$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1af03820-a7be-32ed-aa25-5868e113c8f1.roa File: 1af03820-a7be-32ed-aa25-5868e113c8f1.roa (raw, json) Hash identifier: aQjQosGADkujBSbws3VfJ4Z4ZPjAxJdVcZoaNm537qg= Subject key identifier: 19:D4:20:6B:2F:D0:88:13:55:AB:FC:34:DE:25:24:75:D1:9B:CA:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E3FE5FC343A5FB0063140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1af03820-a7be-32ed-aa25-5868e113c8f1.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 73.162.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:3f:e5:fc:34:3a:5f:b0:06:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=5970f177-d5b5-4e26-bfe9-e9317fc8d39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:19:8e:0a:1d:04:ef:0f:ef:4e:36:0b:94:17: b8:b2:89:d3:14:43:09:09:ac:59:a5:d0:c7:8d:58: 11:85:8a:8b:08:59:5b:df:82:07:19:25:28:f1:fc: 59:b9:7d:a1:0c:a2:20:58:73:51:8b:9a:06:80:ed: 44:23:07:49:2a:f9:93:c3:1b:91:07:1c:b8:1e:f2: ac:01:9f:c7:63:cb:eb:37:d8:8a:0c:03:58:f9:ba: 29:93:91:14:05:31:40:8c:65:98:20:23:89:f7:ed: 66:38:11:bc:7c:7f:4c:8d:4c:9b:62:bf:86:8c:d5: 00:9c:11:cb:00:de:5e:f7:4b:c8:5f:73:a6:0b:14: 44:0c:9b:65:da:db:fe:bb:fe:85:9e:60:f6:01:94: 4a:dc:2c:0b:ed:51:6d:85:61:8e:25:91:d7:d6:22: e8:e5:75:72:26:0c:60:ee:87:5d:be:7c:91:a3:10: 9f:bc:75:91:fb:f9:06:fc:ec:1e:88:2f:40:b1:93: 0a:1e:65:55:bc:c4:e4:b1:a9:7c:3e:c4:f6:f2:a9: ac:e3:43:a3:a3:b7:67:18:37:ad:18:0c:1d:19:bd: 44:0f:49:1d:48:60:ef:2c:86:b4:b5:60:a4:a2:25: 5d:01:4a:ab:89:0a:1c:6e:fb:77:eb:7b:70:0f:d3: cc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D4:20:6B:2F:D0:88:13:55:AB:FC:34:DE:25:24:75:D1:9B:CA:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1af03820-a7be-32ed-aa25-5868e113c8f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.162.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:66:f8:d5:98:1f:56:07:67:dd:45:c6:e6:8f:2f:54:1b:97: bf:bb:51:5d:3a:65:eb:b4:1d:09:9c:ac:7b:0a:2b:32:a0:14: bd:88:19:56:88:6e:e6:6e:f7:b8:10:1a:20:25:0f:5c:a2:d8: ec:c4:ac:c8:39:62:f3:e0:55:a9:6a:ab:d9:58:2c:f3:ca:cb: e6:68:7a:7c:64:11:98:73:e7:e6:9a:6e:df:71:2e:8b:a8:42: 01:33:dd:db:41:bb:f5:54:e8:8a:2b:43:81:81:76:da:c8:27: aa:56:a4:a6:67:14:9b:1d:33:75:50:5c:b0:86:a2:ea:11:86: ac:45:b5:93:d3:ca:92:27:16:f5:0d:19:89:a1:02:20:20:40: 8e:82:61:4a:a6:d0:cc:78:b7:22:4a:bd:df:3e:61:47:ec:a2: f9:ca:85:74:c9:07:50:01:59:fe:6c:10:55:45:ba:a7:58:e5: 32:ab:87:15:2b:2a:d4:00:55:aa:d5:1e:db:7c:c1:e2:55:a9: 99:06:d5:b1:ce:2d:6c:5f:a7:cf:8e:6a:ee:40:ea:b0:42:e5: 92:15:0e:56:cd:48:9f:83:fb:5c:1b:62:a2:ec:fc:c6:84:b7: 0a:6c:b1:54:06:aa:7e:ee:89:f4:5e:3d:c7:ee:38:99:c7:18: db:b6:6e:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnj/l/DQ6X7AGMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NTk3MGYxNzctZDViNS00ZTI2LWJmZTktZTkzMTdmYzhkMzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxmOCh0E7w/vTjYLlBe4sonTFEMJCaxZpdDH jVgRhYqLCFlb34IHGSUo8fxZuX2hDKIgWHNRi5oGgO1EIwdJKvmTwxuRBxy4HvKs AZ/HY8vrN9iKDANY+bopk5EUBTFAjGWYICOJ9+1mOBG8fH9MjUybYr+GjNUAnBHL AN5e90vIX3OmCxREDJtl2tv+u/6FnmD2AZRK3CwL7VFthWGOJZHX1iLo5XVyJgxg 7oddvnyRoxCfvHWR+/kG/OweiC9AsZMKHmVVvMTksal8PsT28qms40Ojo7dnGDet GAwdGb1ED0kdSGDvLIa0tWCkoiVdAUqriQocbvt363twD9PMpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnUIGsv0IgTVav8NN4lJHXRm8qjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWFmMDM4MjAtYTdiZS0z MmVkLWFhMjUtNTg2OGUxMTNjOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaJsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlm+NWYH1YHZ91FxuaPL1Qbl7+7UV06Zeu0HQmcrHsKKzKgFL2IGVaI buZu97gQGiAlD1yi2OzErMg5YvPgValqq9lYLPPKy+ZoenxkEZhz5+aabt9xLouo QgEz3dtBu/VU6IorQ4GBdtrIJ6pWpKZnFJsdM3VQXLCGouoRhqxFtZPTypInFvUN GYmhAiAgQI6CYUqm0Mx4tyJKvd8+YUfsovnKhXTJB1ABWf5sEFVFuqdY5TKrhxUr KtQAVarVHtt8weJVqZkG1bHOLWxfp8+Oau5A6rBC5ZIVDlbNSJ+D+1wbYqLs/MaE twpssVQGqn7uifRePcfuOJnHGNu2bnM= -----END CERTIFICATE-----Generated at Thu Sep 24 21:56:06 2026 by rpki-client