$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba123c40-379f-32f0-be7b-3ba27fa7a777.roa File: ba123c40-379f-32f0-be7b-3ba27fa7a777.roa (raw, json) Hash identifier: nKotqiIqDuYnyFf78hk858YpUpPlvgO175gVO/O/+jQ= Subject key identifier: F8:75:45:00:AA:A7:24:49:36:A9:63:29:3D:DA:64:AB:15:66:70:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4981E4D1D66E1DA4D33251C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba123c40-379f-32f0-be7b-3ba27fa7a777.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13367 IP address blocks: 73.228.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:e4:d1:d6:6e:1d:a4:d3:32:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=71d19a48-43e4-41e0-8e18-b79224204023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:da:e8:86:28:be:77:96:47:4a:25:11:50: d9:48:73:07:5b:81:6f:7a:6e:90:70:da:60:a7:e8: 6e:73:21:04:a8:5c:5b:3a:77:79:b9:e0:81:fc:36: 36:ca:eb:96:d9:4d:38:4d:76:15:7e:c7:40:27:b7: 5e:15:f7:65:1e:3b:39:d6:c3:12:d9:7c:29:54:25: d9:e0:5d:44:2d:23:c6:de:9e:68:bf:ce:b9:be:9a: d2:22:a1:34:b6:77:8f:69:3b:7f:32:a1:3a:d3:2f: ce:4a:de:9a:a8:96:49:f5:65:37:f3:7a:87:f0:96: 9a:cf:87:40:67:23:c3:84:30:97:5b:94:19:4f:cc: 93:10:0f:13:65:64:fe:e3:65:0f:d4:6c:7e:58:15: 45:82:7d:b8:f7:cc:80:dc:a0:11:0e:3c:57:e3:2a: 20:56:ec:4a:a3:67:42:6f:2a:c4:1f:c7:4c:31:64: ea:f3:33:7e:a7:22:10:fc:0a:e1:ba:99:20:1b:32: b9:78:a8:7c:5c:d4:1c:d0:38:c2:cd:b2:df:47:19: 33:88:b8:28:c6:84:fb:fb:51:e0:4e:1e:93:20:3a: e4:52:4a:45:9f:ae:6c:21:80:6a:fc:60:ae:65:7d: 22:3e:f0:3f:10:01:99:02:45:63:1b:d8:20:9e:bc: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:75:45:00:AA:A7:24:49:36:A9:63:29:3D:DA:64:AB:15:66:70:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba123c40-379f-32f0-be7b-3ba27fa7a777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.228.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:80:9e:37:c4:ec:3e:ab:5a:53:ee:25:14:ab:6a:29:35:f4: 1d:1f:72:13:0c:a7:20:b5:a7:9e:95:11:9f:a4:26:0c:ec:f3: 3b:2b:1c:f5:ac:b7:2a:0d:be:6c:84:da:52:48:53:91:b5:bd: 72:20:fa:7b:50:32:e8:48:70:7f:82:a8:a6:51:5a:10:0b:6e: 4b:a0:c2:4b:70:1b:41:a6:ca:5b:58:44:be:f1:2c:17:cb:19: 5d:4a:e7:53:d7:5e:b8:42:d0:07:ab:9f:3d:22:76:1f:7f:11: 3d:e8:8b:18:f6:39:9f:5e:98:11:3c:59:cb:1d:30:b1:b2:48: ef:7c:02:d1:17:1e:75:60:a7:e8:1d:b8:bc:1e:68:dc:25:20: 52:7b:9f:dc:dc:87:cd:a4:39:0f:68:92:f0:2a:31:ac:67:65: b6:ea:3a:1b:69:dd:9a:c3:06:97:ac:b6:44:c9:b0:20:26:9f: 2e:03:75:42:b9:38:c3:20:8e:cd:57:63:48:bc:54:fd:c6:09: 32:5b:c8:29:51:b9:76:05:41:62:da:77:d6:d2:dd:59:e6:61: af:24:05:15:29:4a:59:7b:5a:fc:5c:6b:55:95:70:a3:95:02: 90:b3:7e:f0:20:29:aa:ac:a3:5f:20:42:5d:2e:53:94:c8:7c: 38:31:b0:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgeTR1m4dpNMyUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzFkMTlhNDgtNDNlNC00MWUwLThlMTgtYjc5MjI0MjA0MDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllva6IYovneWR0olEVDZSHMHW4Fvem6QcNpg p+hucyEEqFxbOnd5ueCB/DY2yuuW2U04TXYVfsdAJ7deFfdlHjs51sMS2XwpVCXZ 4F1ELSPG3p5ov865vprSIqE0tnePaTt/MqE60y/OSt6aqJZJ9WU383qH8Jaaz4dA ZyPDhDCXW5QZT8yTEA8TZWT+42UP1Gx+WBVFgn2498yA3KARDjxX4yogVuxKo2dC byrEH8dMMWTq8zN+pyIQ/ArhupkgGzK5eKh8XNQc0DjCzbLfRxkziLgoxoT7+1Hg Th6TIDrkUkpFn65sIYBq/GCuZX0iPvA/EAGZAkVjG9ggnryPawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPh1RQCqpyRJNqljKT3aZKsVZnBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmExMjNjNDAtMzc5Zi0z MmYwLWJlN2ItM2JhMjdmYTdhNzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASeSRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWAnjfE7D6rWlPuJRSraik19B0fchMMpyC1p56VEZ+kJgzs8zsrHPWs tyoNvmyE2lJIU5G1vXIg+ntQMuhIcH+CqKZRWhALbkugwktwG0GmyltYRL7xLBfL GV1K51PXXrhC0Aernz0idh9/ET3oixj2OZ9emBE8WcsdMLGySO98AtEXHnVgp+gd uLweaNwlIFJ7n9zch82kOQ9okvAqMaxnZbbqOhtp3ZrDBpestkTJsCAmny4DdUK5 OMMgjs1XY0i8VP3GCTJbyClRuXYFQWLad9bS3VnmYa8kBRUpSll7Wvxca1WVcKOV ApCzfvAgKaqso18gQl0uU5TIfDgxsPo= -----END CERTIFICATE-----Generated at Sun Sep 27 03:31:59 2026 by rpki-client