$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c226f6fa-ff8e-3938-8938-a0bc4e2ccdd0.roa File: c226f6fa-ff8e-3938-8938-a0bc4e2ccdd0.roa (raw, json) Hash identifier: oqJ5N9gxrMS46pk29jz05+u/VzYdZuNmd+SbTQwG0qE= Subject key identifier: C4:35:4D:D5:DA:09:2C:1F:1E:9A:05:5A:78:3E:DD:9F:B6:79:B1:AB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584FB3A6BDBEA4C83D89B6012C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c226f6fa-ff8e-3938-8938-a0bc4e2ccdd0.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 33659 IP address blocks: 73.33.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:bd:be:a4:c8:3d:89:b6:01:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=ef009a66-f6ea-40e5-8628-3550e2a073f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:6a:79:84:33:eb:1d:b6:aa:2b:c6:2d:c3: e4:3c:90:d3:04:3f:23:af:ef:1b:42:f1:14:f8:27: a0:79:b5:93:e6:9a:9e:0a:52:10:e9:dd:d9:5f:d4: e1:f9:43:ec:2d:2c:b2:b0:66:41:79:ac:2f:ff:21: bc:40:f5:51:79:db:0d:ec:db:7c:d4:48:f0:07:85: cc:07:8a:52:c4:4e:fa:c7:c2:f6:ac:bc:3b:46:1c: fd:f8:7d:33:79:f4:3d:19:e1:56:65:4f:16:ec:cd: f7:9f:1c:c7:40:51:b4:60:26:69:8b:97:28:57:e4: ef:4a:42:40:70:68:a8:70:ee:48:c8:24:74:49:a1: 7f:9d:55:f3:65:02:99:1f:89:00:a3:e2:e7:7d:51: 64:8a:c9:5f:41:26:d3:cd:ce:bd:5e:8b:9e:d1:e3: 98:da:d5:5a:d7:da:08:f8:d3:b8:d1:68:ce:9a:e8: 62:24:06:60:26:e1:cc:5c:1e:ab:ea:66:56:22:1a: 61:46:63:15:97:76:6f:4e:95:c1:c5:7d:da:d9:d3: 3c:5d:ed:4e:d4:de:74:fb:23:7f:6d:b4:be:0e:8c: 34:60:81:ed:66:2f:e0:bf:19:2b:b6:95:e2:27:7d: 6a:66:b9:88:3a:bf:69:dd:76:76:75:33:1a:18:91: 88:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:35:4D:D5:DA:09:2C:1F:1E:9A:05:5A:78:3E:DD:9F:B6:79:B1:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c226f6fa-ff8e-3938-8938-a0bc4e2ccdd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.33.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:24:be:d4:a4:47:ef:a8:6d:66:43:2d:cf:7b:bf:9f:2f:b4: 45:1e:9d:52:0c:9b:36:14:86:96:e0:68:37:46:8c:bc:ef:b1: 78:17:b5:c1:19:80:6d:a8:cf:42:1b:f1:24:6d:b1:4b:43:9f: 38:ff:b0:ff:42:5f:6b:75:b1:12:bc:8f:20:d2:29:6d:af:4f: 99:be:dc:97:f9:71:58:c6:b4:43:a9:60:e2:34:63:b1:2c:a9: 38:ba:e1:03:d3:5f:aa:80:83:6d:8d:0a:bb:f5:0b:f4:81:a0: 56:66:6d:ac:a9:22:a9:97:3f:88:39:d7:1a:ca:81:d1:76:da: 3c:8b:04:11:a7:65:f4:b8:a4:16:c3:64:13:c2:11:1f:a3:a5: 76:25:d3:05:4f:f4:09:74:82:ef:07:26:56:fe:84:cc:86:cb: 98:9a:52:9f:0b:b0:0a:5e:1a:9b:b2:25:5c:e5:f7:78:a8:24: 87:70:d3:51:45:a7:9b:16:83:6b:d4:9e:f7:73:c7:ae:a2:8d: a0:74:ed:b5:9d:39:de:54:2f:84:e7:07:23:b2:ca:1e:d4:2c: 3f:ed:c4:a6:b4:ec:85:9a:c2:a6:e7:d4:1e:5d:f3:5b:bc:62: 86:a5:31:5f:0d:4e:35:87:04:74:c7:93:e3:e8:a7:5e:8a:bf: a0:36:97:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpr2+pMg9ibYBLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk ZWYwMDlhNjYtZjZlYS00MGU1LTg2MjgtMzU1MGUyYTA3M2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstFqeYQz6x22qivGLcPkPJDTBD8jr+8bQvEU +CegebWT5pqeClIQ6d3ZX9Th+UPsLSyysGZBeawv/yG8QPVRedsN7Nt81EjwB4XM B4pSxE76x8L2rLw7Rhz9+H0zefQ9GeFWZU8W7M33nxzHQFG0YCZpi5coV+TvSkJA cGiocO5IyCR0SaF/nVXzZQKZH4kAo+LnfVFkislfQSbTzc69Xoue0eOY2tVa19oI +NO40WjOmuhiJAZgJuHMXB6r6mZWIhphRmMVl3ZvTpXBxX3a2dM8Xe1O1N50+yN/ bbS+Dow0YIHtZi/gvxkrtpXiJ31qZrmIOr9p3XZ2dTMaGJGI9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ1TdXaCSwfHpoFWng+3Z+2ebGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzIyNmY2ZmEtZmY4ZS0z OTM4LTg5MzgtYTBiYzRlMmNjZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSHCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMEkvtSkR++obWZDLc97v58vtEUenVIMmzYUhpbgaDdGjLzvsXgXtcEZ gG2oz0Ib8SRtsUtDnzj/sP9CX2t1sRK8jyDSKW2vT5m+3Jf5cVjGtEOpYOI0Y7Es qTi64QPTX6qAg22NCrv1C/SBoFZmbaypIqmXP4g51xrKgdF22jyLBBGnZfS4pBbD ZBPCER+jpXYl0wVP9Al0gu8HJlb+hMyGy5iaUp8LsApeGpuyJVzl93ioJIdw01FF p5sWg2vUnvdzx66ijaB07bWdOd5UL4TnByOyyh7ULD/txKa07IWawqbn1B5d81u8 YoalMV8NTjWHBHTHk+Pop16Kv6A2l1Y= -----END CERTIFICATE-----Generated at Sun Nov 15 17:06:35 2026 by rpki-client