$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e98e58e-ea1f-3b53-a1b1-5730a1ac7c2b.roa File: 3e98e58e-ea1f-3b53-a1b1-5730a1ac7c2b.roa (raw, json) Hash identifier: jIImR2aqmI1XeJ3nd+Ff4LrcUZIyblvWiO4ilCRkDnQ= Subject key identifier: 89:C1:4E:84:BA:4E:F3:DB:DB:A4:8D:B2:CA:8C:B5:0B:DD:58:20:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC5EECA3A881DE43046940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e98e58e-ea1f-3b53-a1b1-5730a1ac7c2b.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 73.191.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:5e:ec:a3:a8:81:de:43:04:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=820a0a76-cce9-41c1-81a0-ad3d3bb03df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:cb:85:94:25:89:79:e9:d1:e9:e1:a5:7a: fb:98:98:78:75:1e:9e:d3:d3:e7:51:71:50:bf:5c: 26:98:35:ac:db:38:2d:a4:08:18:5d:c6:f4:e6:f3: b6:95:c6:47:47:8e:dd:56:21:0d:d8:9c:ee:db:c7: 59:a7:08:21:ea:c3:cd:7d:77:55:32:5a:e0:3e:ef: fe:78:1e:6d:a7:a2:d6:06:42:34:27:48:9f:5c:0e: 3d:6e:98:67:0f:7f:4f:7a:18:61:36:27:60:ce:41: a6:05:4c:36:45:ec:b5:c6:b1:ad:e3:e0:c7:78:96: aa:4b:a7:9d:c4:6b:7f:54:0f:af:f8:1f:d0:a5:b2: ff:5e:a1:c9:82:d7:39:43:f5:a5:e9:f8:4b:1d:fa: 31:ac:95:bb:dd:83:32:fc:66:ae:7d:ae:fb:a1:65: 60:c3:52:27:ae:05:46:0e:12:34:1f:20:95:d6:a8: 2d:e7:54:e6:cb:21:3a:0b:5d:dc:9c:b4:88:26:67: ea:24:3a:7b:55:ac:43:3d:d9:50:93:bf:f0:fd:74: a2:76:be:97:74:d6:5a:40:5e:ff:0a:59:b9:c8:9a: 2d:c7:77:ec:6f:71:cf:99:e2:80:9d:fd:06:86:5c: ed:39:8b:9a:2b:6b:b8:48:73:d8:4a:57:a9:60:44: 85:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C1:4E:84:BA:4E:F3:DB:DB:A4:8D:B2:CA:8C:B5:0B:DD:58:20:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e98e58e-ea1f-3b53-a1b1-5730a1ac7c2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.191.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:9a:f6:9f:9f:bb:e8:55:c6:e8:f6:5a:a7:68:7d:d2:b1:d9: ea:bf:da:f6:e7:3b:4a:60:cd:bd:d9:53:7c:2b:ad:b6:06:15: 61:27:0d:d7:a2:3e:49:4d:f6:92:c3:84:9a:ba:15:71:06:e1: 01:de:97:bf:59:f2:60:92:a8:f2:d8:f5:20:52:95:3a:b1:a6: c3:a4:7e:fa:56:2c:aa:25:75:38:26:bf:5e:8f:23:9d:98:31: 61:1a:9a:73:28:01:1f:76:2c:7c:f8:0b:ef:cf:5a:73:14:98: be:b5:3b:d5:7c:5f:67:80:05:3c:ff:d6:77:92:3a:05:bb:f5: 0f:54:eb:32:36:9f:35:4c:1d:f1:e7:cc:d8:ae:36:6f:85:bd: 35:24:26:a7:c8:24:d3:ad:4c:72:ae:ef:64:4a:b6:8d:4f:a0: bc:81:15:2b:41:4d:14:7a:4d:a9:b2:0d:75:d3:0f:ab:5f:4f: 14:1c:59:0e:b9:80:47:d3:41:42:eb:98:f0:24:90:69:45:db: 55:dc:b3:75:37:39:14:7e:ea:aa:6e:9f:4a:b9:52:54:2a:d0: b8:3b:38:d4:fa:94:4f:84:b0:5f:18:71:f4:ee:4a:af:01:3d: 99:94:69:02:63:a3:15:54:ae:7e:19:14:c9:bd:3e:7b:de:64: ec:49:0a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvF7so6iB3kMEaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODIwYTBhNzYtY2NlOS00MWMxLTgxYTAtYWQzZDNiYjAzZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyofLhZQliXnp0enhpXr7mJh4dR6e09PnUXFQ v1wmmDWs2zgtpAgYXcb05vO2lcZHR47dViEN2Jzu28dZpwgh6sPNfXdVMlrgPu/+ eB5tp6LWBkI0J0ifXA49bphnD39PehhhNidgzkGmBUw2Rey1xrGt4+DHeJaqS6ed xGt/VA+v+B/QpbL/XqHJgtc5Q/Wl6fhLHfoxrJW73YMy/Gaufa77oWVgw1InrgVG DhI0HyCV1qgt51TmyyE6C13cnLSIJmfqJDp7VaxDPdlQk7/w/XSidr6XdNZaQF7/ Clm5yJotx3fsb3HPmeKAnf0GhlztOYuaK2u4SHPYSlepYESFQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInBToS6TvPb26SNssqMtQvdWCAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U5OGU1OGUtZWExZi0z YjUzLWExYjEtNTczMGExYWM3YzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSa9p+fu+hVxuj2WqdofdKx2eq/2vbnO0pgzb3ZU3wrrbYGFWEnDdei PklN9pLDhJq6FXEG4QHel79Z8mCSqPLY9SBSlTqxpsOkfvpWLKoldTgmv16PI52Y MWEamnMoAR92LHz4C+/PWnMUmL61O9V8X2eABTz/1neSOgW79Q9U6zI2nzVMHfHn zNiuNm+FvTUkJqfIJNOtTHKu72RKto1PoLyBFStBTRR6TamyDXXTD6tfTxQcWQ65 gEfTQULrmPAkkGlF21Xcs3U3ORR+6qpun0q5UlQq0Lg7ONT6lE+EsF8YcfTuSq8B PZmUaQJjoxVUrn4ZFMm9PnveZOxJCjA= -----END CERTIFICATE-----Generated at Fri Apr 17 10:15:47 2026 by rpki-client