$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2670929b-1b11-30cb-a8de-9390626c1ed3.roa File: 2670929b-1b11-30cb-a8de-9390626c1ed3.roa (raw, json) Hash identifier: iHpSdFsKIhyoP1zFqmA+pqNg+DUtysJa4y7aPzH1GUg= Subject key identifier: 8C:7A:5F:05:4F:8B:8A:3A:84:28:2D:E0:4D:4C:3D:59:3F:3D:52:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F498112A8746EC463D97A4477 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2670929b-1b11-30cb-a8de-9390626c1ed3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33652 IP address blocks: 73.14.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:12:a8:74:6e:c4:63:d9:7a:44:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d21a350f-20e4-40ed-a4f5-531c784559c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:02:8e:0c:f5:20:d1:fd:2a:07:de:90:a3: d6:48:52:27:d1:48:5e:a6:07:e1:78:d6:13:1a:1e: c0:f0:51:cb:6c:ea:80:1d:b5:fc:39:1d:f6:dc:c7: df:8c:97:e7:93:f6:ac:df:30:54:cc:7e:43:d5:c0: 4f:af:b8:51:51:e3:0e:ce:2b:18:0f:32:02:86:fa: 7e:79:82:38:88:44:a7:1e:e7:09:89:33:dd:10:3b: af:bd:59:67:99:77:33:e8:3b:39:f4:cf:8f:7e:ff: 0c:19:ad:db:e3:40:f0:76:94:be:7b:a1:90:af:01: bc:f3:79:87:3b:2f:15:b3:85:8e:b0:f5:29:a7:c5: a2:ce:39:bf:f2:64:16:2f:ff:b1:09:85:d3:b0:9a: 1b:c9:c7:b4:c4:94:f2:f0:72:aa:b5:d9:5c:9e:30: 49:ed:8b:ed:8a:6f:ed:96:86:5e:5f:f2:27:e9:84: 5f:fd:01:57:14:7c:86:9e:bb:0b:82:64:d2:d5:de: 9e:8e:ce:0e:6f:46:f1:46:42:ee:da:23:eb:a1:4f: 7d:14:af:56:f0:76:c5:84:22:84:66:20:72:34:a5: c9:9a:76:71:4e:21:6a:e6:1c:11:51:ae:c5:06:3b: d9:3a:01:5f:d2:b5:95:46:ce:61:5d:ad:64:7a:e0: e7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7A:5F:05:4F:8B:8A:3A:84:28:2D:E0:4D:4C:3D:59:3F:3D:52:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2670929b-1b11-30cb-a8de-9390626c1ed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.14.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:10:f1:82:02:41:dd:47:9c:02:e4:dd:13:0d:ce:f6:06:f4: 72:8f:a1:e2:1a:8c:98:1c:86:84:3f:dd:4d:eb:e1:29:4b:fe: 46:8e:53:4b:ab:64:58:cc:7e:15:e3:c8:fa:86:75:10:dd:9c: bd:3d:b5:9e:85:cd:87:12:11:2a:1e:33:5c:80:dc:5e:de:1c: 5b:07:4f:23:b8:f1:8e:8a:df:01:c6:4f:76:08:35:cd:72:c4: 7d:8b:45:67:4d:84:d0:e1:33:1e:fe:81:f6:07:cd:5f:fd:f3: 0c:30:97:20:cb:e4:20:03:74:d2:71:ad:2d:08:cf:b5:9a:2f: 5d:d6:2a:e6:6b:c1:88:8b:91:f1:9e:12:59:78:14:e4:d2:68: b6:43:46:ea:76:89:dd:b6:79:9c:d6:2b:d4:dc:1d:fa:a4:c0: f7:45:09:c8:45:9f:2d:f9:32:42:f6:2b:f9:77:cb:6c:cc:4a: 9c:d9:65:50:7c:5c:a1:13:aa:d1:66:73:00:5b:de:1c:86:29: 6e:91:c3:9d:38:d2:e7:61:4c:db:48:0b:42:f7:38:7f:ba:5e: ac:b2:4c:a3:c7:68:2f:cc:23:fd:9f:f9:29:f9:48:99:55:64: 7e:bc:e4:b7:b0:3c:da:8d:f7:c2:83:a0:fe:43:b3:9a:33:53: 83:06:2d:5c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JgRKodG7EY9l6RHcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDIxYTM1MGYtMjBlNC00MGVkLWE0ZjUtNTMxYzc4NDU1OWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupACjgz1INH9KgfekKPWSFIn0UhepgfheNYT Gh7A8FHLbOqAHbX8OR323MffjJfnk/as3zBUzH5D1cBPr7hRUeMOzisYDzIChvp+ eYI4iESnHucJiTPdEDuvvVlnmXcz6Ds59M+Pfv8MGa3b40DwdpS+e6GQrwG883mH Oy8Vs4WOsPUpp8Wizjm/8mQWL/+xCYXTsJobyce0xJTy8HKqtdlcnjBJ7Yvtim/t loZeX/In6YRf/QFXFHyGnrsLgmTS1d6ejs4Ob0bxRkLu2iProU99FK9W8HbFhCKE ZiByNKXJmnZxTiFq5hwRUa7FBjvZOgFf0rWVRs5hXa1keuDnCQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIx6XwVPi4o6hCgt4E1MPVk/PVINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjY3MDkyOWItMWIxMS0z MGNiLWE4ZGUtOTM5MDYyNmMxZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASQ4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYhDxggJB3UecAuTdEw3O9gb0co+h4hqMmByGhD/dTevhKUv+Ro5TS6tk WMx+FePI+oZ1EN2cvT21noXNhxIRKh4zXIDcXt4cWwdPI7jxjorfAcZPdgg1zXLE fYtFZ02E0OEzHv6B9gfNX/3zDDCXIMvkIAN00nGtLQjPtZovXdYq5mvBiIuR8Z4S WXgU5NJotkNG6naJ3bZ5nNYr1Nwd+qTA90UJyEWfLfkyQvYr+XfLbMxKnNllUHxc oROq0WZzAFveHIYpbpHDnTjS52FM20gLQvc4f7perLJMo8doL8wj/Z/5KflImVVk frzkt7A82o33woOg/kOzmjNTgwYtXA== -----END CERTIFICATE-----Generated at Wed Sep 30 21:17:10 2026 by rpki-client