4E:91:CF:BD:33:B5:DD:4D:A1:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e7e6d78-d148-3d57-8bc0-abd187ff7da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.33.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:4a:ac:10:a0:9f:d7:b0:4d:8b:b8:9d:78:16:a9:b1:d5:ce: 99:62:5b:57:05:1e:94:c5:99:6d:eb:61:49:29:cc:81:6d:eb: a0:f6:12:d9:69:b0:6e:7f:af:86:33:a2:d8:cd:d1:85:05:59: a4:7f:29:3c:25:63:2b:77:ec:99:68:2c:c9:f7:38:e9:68:50: 4d:88:84:5b:dd:f2:71:d0:67:a1:74:d5:c0:20:19:54:c8:65: 74:54:d9:07:4c:01:75:b0:ec:bc:d1:5a:2c:89:67:5d:0c:b5: 06:2b:31:2f:cc:02:37:b1:14:21:85:40:34:fe:7a:2d:3b:31: 67:ea:eb:f7:e2:65:0b:48:02:6b:10:ac:5a:da:c2:d0:84:b1: 08:fb:9c:12:67:ca:ac:af:7b:c8:52:bc:d2:a4:2d:37:01:a5: 4d:d4:81:50:7e:67:d5:1f:4b:a5:59:28:c1:2c:19:3f:87:a7: 84:ff:b9:b1:95:f5:64:b3:81:ae:b5:57:97:66:30:c6:60:1b: 9f:04:fb:f8:87:bd:8c:1b:60:54:25:91:12:f9:51:62:a0:f2: eb:c1:14:ad:e6:1a:a1:6b:a2:a3:8c:27:47:5f:1a:04:5d:61: 65:55:39:4e:83:28:c3:1a:ac:b3:ca:05:79:25:72:2f:86:75: f8:bd:46:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnp667h4Q09hPpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzA1ZDY0MmEtZTM0MS00YmY5LTg1ZjUtMmU4MjNmYTk5ZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHYxK1zPJb4zeLWo9Omd8pVuUfeCbtZyynbL P1LhOLfzUX0TY3iKcZG0MfU4WwnUDJrbFSredkaugBhvzkRA/UKt4iizcU3K5XR7 FcBCG97nvYNHBiK2wBq7rWLdPGs3IAo29MHbYwDUcHxcsub6WE2cv4k/A+8pgItJ Rzw9xJMw1NfcqpbmDcOdEP3g/AL9Sz8iUi6LsxrD29HkHOyCneEnl+hC7mr0J6/s 83bSRnYpcFPZHypkODm0AG8SATw/gWK0FrmsF4pV/qsz70ceMk66RVAbBLLRLlP/ ggsg6hnLrYy0jxYXAVBzbxslHLFZQvo8Lk4vwVEZiwugnW3rTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZPWR6hs2QafclOkc+9M7XdTaHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWU3ZTZkNzgtZDE0OC0z ZDU3LThiYzAtYWJkMTg3ZmY3ZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSSEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNKrBCgn9ewTYu4nXgWqbHVzpliW1cFHpTFmW3rYUkpzIFt66D2Etlp sG5/r4YzotjN0YUFWaR/KTwlYyt37JloLMn3OOloUE2IhFvd8nHQZ6F01cAgGVTI ZXRU2QdMAXWw7LzRWiyJZ10MtQYrMS/MAjexFCGFQDT+ei07MWfq6/fiZQtIAmsQ rFrawtCEsQj7nBJnyqyve8hSvNKkLTcBpU3UgVB+Z9UfS6VZKMEsGT+Hp4T/ubGV 9WSzga61V5dmMMZgG58E+/iHvYwbYFQlkRL5UWKg8uvBFK3mGqFroqOMJ0dfGgRd YWVVOU6DKMMarLPKBXklci+Gdfi9Rj0= -----END CERTIFICATE-----Generated at Tue Sep 22 10:29:35 2026 by rpki-client