$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4de4c9e-7b3e-31da-be3e-3871f8f6dc7c.roa File: b4de4c9e-7b3e-31da-be3e-3871f8f6dc7c.roa (raw, json) Hash identifier: xwUVEJ/pi/onr6JkeRUbXJlmJMdQa7ayd5roUp+NE+M= Subject key identifier: 23:0B:EB:58:EE:DE:B7:E1:57:98:64:24:19:0B:0E:DB:02:A7:DE:5C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A09561F5BEF765D4872B6C Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4de4c9e-7b3e-31da-be3e-3871f8f6dc7c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 73.223.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a0:95:61:f5:be:f7:65:d4:87:2b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=6b4bcfa3-62cb-4b0a-a6f5-a94dee40d6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:da:ec:90:6a:30:bd:65:72:a6:5b:66:7d: b8:c4:ba:65:28:42:05:f1:c7:4b:01:97:59:ed:90: c4:7e:8a:d7:29:17:2c:29:34:cf:32:83:58:fc:8c: 98:d4:93:92:43:66:1d:14:a2:4a:20:be:66:ba:4e: 94:40:87:8d:69:ae:b3:0e:b8:49:9c:06:ee:23:51: 9e:30:dc:2e:e4:8d:df:89:86:a0:1c:61:1c:69:5a: b8:6b:81:59:3f:d7:e2:97:5c:0a:93:0a:5e:d4:bd: 3c:63:32:94:bb:d1:84:6b:26:99:a5:20:d4:1a:b7: 82:29:f1:c9:a3:02:34:ef:11:5d:17:9b:ca:6a:3d: 43:10:f5:52:d0:4d:e5:e1:d1:fd:57:82:a6:9f:95: 25:05:59:6b:38:ad:a7:bf:7e:f8:7c:42:c5:ef:b4: ce:38:c4:a9:de:08:85:19:34:1c:41:6e:be:5e:7b: fa:db:a3:73:3b:eb:fd:66:1f:d5:10:59:50:65:32: 87:23:0a:73:bd:3e:42:69:08:03:d4:1b:dc:2d:1c: 37:55:a5:25:74:e5:df:c3:a4:c7:56:68:10:f0:93: 13:28:43:ca:5c:27:6f:6b:48:28:bd:b1:b2:4a:62: fa:9d:44:7a:89:a6:11:dd:ac:2d:2b:9f:ba:d7:42: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0B:EB:58:EE:DE:B7:E1:57:98:64:24:19:0B:0E:DB:02:A7:DE:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4de4c9e-7b3e-31da-be3e-3871f8f6dc7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:fc:03:b9:35:f1:63:25:af:0a:f9:5a:f2:d5:c6:1d:df:2c: 92:70:8d:ba:65:df:41:34:fb:04:23:86:a0:cc:8d:1c:7f:b5: 8c:ed:81:48:db:6d:4e:cf:c3:98:2d:3b:6f:3a:a7:49:5c:47: ab:ea:30:11:04:44:00:c8:42:ed:4c:16:fa:9f:72:fc:2a:5e: 12:e1:dd:27:11:c5:88:5f:ba:96:6e:d9:52:25:4a:12:03:9b: 57:d9:d7:36:a1:b8:6d:3e:34:dc:29:5c:f3:a6:14:35:81:7d: 78:d3:f2:95:31:60:28:02:fd:49:7c:a9:72:07:42:19:9f:6e: 9e:9b:b4:3e:36:3d:f8:52:42:dd:6a:4f:82:68:67:33:db:86: 8d:db:ff:62:17:65:03:5c:86:7a:f7:25:ad:78:25:53:40:d2: df:a3:87:aa:a3:95:f8:83:4f:99:4f:b2:f1:37:54:67:ac:2c: 80:81:70:62:98:d4:4e:d5:c1:27:b1:c9:66:29:5b:79:99:77: de:c5:60:90:c6:83:d6:1d:8f:75:56:57:81:97:1f:d0:46:81: 5e:92:e2:0d:95:1e:c5:a8:0f:f5:46:d2:2d:92:62:f8:1f:1a: 3f:d4:7e:c6:73:30:c0:02:f7:54:bc:4d:df:29:aa:dc:65:46: 69:2d:0b:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoJVh9b73ZdSHK2wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NmI0YmNmYTMtNjJjYi00YjBhLWE2ZjUtYTk0ZGVlNDBkNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvba7JBqML1lcqZbZn24xLplKEIF8cdLAZdZ 7ZDEforXKRcsKTTPMoNY/IyY1JOSQ2YdFKJKIL5muk6UQIeNaa6zDrhJnAbuI1Ge MNwu5I3fiYagHGEcaVq4a4FZP9fil1wKkwpe1L08YzKUu9GEayaZpSDUGreCKfHJ owI07xFdF5vKaj1DEPVS0E3l4dH9V4Kmn5UlBVlrOK2nv374fELF77TOOMSp3giF GTQcQW6+Xnv626NzO+v9Zh/VEFlQZTKHIwpzvT5CaQgD1BvcLRw3VaUldOXfw6TH VmgQ8JMTKEPKXCdva0govbGySmL6nUR6iaYR3awtK5+610KuCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCML61ju3rfhV5hkJBkLDtsCp95cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjRkZTRjOWUtN2IzZS0z MWRhLWJlM2UtMzg3MWY4ZjZkYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd9GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD8A7k18WMlrwr5WvLVxh3fLJJwjbpl30E0+wQjhqDMjRx/tYztgUjb bU7Pw5gtO286p0lcR6vqMBEERADIQu1MFvqfcvwqXhLh3ScRxYhfupZu2VIlShID m1fZ1zahuG0+NNwpXPOmFDWBfXjT8pUxYCgC/Ul8qXIHQhmfbp6btD42PfhSQt1q T4JoZzPbho3b/2IXZQNchnr3Ja14JVNA0t+jh6qjlfiDT5lPsvE3VGesLICBcGKY 1E7VwSexyWYpW3mZd97FYJDGg9Ydj3VWV4GXH9BGgV6S4g2VHsWoD/VG0i2SYvgf Gj/UfsZzMMAC91S8Td8pqtxlRmktC8A= -----END CERTIFICATE-----Generated at Mon Sep 21 19:56:22 2026 by rpki-client