$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c967b398-7aa5-3dd8-b908-d77107432703.roa File: c967b398-7aa5-3dd8-b908-d77107432703.roa (raw, json) Hash identifier: mDHQyr+zFNSMY3b+Hkuw+auThJ862NN9FSY1GPHUGO8= Subject key identifier: BD:2C:D8:5A:56:B3:CE:9F:97:A5:94:27:A1:82:C2:62:70:A0:8B:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4EACDD1A6FB826E9A2F2E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c967b398-7aa5-3dd8-b908-d77107432703.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 73.255.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:ac:dd:1a:6f:b8:26:e9:a2:f2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=23bc11a3-23bc-4e89-84df-1a31f812c0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0e:eb:0f:97:b8:2a:f1:48:54:78:08:24:2d: 08:8d:e4:62:1c:a9:87:61:f0:1f:f7:29:35:f3:b6: 17:96:f7:bf:3c:3d:3a:62:4c:ae:1e:bd:b8:2f:c9: 53:83:36:90:12:fb:e4:28:8b:b2:f6:0f:87:7e:99: 1f:22:74:d6:14:cf:ad:c5:d5:bd:10:e3:cd:28:d7: e2:f1:2e:b0:83:82:50:9e:d8:c6:ef:db:34:c6:81: 24:6a:48:8c:d3:13:1a:ef:82:63:e7:fd:f8:9e:c4: 9f:74:dd:fd:0b:b9:06:0f:d1:33:df:2d:ef:38:d1: f7:ec:fb:30:7c:c4:98:3c:59:31:74:b0:33:fd:cb: 60:08:ac:9d:6d:31:3c:92:5b:c1:88:6e:36:11:b3: 37:34:ec:7a:cf:54:87:ca:7a:4b:90:69:ea:77:c8: ab:05:69:ed:b8:ba:b8:9c:66:7c:0e:03:19:6e:d8: 60:b6:3a:70:9f:8a:3d:9e:11:2e:d5:90:17:39:6c: 5e:5f:f7:e4:c5:fb:a1:3a:6f:27:13:92:e4:f1:78: 43:16:7e:9e:15:24:84:5e:41:65:41:e3:b9:18:c1: 78:f3:1b:38:7c:61:bb:b5:84:81:2b:a4:71:ca:27: 35:b4:6f:1a:0d:ae:58:6c:51:9c:b0:68:c3:f8:8d: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2C:D8:5A:56:B3:CE:9F:97:A5:94:27:A1:82:C2:62:70:A0:8B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c967b398-7aa5-3dd8-b908-d77107432703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.255.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:12:b3:4b:52:b5:70:20:74:61:37:79:89:c0:08:6f:a7:38: 3a:9b:08:35:e3:8e:99:fc:e4:5f:ce:c1:70:e5:76:3a:1f:28: 49:93:28:a4:21:21:21:a0:bc:ee:1a:e3:cc:e1:d2:43:b2:ca: 17:fe:71:f6:c6:06:e6:4d:67:4c:92:b8:b0:51:5d:f9:8a:ba: be:fc:50:52:9a:b4:66:39:72:e5:d1:8f:e6:46:ee:db:fe:7b: dc:ca:8c:bd:81:ad:e1:fd:24:b2:e2:a1:e6:42:dc:2d:2c:d9: 7f:eb:27:91:d8:00:77:fd:98:fd:72:71:93:58:fd:d2:24:dd: 2b:d7:80:91:51:e0:9b:ec:09:b1:5c:ec:aa:bb:4e:ee:ec:f5: 6b:94:32:09:1b:9f:c0:4b:89:0e:a2:ca:51:0d:b3:48:2f:5b: cb:48:2f:53:99:b4:cd:e0:56:77:0a:e7:87:0c:dc:0e:f4:cb: f2:03:e7:27:71:07:e1:50:83:eb:26:7b:84:bd:d9:04:04:90: d3:17:9c:87:00:40:a2:df:d4:fc:b1:ce:60:f0:e8:df:b6:bf: 99:27:50:70:1d:7c:d0:24:3a:90:e2:78:f4:c3:b2:37:6d:98: 9d:34:ac:62:9c:a1:07:a1:55:81:5d:84:11:46:83:00:f2:6a: 3b:41:b2:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TqzdGm+4Jumi8uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MjNiYzExYTMtMjNiYy00ZTg5LTg0ZGYtMWEzMWY4MTJjMGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA7rD5e4KvFIVHgIJC0IjeRiHKmHYfAf9yk1 87YXlve/PD06YkyuHr24L8lTgzaQEvvkKIuy9g+HfpkfInTWFM+txdW9EOPNKNfi 8S6wg4JQntjG79s0xoEkakiM0xMa74Jj5/34nsSfdN39C7kGD9Ez3y3vONH37Psw fMSYPFkxdLAz/ctgCKydbTE8klvBiG42EbM3NOx6z1SHynpLkGnqd8irBWntuLq4 nGZ8DgMZbthgtjpwn4o9nhEu1ZAXOWxeX/fkxfuhOm8nE5Lk8XhDFn6eFSSEXkFl QeO5GMF48xs4fGG7tYSBK6Rxyic1tG8aDa5YbFGcsGjD+I0V0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0s2FpWs86fl6WUJ6GCwmJwoIu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzk2N2IzOTgtN2FhNS0z ZGQ4LWI5MDgtZDc3MTA3NDMyNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSf9yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8Ss0tStXAgdGE3eYnACG+nODqbCDXjjpn85F/OwXDldjofKEmTKKQh ISGgvO4a48zh0kOyyhf+cfbGBuZNZ0ySuLBRXfmKur78UFKatGY5cuXRj+ZG7tv+ e9zKjL2BreH9JLLioeZC3C0s2X/rJ5HYAHf9mP1ycZNY/dIk3SvXgJFR4JvsCbFc 7Kq7Tu7s9WuUMgkbn8BLiQ6iylENs0gvW8tIL1OZtM3gVncK54cM3A70y/ID5ydx B+FQg+sme4S92QQEkNMXnIcAQKLf1PyxzmDw6N+2v5knUHAdfNAkOpDiePTDsjdt mJ00rGKcoQehVYFdhBFGgwDyajtBsgs= -----END CERTIFICATE-----Generated at Tue Oct 13 10:32:53 2026 by rpki-client