$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af43e811-ef71-3eae-9742-ba5b11eec625.roa File: af43e811-ef71-3eae-9742-ba5b11eec625.roa (raw, json) Hash identifier: x7rKs7/KqZjxaj6AMQKwV9ue5ZX4+TgysUtZ8NxeQ4Q= Subject key identifier: 31:40:9C:DF:EE:FA:EA:B0:70:F4:ED:C5:6C:08:F8:25:EF:D1:66:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119DF7EB6E15B937C328C9C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af43e811-ef71-3eae-9742-ba5b11eec625.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 73.74.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:f7:eb:6e:15:b9:37:c3:28:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=8e823f68-b6d4-4085-8b9d-744da3a85cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:36:fa:83:4b:10:5c:2f:14:f7:25:1b:5e:c9: 62:32:f5:2b:66:ea:4c:e9:50:56:b6:64:f6:82:d1: 34:c8:d5:47:d0:43:7b:4d:83:bc:40:88:75:7d:54: 4f:fb:08:ae:f9:3f:0d:c8:70:ec:a0:c3:01:e6:9a: 09:0f:c1:88:f5:27:54:74:bd:3c:54:e4:67:96:5a: 56:77:7d:f1:9c:0a:56:0a:61:73:97:15:ff:17:75: dd:d0:31:e4:10:86:05:28:1d:75:92:67:ae:04:b8: fe:b1:7f:61:e2:c1:7a:ba:c0:3f:b1:f6:f0:46:fe: 4f:e0:2b:60:39:53:24:39:36:aa:62:20:42:19:e3: 92:4c:14:42:89:c0:3a:a8:5c:84:bb:6d:42:fc:9b: cf:f5:63:0a:35:19:97:7f:65:48:7a:f2:b3:74:f2: f0:bc:ec:72:42:db:f4:eb:a3:4e:fd:e3:ca:a5:2b: 0b:ba:9f:c6:f5:3c:57:af:40:b2:05:c9:09:7d:81: 8e:25:b5:8c:ee:e7:71:56:cf:b2:10:d9:2a:9a:23: e7:07:62:d0:69:d6:01:ac:7a:2a:76:ae:96:8a:18: 64:a5:70:af:8c:ca:b4:ac:3a:38:67:c2:c7:02:a1: ca:a1:23:33:69:fa:41:bb:4b:07:ce:58:b2:bf:8c: 93:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:40:9C:DF:EE:FA:EA:B0:70:F4:ED:C5:6C:08:F8:25:EF:D1:66:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af43e811-ef71-3eae-9742-ba5b11eec625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.74.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:0a:d9:e5:57:45:09:63:2c:86:67:1a:b0:d7:55:5f:56:77: 5e:62:f9:6c:c9:7b:ff:d7:b0:a6:ad:8d:43:d5:4d:e2:0f:59: 7e:9a:bf:50:b8:2a:6f:c2:39:62:05:10:a7:e4:de:4b:6e:c1: 77:13:9a:fc:66:35:3b:a5:f2:c7:81:81:ae:b2:5b:b4:87:a9: 54:4c:5f:a6:2e:50:77:e7:11:04:8d:24:57:e0:8f:83:59:8d: a6:05:11:cd:ad:bd:8d:27:99:7e:06:23:5a:56:6f:58:f8:de: 8d:44:1f:2a:63:e3:e5:1a:83:b2:01:e3:bd:24:29:96:f2:57: fd:1e:c6:52:72:cf:49:ac:b5:91:91:5d:a8:54:49:62:22:95: 54:76:cd:44:c8:8d:e1:07:15:ca:d6:6d:e8:fe:0f:f7:62:c5: de:f6:19:11:8d:e6:58:5b:3a:5d:9e:07:c2:03:15:ff:71:bd: 6b:5f:c3:3a:56:f5:be:ac:53:12:13:8f:65:da:1d:79:4a:12: 4b:a8:2d:49:a9:79:a3:18:92:24:77:ee:65:56:3d:6f:35:07: 06:65:08:4c:59:88:66:22:ed:d4:7e:14:d5:7d:3b:9a:77:db: ff:f8:06:a5:cd:05:62:b7:ce:8b:c1:66:ac:5c:a2:96:1d:d8: 87:f9:98:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnffrbhW5N8MoycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OGU4MjNmNjgtYjZkNC00MDg1LThiOWQtNzQ0ZGEzYTg1Y2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozb6g0sQXC8U9yUbXsliMvUrZupM6VBWtmT2 gtE0yNVH0EN7TYO8QIh1fVRP+wiu+T8NyHDsoMMB5poJD8GI9SdUdL08VORnllpW d33xnApWCmFzlxX/F3Xd0DHkEIYFKB11kmeuBLj+sX9h4sF6usA/sfbwRv5P4Ctg OVMkOTaqYiBCGeOSTBRCicA6qFyEu21C/JvP9WMKNRmXf2VIevKzdPLwvOxyQtv0 66NO/ePKpSsLup/G9TxXr0CyBckJfYGOJbWM7udxVs+yENkqmiPnB2LQadYBrHoq dq6WihhkpXCvjMq0rDo4Z8LHAqHKoSMzafpBu0sHzliyv4yTAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFAnN/u+uqwcPTtxWwI+CXv0WYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY0M2U4MTEtZWY3MS0z ZWFlLTk3NDItYmE1YjExZWVjNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASUrxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwK2eVXRQljLIZnGrDXVV9Wd15i+WzJe//XsKatjUPVTeIPWX6av1C4 Km/COWIFEKfk3ktuwXcTmvxmNTul8seBga6yW7SHqVRMX6YuUHfnEQSNJFfgj4NZ jaYFEc2tvY0nmX4GI1pWb1j43o1EHypj4+Uag7IB470kKZbyV/0exlJyz0mstZGR XahUSWIilVR2zUTIjeEHFcrWbej+D/dixd72GRGN5lhbOl2eB8IDFf9xvWtfwzpW 9b6sUxITj2XaHXlKEkuoLUmpeaMYkiR37mVWPW81BwZlCExZiGYi7dR+FNV9O5p3 2//4BqXNBWK3zovBZqxcopYd2If5mKE= -----END CERTIFICATE-----Generated at Wed Sep 23 18:29:03 2026 by rpki-client