$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e34c2d-315a-31f6-8269-2fc191947fb4.roa File: a5e34c2d-315a-31f6-8269-2fc191947fb4.roa (raw, json) Hash identifier: xsIib+UyVlI6FNe78ZZcUq8Al6pXx4MvvqlE0DtxOnU= Subject key identifier: F4:5A:C6:8E:FA:42:DE:0F:57:70:A6:CB:E9:01:81:DD:05:C1:BF:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A06A550BDE48C37A8259A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e34c2d-315a-31f6-8269-2fc191947fb4.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 73.170.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a0:6a:55:0b:de:48:c3:7a:82:59:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2ef51d86-cccc-4233-ad52-dc4d2bc44e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:19:56:24:92:49:39:28:d6:43:32:89:d7: 8c:1f:9b:d1:14:60:11:b4:dd:8b:e9:91:73:f4:dc: d2:36:e1:ef:a7:93:93:df:d9:31:be:74:97:fd:fa: 9b:21:11:aa:a9:cb:93:cf:0c:c4:62:75:82:b7:31: dd:49:7b:bc:86:f5:0d:95:7d:fd:e1:97:74:a7:11: 2c:a0:5a:5f:f3:84:44:3e:53:02:35:68:03:22:e5: 22:75:5b:73:a6:d3:99:25:97:52:75:5a:e2:96:e4: 58:e3:e8:35:73:37:79:21:4f:3e:19:0e:ae:28:7a: 23:0f:70:ad:dc:e7:a2:10:ab:25:33:65:f6:a7:b3: 5d:32:a7:a9:20:c7:69:2d:7d:71:5a:58:d0:51:9a: 78:cf:a8:ca:e4:a1:eb:e5:83:ab:3f:8f:85:e8:f4: e3:aa:db:35:1f:d4:76:14:39:12:57:1c:a5:77:79: 8d:61:5f:fd:d1:6e:74:8c:93:ce:d2:e0:21:e5:73: f5:da:b2:e3:fa:32:64:05:c2:60:cf:d1:b4:cf:0b: 52:96:c5:3f:95:b0:64:f3:dd:a8:97:b9:3e:bf:86: 7b:78:44:17:d0:ce:9e:20:78:7b:25:51:01:67:e9: 70:9f:4e:5b:dc:ff:ca:40:a6:09:3a:8b:70:c9:71: c1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5A:C6:8E:FA:42:DE:0F:57:70:A6:CB:E9:01:81:DD:05:C1:BF:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e34c2d-315a-31f6-8269-2fc191947fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.170.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:93:37:37:2b:f0:70:00:7a:50:a8:4a:98:ca:cf:b8:c3:ac: 37:5f:0b:e2:20:96:b3:cc:85:3b:bc:fe:62:c2:87:39:3b:4e: b4:2a:93:7b:5a:2a:20:08:26:f9:23:c0:75:b4:55:24:43:7a: be:87:db:48:f0:ad:07:6c:89:ee:35:f1:ec:e8:32:86:bb:c3: ab:ba:08:c3:ca:62:9e:84:35:54:00:9f:7a:e8:f6:e6:d7:26: c5:3e:06:da:20:e2:17:6b:9e:13:50:dd:be:22:b7:3f:04:44: 8a:ba:1a:c5:f2:96:5e:9f:60:99:0a:d2:03:ac:11:bf:59:fd: 9d:ac:fa:50:16:33:0c:31:56:bc:fd:b9:1b:9d:d5:a7:5c:a8: 9f:d5:0b:1f:e2:e7:0d:58:43:2d:64:58:a0:15:66:7f:ac:12: 65:ca:01:02:2d:ad:f4:7c:e8:58:ea:4d:65:5d:03:a1:bb:77: 0f:22:30:d5:d9:f4:b0:7b:89:cf:aa:d8:d9:e0:0d:7f:4c:dd: 2c:8f:e4:12:cb:ad:74:0d:09:50:d2:18:4e:96:d9:36:e2:4a: 60:61:9f:bf:04:12:8c:5b:0d:b7:ec:f1:21:65:9f:e6:01:cc: 9d:9a:a4:5a:09:f3:3c:bf:67:f8:52:41:50:ed:9a:32:89:fc: 31:1d:c4:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoGpVC95Iw3qCWaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmVmNTFkODYtY2NjYy00MjMzLWFkNTItZGM0ZDJiYzQ0ZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOUZViSSSTko1kMyideMH5vRFGARtN2L6ZFz 9NzSNuHvp5OT39kxvnSX/fqbIRGqqcuTzwzEYnWCtzHdSXu8hvUNlX394Zd0pxEs oFpf84REPlMCNWgDIuUidVtzptOZJZdSdVriluRY4+g1czd5IU8+GQ6uKHojD3Ct 3OeiEKslM2X2p7NdMqepIMdpLX1xWljQUZp4z6jK5KHr5YOrP4+F6PTjqts1H9R2 FDkSVxyld3mNYV/90W50jJPO0uAh5XP12rLj+jJkBcJgz9G0zwtSlsU/lbBk892o l7k+v4Z7eEQX0M6eIHh7JVEBZ+lwn05b3P/KQKYJOotwyXHBiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRaxo76Qt4PV3Cmy+kBgd0Fwb8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTVlMzRjMmQtMzE1YS0z MWY2LTgyNjktMmZjMTkxOTQ3ZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSarGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+TNzcr8HAAelCoSpjKz7jDrDdfC+IglrPMhTu8/mLChzk7TrQqk3ta KiAIJvkjwHW0VSRDer6H20jwrQdsie418ezoMoa7w6u6CMPKYp6ENVQAn3ro9ubX JsU+Btog4hdrnhNQ3b4itz8ERIq6GsXyll6fYJkK0gOsEb9Z/Z2s+lAWMwwxVrz9 uRud1adcqJ/VCx/i5w1YQy1kWKAVZn+sEmXKAQItrfR86FjqTWVdA6G7dw8iMNXZ 9LB7ic+q2NngDX9M3SyP5BLLrXQNCVDSGE6W2TbiSmBhn78EEoxbDbfs8SFln+YB zJ2apFoJ8zy/Z/hSQVDtmjKJ/DEdxE0= -----END CERTIFICATE-----Generated at Tue Sep 22 21:11:35 2026 by rpki-client