$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7ce1704-d58f-395c-aa92-7a6f4263dfad.roa File: f7ce1704-d58f-395c-aa92-7a6f4263dfad.roa (raw, json) Hash identifier: yza9p7cqDmjPPzpCsh3I6Kerr1jLBJtdq/CXffTxjwM= Subject key identifier: 45:A2:C0:1A:33:F1:3F:E0:F8:C4:82:26:B6:A5:40:EC:DB:98:E0:AD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EAFDBF5BA2C6646BF61C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7ce1704-d58f-395c-aa92-7a6f4263dfad.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 73.198.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:af:db:f5:ba:2c:66:46:bf:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=48f80d7e-569c-4132-b5fd-2c5afdf1d699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e9:43:04:03:af:4f:56:cc:f1:da:55:0d:b5: f7:06:27:41:1e:e7:97:8b:79:bd:97:d3:64:52:9e: 69:66:36:82:f2:b6:d6:b0:a8:33:46:38:a4:2e:4f: 8d:41:9c:33:62:b1:89:d3:4e:07:64:4d:60:47:ae: 46:89:5b:0d:db:d5:aa:71:3a:a1:0f:c9:44:24:0b: 8d:3d:72:ed:0c:c5:fb:3c:19:1c:3d:17:91:ad:19: 04:db:d7:6f:b3:49:b5:d2:78:8b:e7:29:27:cb:f0: b7:09:76:cb:42:37:5d:d4:20:9f:87:ba:ad:0c:ab: 65:2a:58:8d:5b:65:79:d8:3f:52:7d:0f:bb:d0:2b: 3d:2b:63:10:f1:bc:0e:61:a6:ae:e6:56:79:e4:91: ed:b0:45:7d:97:3c:ef:15:c2:96:2c:67:e1:53:3a: cc:e6:3c:e5:37:21:ab:10:ba:4b:70:18:ac:86:71: 2d:e0:6c:f5:70:b0:66:05:32:5e:9b:fe:a2:9f:0f: cd:d7:d6:cb:56:34:f4:bc:53:d3:ec:b9:c0:ec:66: 1f:08:31:55:c3:35:50:9f:a1:bd:0d:54:79:9a:62: b6:68:e9:40:46:b3:3e:f5:fe:e9:20:43:f2:7f:1f: 32:39:2b:a3:e7:fc:56:fb:89:bf:bb:ac:30:1d:ec: 8d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A2:C0:1A:33:F1:3F:E0:F8:C4:82:26:B6:A5:40:EC:DB:98:E0:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7ce1704-d58f-395c-aa92-7a6f4263dfad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.198.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f3:d3:15:9b:f8:35:1c:ec:4f:b1:54:b0:68:1e:80:35:10: b7:b8:b9:78:55:c6:57:b2:51:e3:00:c7:2e:08:30:dd:1c:79: 60:be:71:b0:1f:48:3f:56:53:59:f9:08:e3:20:b5:96:41:0d: d5:86:10:48:4f:b6:1e:cd:b1:74:8c:1c:46:24:2e:00:7d:73: e8:6b:4f:0a:5e:eb:89:b4:bd:72:24:c2:51:bc:0f:9f:f7:ea: 85:58:54:1a:86:08:85:6f:c8:83:d1:8a:4a:c5:17:0f:3b:87: 6a:23:b9:4c:8a:91:f4:b0:d9:be:a0:a0:ad:b4:49:de:f2:a2: e2:17:56:e5:d9:89:81:c6:f6:9f:75:0c:27:9b:47:2f:0f:74: 49:46:6e:f2:a0:49:49:9b:28:bf:20:b5:d1:d0:fe:ec:91:54: 31:17:c1:25:66:66:e4:b1:b8:fc:f9:da:01:e1:37:49:5d:5a: f3:03:38:fa:d1:d8:f0:52:4d:c0:9c:30:e4:19:a1:23:c0:79: 4c:c5:60:1d:1d:0e:85:f5:a3:de:20:9a:d1:cf:83:f8:c0:03: 84:97:2a:e6:19:54:69:89:71:e5:c5:a8:73:1e:e2:4b:ed:be: da:99:54:a5:77:59:24:42:0d:0b:5c:ac:71:34:99:d7:98:fa: bd:24:ac:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnq/b9bosZka/YcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NDhmODBkN2UtNTY5Yy00MTMyLWI1ZmQtMmM1YWZkZjFkNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApulDBAOvT1bM8dpVDbX3BidBHueXi3m9l9Nk Up5pZjaC8rbWsKgzRjikLk+NQZwzYrGJ004HZE1gR65GiVsN29WqcTqhD8lEJAuN PXLtDMX7PBkcPReRrRkE29dvs0m10niL5ykny/C3CXbLQjdd1CCfh7qtDKtlKliN W2V52D9SfQ+70Cs9K2MQ8bwOYaau5lZ55JHtsEV9lzzvFcKWLGfhUzrM5jzlNyGr ELpLcBishnEt4Gz1cLBmBTJem/6inw/N19bLVjT0vFPT7LnA7GYfCDFVwzVQn6G9 DVR5mmK2aOlARrM+9f7pIEPyfx8yOSuj5/xW+4m/u6wwHeyNVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWiwBoz8T/g+MSCJralQOzbmOCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjdjZTE3MDQtZDU4Zi0z OTVjLWFhOTItN2E2ZjQyNjNkZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnz0xWb+DUc7E+xVLBoHoA1ELe4uXhVxleyUeMAxy4IMN0ceWC+cbAf SD9WU1n5COMgtZZBDdWGEEhPth7NsXSMHEYkLgB9c+hrTwpe64m0vXIkwlG8D5/3 6oVYVBqGCIVvyIPRikrFFw87h2ojuUyKkfSw2b6goK20Sd7youIXVuXZiYHG9p91 DCebRy8PdElGbvKgSUmbKL8gtdHQ/uyRVDEXwSVmZuSxuPz52gHhN0ldWvMDOPrR 2PBSTcCcMOQZoSPAeUzFYB0dDoX1o94gmtHPg/jAA4SXKuYZVGmJceXFqHMe4kvt vtqZVKV3WSRCDQtcrHE0mdeY+r0krO8= -----END CERTIFICATE-----Generated at Tue Sep 22 21:16:33 2026 by rpki-client