$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4226a0-d4c3-3369-b0bf-f0456fdda616.roa File: 3a4226a0-d4c3-3369-b0bf-f0456fdda616.roa (raw, json) Hash identifier: 8tJHf7fLpjlCWWu8cPGUOqNLMb9dKHwhTzHCE/jEHXM= Subject key identifier: 8F:8C:83:F5:F8:AA:34:F1:58:04:EE:61:D4:BC:B1:D0:3B:AD:5C:20 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D8AA70821BD3C786C9980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4226a0-d4c3-3369-b0bf-f0456fdda616.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 73.248.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:8a:a7:08:21:bd:3c:78:6c:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f7420c1f-f3d2-496d-842b-c1bc21bd7b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:7f:46:aa:e5:84:34:03:f8:be:5b:75:81: e5:f0:27:f5:59:14:ab:7b:f6:98:00:2d:3f:5e:ef: e5:7e:d3:f8:61:77:af:e2:5c:82:d4:18:6d:4e:f7: a4:5f:6a:a5:ad:4b:bc:27:42:e7:ae:de:21:fc:45: 64:c8:25:43:83:6f:c2:aa:70:2e:44:69:da:a1:d8: 29:9a:2a:b7:56:23:5e:7e:43:25:52:94:c6:d1:d8: 0e:36:a8:bf:ff:58:4a:20:56:c5:d4:a3:4a:00:6d: 1b:0a:46:09:a2:78:78:6d:a2:bf:0a:76:2f:1c:44: 49:f3:a6:62:21:66:e5:62:2e:b0:ec:65:bc:3d:22: 6e:c9:de:68:0a:1d:e0:28:a1:c8:b2:56:af:e3:de: 7d:c4:98:a6:6d:c0:4f:bb:04:32:8d:43:da:b7:31: c3:ca:3c:3a:fe:61:fc:9c:da:39:8f:cb:7d:1e:a0: cb:97:f2:27:67:8e:8f:5a:be:8c:f0:63:7a:90:ae: 7a:d3:98:55:d8:0a:98:42:06:d6:0a:84:19:aa:91: fa:33:14:5c:99:56:23:c6:e9:4e:ca:42:6c:ea:c6: 37:3d:b2:56:47:75:f6:af:71:c5:0d:11:30:6a:56: 84:fa:41:15:c9:01:13:1a:e3:74:eb:fa:9c:db:93: 92:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8C:83:F5:F8:AA:34:F1:58:04:EE:61:D4:BC:B1:D0:3B:AD:5C:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4226a0-d4c3-3369-b0bf-f0456fdda616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5e:9c:1b:ba:7d:d5:87:4c:11:90:71:71:66:b1:de:87:fd: 4d:ed:44:09:8b:e5:0f:28:16:e9:30:ae:e1:7d:ec:8f:d2:aa: c0:b6:6f:06:8b:42:1f:50:c9:5e:10:8a:02:39:92:aa:74:ef: d0:77:96:6c:46:fb:75:09:13:1f:d6:36:60:55:ec:d4:2c:bc: 80:d5:7f:7b:bf:18:b4:ce:57:52:34:ea:86:bb:c7:94:eb:87: 8e:26:b5:50:71:97:33:d5:73:34:c3:c3:36:f1:4e:8d:f0:1c: 77:2a:29:c3:f8:27:6b:40:d3:7b:fc:93:5a:db:ab:06:5d:c8: f0:3a:3d:b9:e6:e6:d1:56:b6:14:b9:3c:fa:fa:ae:da:d9:0f: 9b:96:4d:a2:be:b4:71:57:dc:24:31:e4:e9:f0:c4:91:4a:74: 0a:1f:19:c5:95:10:6b:1c:5b:45:24:f2:14:7a:69:ad:82:37: ad:24:8d:ec:c4:00:a3:3b:c0:86:39:2e:46:b9:af:d7:3b:8b: e9:2f:00:87:02:f0:fb:57:83:7c:df:4e:75:d6:dd:72:e9:af: 59:35:67:66:32:fa:26:bd:d5:fa:b1:e8:0d:a2:df:0a:41:4c: 1f:30:b2:fc:51:12:3c:86:97:28:d5:a8:db:f9:0b:46:87:26: 1f:81:e0:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnYqnCCG9PHhsmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Zjc0MjBjMWYtZjNkMi00OTZkLTg0MmItYzFiYzIxYmQ3YjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbF/RqrlhDQD+L5bdYHl8Cf1WRSre/aYAC0/ Xu/lftP4YXev4lyC1BhtTvekX2qlrUu8J0Lnrt4h/EVkyCVDg2/CqnAuRGnaodgp miq3ViNefkMlUpTG0dgONqi//1hKIFbF1KNKAG0bCkYJonh4baK/CnYvHERJ86Zi IWblYi6w7GW8PSJuyd5oCh3gKKHIslav4959xJimbcBPuwQyjUPatzHDyjw6/mH8 nNo5j8t9HqDLl/InZ46PWr6M8GN6kK5605hV2AqYQgbWCoQZqpH6MxRcmVYjxulO ykJs6sY3PbJWR3X2r3HFDREwalaE+kEVyQETGuN06/qc25OS1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+Mg/X4qjTxWATuYdS8sdA7rVwgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2E0MjI2YTAtZDRjMy0z MzY5LWIwYmYtZjA0NTZmZGRhNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxenBu6fdWHTBGQcXFmsd6H/U3tRAmL5Q8oFukwruF97I/SqsC2bwaL Qh9QyV4QigI5kqp079B3lmxG+3UJEx/WNmBV7NQsvIDVf3u/GLTOV1I06oa7x5Tr h44mtVBxlzPVczTDwzbxTo3wHHcqKcP4J2tA03v8k1rbqwZdyPA6Pbnm5tFWthS5 PPr6rtrZD5uWTaK+tHFX3CQx5OnwxJFKdAofGcWVEGscW0Uk8hR6aa2CN60kjezE AKM7wIY5Lka5r9c7i+kvAIcC8PtXg3zfTnXW3XLpr1k1Z2Yy+ia91fqx6A2i3wpB TB8wsvxREjyGlyjVqNv5C0aHJh+B4NI= -----END CERTIFICATE-----Generated at Sat Sep 26 07:03:50 2026 by rpki-client