$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23c957a6-006c-358f-bdac-cdf5d8806663.roa File: 23c957a6-006c-358f-bdac-cdf5d8806663.roa (raw, json) Hash identifier: x+A4P/S7EMWVp2rT6aJKOPOmX4iOW6+/3D8grZ3TMtQ= Subject key identifier: B4:8D:60:2C:3A:85:5E:4D:84:7B:A8:34:80:A1:E8:9B:CD:45:EE:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D863BA7AE93AA2A4F7340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23c957a6-006c-358f-bdac-cdf5d8806663.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 73.188.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:86:3b:a7:ae:93:aa:2a:4f:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2b94171f-3370-4d65-a940-25a65c6b2168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:ce:54:a9:0b:db:67:21:8d:49:1b:8d:b4: ff:42:ae:6a:a7:1e:f4:8f:05:da:91:e3:1e:cf:33: c5:b3:d4:29:4e:b6:c2:df:e2:25:53:f2:f2:87:c5: a0:a4:9b:fb:02:b9:61:cf:7c:2b:7b:76:52:9e:32: 26:92:a4:3e:20:7b:45:09:5a:7c:f1:72:db:97:ce: ea:aa:74:4f:0a:68:69:d9:15:07:7c:73:cf:6e:e7: 74:3d:5d:53:1d:0a:91:f7:1a:58:4a:be:cf:06:32: 65:2b:ca:b6:1a:32:a2:87:fb:95:d1:8b:8e:3f:b1: 91:0a:69:99:e4:96:c8:c7:7e:64:77:ad:37:57:a4: 36:89:9d:ca:94:02:4c:8d:34:75:eb:0a:5c:8d:55: b7:91:54:07:95:41:62:37:60:c1:c4:15:ad:38:54: 05:ec:02:27:8f:e4:d3:1d:65:5c:b3:95:70:4f:b7: fb:f4:8a:6e:e7:b0:ed:0b:ce:4a:6d:56:4d:98:90: 0b:6c:c8:b9:6e:a0:40:e4:db:24:28:09:1a:b8:ac: 49:cd:4b:5a:54:a9:41:d4:7c:c9:f1:c8:dc:28:5e: bb:bb:e9:0d:a5:df:63:bc:05:64:40:c1:11:26:26: 82:63:8f:05:4e:89:c3:b2:5d:3b:66:93:1a:d8:a7: 5d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8D:60:2C:3A:85:5E:4D:84:7B:A8:34:80:A1:E8:9B:CD:45:EE:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23c957a6-006c-358f-bdac-cdf5d8806663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.188.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b5:5f:02:1d:f2:3c:fb:6c:03:d3:15:b4:72:f7:cc:20:3c: 41:c0:c7:e2:1a:1b:8f:6c:94:04:d0:47:b0:9a:93:f4:5e:37: f5:5c:cf:e8:5a:16:e9:42:35:29:70:1e:fd:07:9b:b5:46:33: 4f:8b:0f:d7:23:66:01:56:50:5b:6b:c5:0a:44:ad:b7:3a:61: 60:96:38:ed:64:cf:16:23:14:6d:bd:9f:37:f8:0b:60:ef:dd: 2e:35:59:04:40:d8:63:dc:7d:ab:96:0f:10:05:67:5a:11:d7: d2:36:57:f0:c8:3b:82:89:14:6f:36:ef:75:83:23:ac:7e:98: 91:0f:57:01:8c:6d:78:99:19:d5:71:19:a4:c4:8f:79:7d:79: f2:f6:4a:0d:7e:9b:42:b0:f6:47:f6:d4:a4:0e:80:d2:d1:c2: 52:53:9b:04:a6:c1:fd:5f:d2:d3:a8:c4:38:18:4d:d4:42:9a: 30:3e:ab:4f:bf:38:32:41:95:25:b6:1e:35:be:e5:f3:be:c7: 81:82:a7:77:74:b1:c9:4a:5f:16:d4:1e:6b:1a:c2:21:e4:bd: f4:65:29:1f:5b:78:b3:65:e5:43:0a:8a:ea:75:58:a0:f1:f1: 06:66:86:87:65:ed:4e:d4:b3:3e:a0:30:89:de:f3:65:35:59: 09:7a:de:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnYY7p66TqipPc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmI5NDE3MWYtMzM3MC00ZDY1LWE5NDAtMjVhNjVjNmIyMTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwnOVKkL22chjUkbjbT/Qq5qpx70jwXakeMe zzPFs9QpTrbC3+IlU/Lyh8WgpJv7Arlhz3wre3ZSnjImkqQ+IHtFCVp88XLbl87q qnRPCmhp2RUHfHPPbud0PV1THQqR9xpYSr7PBjJlK8q2GjKih/uV0YuOP7GRCmmZ 5JbIx35kd603V6Q2iZ3KlAJMjTR16wpcjVW3kVQHlUFiN2DBxBWtOFQF7AInj+TT HWVcs5VwT7f79Ipu57DtC85KbVZNmJALbMi5bqBA5NskKAkauKxJzUtaVKlB1HzJ 8cjcKF67u+kNpd9jvAVkQMERJiaCY48FTonDsl07ZpMa2KddtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSNYCw6hV5NhHuoNICh6JvNRe5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjNjOTU3YTYtMDA2Yy0z NThmLWJkYWMtY2RmNWQ4ODA2NjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSbxIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi1XwId8jz7bAPTFbRy98wgPEHAx+IaG49slATQR7Cak/ReN/Vcz+ha FulCNSlwHv0Hm7VGM0+LD9cjZgFWUFtrxQpErbc6YWCWOO1kzxYjFG29nzf4C2Dv 3S41WQRA2GPcfauWDxAFZ1oR19I2V/DIO4KJFG8273WDI6x+mJEPVwGMbXiZGdVx GaTEj3l9efL2Sg1+m0Kw9kf21KQOgNLRwlJTmwSmwf1f0tOoxDgYTdRCmjA+q0+/ ODJBlSW2HjW+5fO+x4GCp3d0sclKXxbUHmsawiHkvfRlKR9beLNl5UMKiup1WKDx 8QZmhodl7U7Usz6gMIne82U1WQl63kE= -----END CERTIFICATE-----Generated at Sat Sep 26 00:17:37 2026 by rpki-client