$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce5da1dc-90b6-3148-89e8-306da78a6e0d.roa File: ce5da1dc-90b6-3148-89e8-306da78a6e0d.roa (raw, json) Hash identifier: ckoFwPoAnogzk5MNxa5XfaTyJkZ/slrkf/qeYgLTd64= Subject key identifier: 5C:C3:05:89:06:81:4A:AE:C6:93:EE:82:2A:2D:C4:84:B1:B6:2E:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EA7487501F00410590700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce5da1dc-90b6-3148-89e8-306da78a6e0d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 73.178.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:a7:48:75:01:f0:04:10:59:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=37cdb420-4eb9-48ea-ae28-a263a2a3c8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:82:1f:2a:42:94:04:fe:c2:8b:fb:09:70:69: e6:6e:b8:ec:f3:86:40:2b:a9:b1:f3:b6:d2:6c:fd: 58:d4:30:a8:fd:65:97:60:0f:79:a0:71:e3:62:93: 77:90:b1:40:35:40:82:cf:79:45:9b:ae:d7:a5:d3: 66:59:c0:a6:fd:54:46:e6:5b:fa:68:b0:80:c3:d4: bb:36:18:78:6f:b9:b8:76:58:f6:b5:5a:94:e3:ed: c9:ff:1e:1e:6b:81:a9:0b:5d:ad:4c:ef:05:65:04: 53:a6:ab:ef:75:55:e0:0b:66:a8:e4:6c:f0:b9:45: c4:9c:0e:f2:9e:e5:43:d6:bb:44:5f:d8:df:f7:2a: 6e:6f:f0:92:59:f1:24:0c:ae:6a:6b:e2:fd:6f:b4: 32:46:65:15:1b:4d:8c:cb:50:7f:6d:99:02:c5:c2: c5:9e:c1:37:df:44:b6:b2:5d:c0:65:a5:79:b8:de: 5b:93:06:ea:5a:65:e9:5c:7e:21:b2:6a:59:26:0d: 97:ee:47:c5:30:a2:7a:ff:87:85:f6:ee:f8:c9:46: 8a:e2:42:eb:0b:ad:4e:8b:56:4c:13:7a:da:5e:fb: e2:ed:ed:5c:ae:28:82:8b:00:c3:e8:27:aa:0b:78: c1:1d:a4:7f:b1:42:50:82:5e:bb:4a:c7:7a:ff:85: 80:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C3:05:89:06:81:4A:AE:C6:93:EE:82:2A:2D:C4:84:B1:B6:2E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce5da1dc-90b6-3148-89e8-306da78a6e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.178.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:c7:e3:46:0a:bf:d6:53:5a:19:50:ed:e3:d8:81:6c:e6:3e: b1:00:4e:f5:09:71:ff:52:d9:da:bd:43:45:43:e3:86:ee:b4: f4:92:9a:05:7c:9f:2e:d2:e0:79:52:b8:3d:53:ea:01:26:26: 2d:24:f4:d6:d7:bf:f4:45:87:84:7c:79:20:39:84:4d:b4:d3: 63:38:55:c8:19:30:90:3b:1e:43:a2:1e:80:99:f4:67:cc:57: 9b:2a:9a:6d:1a:c4:b8:83:da:26:e6:39:70:57:59:95:e4:3c: 71:6b:9a:74:df:5e:f9:ca:74:f7:40:2b:6d:4f:7d:6c:21:ba: 95:ac:2e:30:98:16:a3:0b:13:d1:e8:b8:d5:55:b6:58:e7:32: 9e:7d:77:e8:10:26:91:a4:66:46:dd:d9:15:5f:ee:68:82:5f: 8b:67:6e:5d:08:0a:1a:4a:d9:5a:81:47:b5:3a:c8:2e:0a:85: ba:c4:63:90:8b:6d:0f:1f:69:2f:89:9b:23:e1:fa:c0:d0:f8: ea:50:70:b6:6b:5e:8b:7b:cb:e6:d5:5d:fa:59:9b:68:7d:25: 9f:0f:35:50:34:7e:05:b9:50:a3:41:bb:c8:b3:da:fc:95:b6: 32:a0:ea:55:1a:92:e2:e5:a9:c1:85:8c:5e:4c:c9:c1:ce:47: 68:6b:9e:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnqdIdQHwBBBZBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MzdjZGI0MjAtNGViOS00OGVhLWFlMjgtYTI2M2EyYTNjOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4IfKkKUBP7Ci/sJcGnmbrjs84ZAK6mx87bS bP1Y1DCo/WWXYA95oHHjYpN3kLFANUCCz3lFm67XpdNmWcCm/VRG5lv6aLCAw9S7 Nhh4b7m4dlj2tVqU4+3J/x4ea4GpC12tTO8FZQRTpqvvdVXgC2ao5GzwuUXEnA7y nuVD1rtEX9jf9ypub/CSWfEkDK5qa+L9b7QyRmUVG02My1B/bZkCxcLFnsE330S2 sl3AZaV5uN5bkwbqWmXpXH4hsmpZJg2X7kfFMKJ6/4eF9u74yUaK4kLrC61Oi1ZM E3raXvvi7e1criiCiwDD6CeqC3jBHaR/sUJQgl67Ssd6/4WARQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzDBYkGgUquxpPugiotxISxti5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2U1ZGExZGMtOTBiNi0z MTQ4LTg5ZTgtMzA2ZGE3OGE2ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSbLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANXH40YKv9ZTWhlQ7ePYgWzmPrEATvUJcf9S2dq9Q0VD44butPSSmgV8 ny7S4HlSuD1T6gEmJi0k9NbXv/RFh4R8eSA5hE2002M4VcgZMJA7HkOiHoCZ9GfM V5sqmm0axLiD2ibmOXBXWZXkPHFrmnTfXvnKdPdAK21PfWwhupWsLjCYFqMLE9Ho uNVVtljnMp59d+gQJpGkZkbd2RVf7miCX4tnbl0IChpK2VqBR7U6yC4KhbrEY5CL bQ8faS+JmyPh+sDQ+OpQcLZrXot7y+bVXfpZm2h9JZ8PNVA0fgW5UKNBu8iz2vyV tjKg6lUakuLlqcGFjF5MycHOR2hrnvA= -----END CERTIFICATE-----Generated at Sat Sep 26 10:29:42 2026 by rpki-client