$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a66c40f1-f32c-3fc7-b059-0cfc684ffd1a.roa File: a66c40f1-f32c-3fc7-b059-0cfc684ffd1a.roa (raw, json) Hash identifier: zzYNjdnCxgHU6Tu2ZN4Kb7R46YfZyD5mQBFrjrCzs7U= Subject key identifier: 3B:86:2E:EA:98:A0:4D:B7:A6:8B:9C:35:D1:14:02:11:6D:E9:AB:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A0A9CE09079FCB7378FA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a66c40f1-f32c-3fc7-b059-0cfc684ffd1a.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 73.252.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a0:a9:ce:09:07:9f:cb:73:78:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=1c4d0f47-b6ab-47d3-954c-4dc72fde209c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8b:25:1b:53:49:c0:c8:62:a2:bb:3b:95:40: 7d:0d:c3:9f:e3:53:52:37:5c:a0:29:90:c7:a4:13: f8:c5:be:56:f8:e8:08:20:1b:64:18:32:18:14:ff: 5d:83:34:5f:f5:71:c9:d8:24:b0:25:96:e3:21:b8: 08:2a:ca:81:5a:a3:40:8b:34:b5:40:06:93:5a:37: b0:43:14:b1:c8:c6:ff:41:5a:ed:b4:10:1d:65:1b: 02:e1:fd:2b:3b:b3:7d:ce:f6:a4:00:83:51:30:e1: 2d:13:b1:aa:27:93:e9:a8:40:5b:d0:9e:55:38:5a: c7:79:35:05:ee:54:1d:e8:28:59:ca:4e:27:8f:cf: 11:1e:46:05:2b:85:27:25:63:c6:26:2f:82:87:2b: 98:d6:82:ed:0e:40:d3:a3:fc:53:77:18:f0:91:e2: dd:68:a7:d1:69:f2:07:5b:cc:fb:e1:08:bf:f6:6b: c8:ef:2a:82:52:ac:c2:ad:89:cb:cb:64:31:26:42: b7:5e:a1:c0:d6:73:a1:b8:28:d4:a2:e4:5b:82:6e: 64:6e:19:11:45:cd:33:82:13:77:3a:0e:ad:0e:4c: 6f:28:ba:9d:58:4a:40:8c:00:45:c8:99:96:3c:a8: 8c:e3:21:d4:77:11:b6:50:2b:c0:90:08:40:4e:ac: 88:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:86:2E:EA:98:A0:4D:B7:A6:8B:9C:35:D1:14:02:11:6D:E9:AB:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a66c40f1-f32c-3fc7-b059-0cfc684ffd1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.252.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:7d:02:74:29:b5:3a:ee:ba:08:10:d1:c7:a4:ae:3a:e4:7c: a0:2a:7d:1e:75:43:e0:9d:6d:35:eb:dd:6b:29:94:ed:c0:27: 30:2e:fa:fa:61:af:14:79:ab:08:a0:e8:27:66:82:45:c1:f6: 4d:72:a3:7d:6f:5d:f2:fc:bf:d5:50:5a:ee:7f:51:a7:c9:80: bc:9e:2b:80:f1:0e:dd:6e:77:05:0c:73:58:8c:e8:cd:4c:71: 57:94:9f:71:a9:e7:9c:40:0d:80:32:78:81:c4:87:bd:ed:fd: c7:ea:24:f5:82:68:c7:c7:ba:b9:d3:29:fb:83:98:09:61:ab: 1d:54:11:2b:ed:63:d2:42:4a:5e:66:f1:10:b8:53:0c:cb:93: 4b:36:d2:fa:8e:e6:58:ca:c2:65:b5:ce:9c:28:6e:83:bb:43: e0:3f:88:08:e2:c1:a5:5a:b8:bc:33:43:bc:40:83:bc:98:a5: 64:38:96:c5:d1:5c:1f:9c:d4:51:ae:c8:b5:92:66:77:be:6f: 17:0a:12:77:04:f0:cd:bb:5d:51:00:f9:7c:4d:f9:d6:e9:23: 36:b2:51:94:fb:6c:1d:02:60:2a:eb:0d:ec:48:67:b4:17:f5: 92:6e:af:7e:75:c9:b1:1c:31:ec:e8:64:36:d7:00:32:5c:2b: 08:e7:1b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoKnOCQefy3N4+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MWM0ZDBmNDctYjZhYi00N2QzLTk1NGMtNGRjNzJmZGUyMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYslG1NJwMhiors7lUB9DcOf41NSN1ygKZDH pBP4xb5W+OgIIBtkGDIYFP9dgzRf9XHJ2CSwJZbjIbgIKsqBWqNAizS1QAaTWjew QxSxyMb/QVrttBAdZRsC4f0rO7N9zvakAINRMOEtE7GqJ5PpqEBb0J5VOFrHeTUF 7lQd6ChZyk4nj88RHkYFK4UnJWPGJi+ChyuY1oLtDkDTo/xTdxjwkeLdaKfRafIH W8z74Qi/9mvI7yqCUqzCrYnLy2QxJkK3XqHA1nOhuCjUouRbgm5kbhkRRc0zghN3 Og6tDkxvKLqdWEpAjABFyJmWPKiM4yHUdxG2UCvAkAhATqyIGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuGLuqYoE23poucNdEUAhFt6auWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTY2YzQwZjEtZjMyYy0z ZmM3LWIwNTktMGNmYzY4NGZmZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE19AnQptTruuggQ0cekrjrkfKAqfR51Q+CdbTXr3WsplO3AJzAu+vph rxR5qwig6CdmgkXB9k1yo31vXfL8v9VQWu5/UafJgLyeK4DxDt1udwUMc1iM6M1M cVeUn3Gp55xADYAyeIHEh73t/cfqJPWCaMfHurnTKfuDmAlhqx1UESvtY9JCSl5m 8RC4UwzLk0s20vqO5ljKwmW1zpwoboO7Q+A/iAjiwaVauLwzQ7xAg7yYpWQ4lsXR XB+c1FGuyLWSZne+bxcKEncE8M27XVEA+XxN+dbpIzayUZT7bB0CYCrrDexIZ7QX 9ZJur351ybEcMezoZDbXADJcKwjnG50= -----END CERTIFICATE-----Generated at Mon Sep 21 11:53:21 2026 by rpki-client