$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9f3b785-792e-3cab-9185-b2f47e170e5e.roa File: d9f3b785-792e-3cab-9185-b2f47e170e5e.roa (raw, json) Hash identifier: YT/xM7fKxtNvv1VUndOHdYqw8dxfyoizE9XEWlXCBE4= Subject key identifier: 3D:79:E7:89:AA:C2:EF:A0:41:1A:33:9F:81:55:D5:1A:46:F7:E8:CE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED86416F111E4F2A57AF3F440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9f3b785-792e-3cab-9185-b2f47e170e5e.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33662 IP address blocks: 73.206.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:16:f1:11:e4:f2:a5:7a:f3:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=4d57a03c-c566-434d-ab16-f1ab8c9023f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:5f:e1:9c:26:d2:ff:18:28:4e:b5:62:24: 74:de:6a:17:f7:bc:ff:db:a3:6c:69:cc:8e:4a:54: 6e:14:8d:43:0f:33:23:97:3a:5b:4c:50:e7:31:a0: 25:68:4d:2a:70:fa:b9:97:19:4a:8b:12:3b:9d:28: 66:43:3e:fb:dd:b5:2a:1a:98:2d:e8:20:92:8c:67: e9:80:69:79:fa:64:82:b3:30:3d:69:48:e1:64:5a: 47:50:09:e7:50:e2:80:cc:88:c2:87:a3:2a:f6:85: fe:02:2a:ac:7f:e1:e4:93:6d:cc:24:b5:e9:de:a4: 26:15:0d:36:fc:60:c6:42:28:82:a2:e7:69:3c:5e: 18:26:24:18:d4:6f:55:7b:8e:c6:2c:17:26:61:32: 16:f2:0b:df:5f:69:f2:91:02:4e:2a:73:b1:63:7c: e3:6c:58:6d:6e:bf:dd:9b:09:d3:5b:36:1b:a5:17: 60:3e:e7:89:a3:73:48:82:d4:94:c3:7a:e3:ed:dd: e3:47:5e:c5:4a:d5:b9:4e:f5:45:3f:ae:c3:a4:78: 5c:b9:5d:ff:33:e2:3e:74:b5:d4:9b:df:2c:59:9b: 59:63:bb:59:17:df:20:09:cd:1a:16:19:d9:b3:74: 43:06:57:9e:88:03:29:2c:51:4c:ea:67:06:1b:02: 72:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:79:E7:89:AA:C2:EF:A0:41:1A:33:9F:81:55:D5:1A:46:F7:E8:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9f3b785-792e-3cab-9185-b2f47e170e5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.206.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:65:7f:28:50:d4:94:a8:1b:75:ee:45:2f:7b:41:89:2e:6f: a9:5e:b4:a1:f4:35:fd:95:12:f2:a6:53:8e:06:3e:cb:ed:d3: 60:36:32:d3:08:be:02:ff:3b:b6:7a:79:74:37:f3:c9:fc:07: a9:af:fe:c0:8c:26:29:b5:2c:8f:d1:20:01:1a:6b:fe:16:30: f1:f2:16:8b:fe:f9:6c:06:7f:ac:a4:ed:76:61:59:3c:b7:70: 8b:f7:a0:7f:fc:9a:83:18:4c:35:f3:68:ee:32:4c:89:a4:c3: f9:fe:c6:25:5b:9a:ab:52:e2:df:62:29:83:3b:9c:92:e2:fa: 2e:27:07:1b:0f:7f:23:40:50:03:90:bc:11:fb:78:9b:64:4d: 49:1d:eb:a6:3a:f7:3f:2c:28:28:04:a1:30:a0:7b:90:c7:1e: cf:69:85:d7:76:b3:00:49:60:56:d0:db:4d:8b:65:06:83:31: e0:b2:5f:f1:60:ec:34:bb:29:43:86:24:96:73:5e:16:df:b2: 79:e4:0a:e1:48:ed:64:24:cf:a4:c1:68:e9:ec:fd:1c:54:14: 34:66:10:0e:0b:65:c6:5f:9e:4b:76:fa:93:c6:a5:90:98:3c: 0a:c1:4d:9f:31:bf:db:8d:e1:0d:1c:22:cb:18:2f:a2:ba:25: ad:88:7e:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZBbxEeTypXrz9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NGQ1N2EwM2MtYzU2Ni00MzRkLWFiMTYtZjFhYjhjOTAyM2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXZf4Zwm0v8YKE61YiR03moX97z/26NsacyO SlRuFI1DDzMjlzpbTFDnMaAlaE0qcPq5lxlKixI7nShmQz773bUqGpgt6CCSjGfp gGl5+mSCszA9aUjhZFpHUAnnUOKAzIjCh6Mq9oX+Aiqsf+Hkk23MJLXp3qQmFQ02 /GDGQiiCoudpPF4YJiQY1G9Ve47GLBcmYTIW8gvfX2nykQJOKnOxY3zjbFhtbr/d mwnTWzYbpRdgPueJo3NIgtSUw3rj7d3jR17FStW5TvVFP67DpHhcuV3/M+I+dLXU m98sWZtZY7tZF98gCc0aFhnZs3RDBleeiAMpLFFM6mcGGwJyeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1554mqwu+gQRozn4FV1RpG9+jOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDlmM2I3ODUtNzkyZS0z Y2FiLTkxODUtYjJmNDdlMTcwZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSc5WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFplfyhQ1JSoG3XuRS97QYkub6letKH0Nf2VEvKmU44GPsvt02A2MtMI vgL/O7Z6eXQ388n8B6mv/sCMJim1LI/RIAEaa/4WMPHyFov++WwGf6yk7XZhWTy3 cIv3oH/8moMYTDXzaO4yTImkw/n+xiVbmqtS4t9iKYM7nJLi+i4nBxsPfyNAUAOQ vBH7eJtkTUkd66Y69z8sKCgEoTCge5DHHs9phdd2swBJYFbQ202LZQaDMeCyX/Fg 7DS7KUOGJJZzXhbfsnnkCuFI7WQkz6TBaOns/RxUFDRmEA4LZcZfnkt2+pPGpZCY PArBTZ8xv9uN4Q0cIssYL6K6Ja2IfhA= -----END CERTIFICATE-----Generated at Wed Sep 23 11:44:02 2026 by rpki-client