$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0021ef3-5388-38aa-8f71-3a125a746d13.roa File: a0021ef3-5388-38aa-8f71-3a125a746d13.roa (raw, json) Hash identifier: FcT4wVv+Bz8y4PN19iCl6QmoJsOxRd4Lcnb3tdZtggc= Subject key identifier: 67:FE:BC:75:A5:3D:4F:D0:E5:E5:CC:E4:24:2D:57:C6:54:27:5A:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78DF08957D98AB9CD44C360 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0021ef3-5388-38aa-8f71-3a125a746d13.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13367 IP address blocks: 73.164.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8d:f0:89:57:d9:8a:b9:cd:44:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=43aa7cff-69d8-4922-91b2-c8c9707a40dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8e:fc:3c:cc:bc:b7:28:5f:37:6f:0f:92:e9: ba:da:a5:e9:67:c7:17:ad:e6:e0:fe:93:25:54:8a: 16:37:a0:c5:37:49:2e:32:a4:4a:77:7d:35:1d:e6: 81:46:2d:85:37:f3:81:d2:36:11:5b:25:d6:3e:87: 15:1f:40:0b:cf:8f:77:6b:22:01:5f:1b:fb:59:18: 22:44:d8:7a:b6:b3:d3:db:4f:aa:49:86:64:da:5c: 0a:71:e7:61:02:e5:bc:41:e5:98:dc:a7:87:e9:0e: ed:78:de:d4:26:b8:6e:95:80:dc:15:83:8a:86:b2: a6:3c:f9:d9:e9:b6:ca:48:37:42:f0:ff:aa:01:54: c5:9b:41:e2:c1:c6:9d:63:6a:36:07:e4:b2:c5:f7: f5:84:b0:f6:6e:dd:b7:0a:77:2f:f2:03:9c:2b:fc: 86:e7:58:3d:9d:20:f5:12:5b:52:91:5b:1d:46:86: 98:e9:1c:72:93:8d:1a:43:df:ff:e7:05:3e:e8:b3: 20:93:f7:7d:aa:c7:ff:f6:55:f3:1c:74:7a:a3:c2: a7:28:e0:e2:ab:19:97:b5:f9:3a:1f:9e:49:36:4b: 9b:ae:7c:d4:61:26:01:c3:5b:89:aa:ce:da:b0:06: 31:c4:18:2d:45:df:12:53:9a:9e:ff:7d:46:67:80: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FE:BC:75:A5:3D:4F:D0:E5:E5:CC:E4:24:2D:57:C6:54:27:5A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0021ef3-5388-38aa-8f71-3a125a746d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.164.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:75:a9:22:e0:22:18:94:a9:f3:30:85:b0:e0:f5:42:09:46: 9a:4a:94:cf:eb:d7:ab:b1:ab:a1:69:d8:b9:bb:f9:e7:56:80: a4:bf:f7:f1:73:de:bf:83:0d:ee:5b:bf:a0:f0:36:89:5d:ea: e7:39:9e:c8:02:c2:c5:8f:28:f1:2b:41:95:84:12:96:f2:7f: 14:a9:f7:f1:d4:30:e8:be:47:96:33:2a:e3:79:31:ee:9b:1a: e6:80:3f:e6:fb:6e:71:99:da:3e:00:9c:2b:8f:d0:04:0d:57: a0:1c:25:77:73:08:08:ed:e2:0f:1e:77:92:14:1f:14:3f:c2: 7c:83:0f:7f:5c:65:94:da:e3:d4:2f:dd:7f:6d:9d:09:b8:d8: c8:15:5a:a5:c2:9d:48:9c:86:51:d5:14:4b:09:30:9d:86:24: 09:64:ae:de:11:b1:ff:5d:22:7f:6a:72:bd:11:a4:46:ab:f8: 30:02:83:17:32:0e:cb:39:66:ef:29:55:c9:d1:07:fb:44:a5: 61:0d:76:da:64:46:19:6f:ea:56:e3:b2:35:61:6c:58:79:37: f8:b0:65:08:c4:12:5e:e5:eb:8a:70:3c:89:7f:69:38:f4:1d: 98:6d:5e:a8:ec:7a:f4:5d:9c:42:d6:2a:24:07:b5:da:0a:9e: 07:e8:db:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njfCJV9mKuc1Ew2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDNhYTdjZmYtNjlkOC00OTIyLTkxYjItYzhjOTcwN2E0MGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY78PMy8tyhfN28Pkum62qXpZ8cXrebg/pMl VIoWN6DFN0kuMqRKd301HeaBRi2FN/OB0jYRWyXWPocVH0ALz493ayIBXxv7WRgi RNh6trPT20+qSYZk2lwKcedhAuW8QeWY3KeH6Q7teN7UJrhulYDcFYOKhrKmPPnZ 6bbKSDdC8P+qAVTFm0HiwcadY2o2B+Syxff1hLD2bt23Cncv8gOcK/yG51g9nSD1 EltSkVsdRoaY6Rxyk40aQ9//5wU+6LMgk/d9qsf/9lXzHHR6o8KnKODiqxmXtfk6 H55JNkubrnzUYSYBw1uJqs7asAYxxBgtRd8SU5qe/31GZ4CGUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGf+vHWlPU/Q5eXM5CQtV8ZUJ1rVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTAwMjFlZjMtNTM4OC0z OGFhLThmNzEtM2ExMjVhNzQ2ZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaRiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN1qSLgIhiUqfMwhbDg9UIJRppKlM/r16uxq6Fp2Lm7+edWgKS/9/Fz 3r+DDe5bv6DwNold6uc5nsgCwsWPKPErQZWEEpbyfxSp9/HUMOi+R5YzKuN5Me6b GuaAP+b7bnGZ2j4AnCuP0AQNV6AcJXdzCAjt4g8ed5IUHxQ/wnyDD39cZZTa49Qv 3X9tnQm42MgVWqXCnUichlHVFEsJMJ2GJAlkrt4Rsf9dIn9qcr0RpEar+DACgxcy Dss5Zu8pVcnRB/tEpWENdtpkRhlv6lbjsjVhbFh5N/iwZQjEEl7l64pwPIl/aTj0 HZhtXqjsevRdnELWKiQHtdoKngfo22k= -----END CERTIFICATE-----Generated at Wed Jul 29 07:14:45 2026 by rpki-client