$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a19bfa6b-6930-38b2-b151-dc5bf8d2d2f2.roa File: a19bfa6b-6930-38b2-b151-dc5bf8d2d2f2.roa (raw, json) Hash identifier: P2Y2eSovjpjGRGPv9eAa06NTkCLu9D4/E59ENZXpqF8= Subject key identifier: D2:35:F2:2D:48:EC:D4:79:04:A5:32:67:8C:0D:C4:E5:9C:BE:C5:15 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584FB3A7CD424A0FE2B86F8659B0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a19bfa6b-6930-38b2-b151-dc5bf8d2d2f2.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 33651 IP address blocks: 73.223.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a7:cd:42:4a:0f:e2:b8:6f:86:59:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=a18e72b9-ec12-4176-bf8c-c9f44f66208a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9e:25:48:27:92:fd:41:12:1d:53:8a:37:17: de:ab:c5:4c:07:3b:87:8e:16:f0:ed:9c:9a:92:79: 61:a9:bb:e3:26:44:48:57:60:7d:fa:f3:55:94:85: e4:d0:1b:3d:dc:7c:cc:be:82:57:43:c3:8e:03:22: c7:4c:d4:11:44:c1:be:1d:c4:3f:f1:a0:69:e0:5e: 9b:cc:e5:ac:bc:63:3e:f5:cb:81:29:2f:07:98:0a: 79:db:2d:0f:f5:cd:71:7a:8c:ec:a8:e2:3a:3c:1e: 41:5c:2c:0b:df:fc:2b:1f:01:6e:f1:31:ef:18:12: 89:2b:05:30:9a:02:27:f7:f2:14:6d:cb:b8:c6:3f: 8a:7c:e9:e8:94:2e:76:58:8a:72:2a:05:2d:55:a9: d9:bb:aa:fe:98:7f:38:a8:f7:62:e2:f7:d0:7b:c4: ad:d5:1b:1c:73:8c:44:ce:2f:ee:2c:39:96:0a:34: 71:09:e0:25:a6:2a:33:86:fd:c5:9d:9b:9c:d5:04: a0:b3:38:70:4c:49:3a:e5:d7:1b:8f:6c:d5:60:a0: db:94:36:4e:67:36:79:5e:dd:e1:ef:24:13:2b:43: ef:c5:e5:ee:ec:87:30:8c:da:e9:3b:e9:fa:4c:60: 1f:cd:07:6d:08:1b:f2:27:c6:65:d1:02:3b:af:4d: 8a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:35:F2:2D:48:EC:D4:79:04:A5:32:67:8C:0D:C4:E5:9C:BE:C5:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a19bfa6b-6930-38b2-b151-dc5bf8d2d2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:3d:11:33:86:83:8e:dc:67:ae:7f:b3:2c:97:ad:40:bf:2d: ca:5f:9a:46:3d:84:59:bd:4f:2b:98:b7:cf:00:1d:0c:71:34: 9e:6d:45:18:33:28:31:d7:db:f0:21:09:99:45:2e:8e:93:35: e0:b1:28:82:9f:b3:6f:69:a0:23:03:d4:34:9b:11:c7:33:0f: 21:23:cb:da:91:86:f8:e0:fe:28:1a:fe:9b:89:96:ad:1e:1f: 6e:ee:d2:b9:b3:1a:e0:de:10:cd:c2:1c:21:54:ba:8e:ee:ed: bf:78:d0:bd:c7:5f:c0:2e:b0:dd:56:bc:8d:b6:a8:51:3b:d7: ee:b5:b7:d5:00:10:c9:c1:a8:0a:67:b4:78:23:4c:35:64:0a: a3:c2:89:eb:11:eb:73:6c:21:5e:9f:90:e3:4c:ee:d9:e6:ea: 61:f7:43:d4:bd:c0:8d:12:9f:4c:65:64:4f:05:b7:ad:5c:43: 41:3b:3c:d2:10:36:e7:f9:17:61:3b:20:d3:89:5d:c2:73:6e: d3:8a:9a:9c:50:c3:65:40:08:95:b5:2f:7e:12:9f:1e:d6:7d: 47:7e:0c:c4:14:fb:33:88:7d:ad:5c:ce:bc:c5:8b:36:3f:a3: db:fb:7b:32:b0:0e:0d:4c:be:47:5b:2b:1f:01:ea:d8:b9:b0: 40:cb:9e:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zp81CSg/iuG+GWbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk YTE4ZTcyYjktZWMxMi00MTc2LWJmOGMtYzlmNDRmNjYyMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ4lSCeS/UESHVOKNxfeq8VMBzuHjhbw7Zya knlhqbvjJkRIV2B9+vNVlIXk0Bs93HzMvoJXQ8OOAyLHTNQRRMG+HcQ/8aBp4F6b zOWsvGM+9cuBKS8HmAp52y0P9c1xeozsqOI6PB5BXCwL3/wrHwFu8THvGBKJKwUw mgIn9/IUbcu4xj+KfOnolC52WIpyKgUtVanZu6r+mH84qPdi4vfQe8St1Rscc4xE zi/uLDmWCjRxCeAlpiozhv3FnZuc1QSgszhwTEk65dcbj2zVYKDblDZOZzZ5Xt3h 7yQTK0PvxeXu7IcwjNrpO+n6TGAfzQdtCBvyJ8Zl0QI7r02KXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNI18i1I7NR5BKUyZ4wNxOWcvsUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTE5YmZhNmItNjkzMC0z OGIyLWIxNTEtZGM1YmY4ZDJkMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSd+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg9ETOGg47cZ65/syyXrUC/LcpfmkY9hFm9TyuYt88AHQxxNJ5tRRgz KDHX2/AhCZlFLo6TNeCxKIKfs29poCMD1DSbEcczDyEjy9qRhvjg/iga/puJlq0e H27u0rmzGuDeEM3CHCFUuo7u7b940L3HX8AusN1WvI22qFE71+61t9UAEMnBqApn tHgjTDVkCqPCiesR63NsIV6fkONM7tnm6mH3Q9S9wI0Sn0xlZE8Ft61cQ0E7PNIQ Nuf5F2E7INOJXcJzbtOKmpxQw2VACJW1L34Snx7WfUd+DMQU+zOIfa1czrzFizY/ o9v7ezKwDg1MvkdbKx8B6ti5sEDLnsE= -----END CERTIFICATE-----Generated at Sun Nov 15 15:05:30 2026 by rpki-client