$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb54beb-acde-378d-bf39-471babc32941.roa File: 4fb54beb-acde-378d-bf39-471babc32941.roa (raw, json) Hash identifier: kmGwvJimNRB5spT9nJ7Knb7TzLRdJBV/FV2J/te8PKc= Subject key identifier: FE:4A:38:9D:D2:3D:A0:A0:F3:78:C4:60:29:AA:64:B2:A9:4B:83:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB55D52A6C82E00E0A41A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb54beb-acde-378d-bf39-471babc32941.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 73.232.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:55:d5:2a:6c:82:e0:0e:0a:41:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=2b5ed585-6295-4dd5-96c4-8a6ab3547921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:88:ad:9a:c7:89:bd:5d:83:4c:0a:9e:48:4b: dd:3b:9b:76:07:85:f3:40:5d:60:95:6b:e2:2a:df: 80:48:0c:55:61:8a:43:b0:ed:6f:fc:82:34:0b:7f: 20:9c:cc:7a:de:b8:29:f6:17:c9:53:e1:34:1b:0f: 03:1d:33:69:5d:5f:c8:07:b6:01:ff:48:74:7f:ee: af:f4:3c:86:63:14:36:9f:c2:bf:b8:34:3d:96:cb: 56:49:3e:7e:fb:32:d7:7a:60:3f:b6:3b:96:ca:dd: a7:b4:df:e3:b0:b8:44:9e:95:09:bf:a2:74:a6:35: 57:65:10:db:7d:4e:f3:15:cb:2f:84:74:5b:28:ad: af:50:7e:43:89:c3:2e:70:4a:a7:82:e5:29:a9:40: 04:04:38:4c:15:40:d5:97:ec:70:c1:c8:6e:47:fc: 95:e4:95:c0:8f:f3:da:31:b9:15:82:c6:65:ae:da: bf:89:a2:0c:3b:24:da:19:1f:af:1f:83:b4:5e:61: 14:14:e9:11:9d:f8:02:e3:44:82:95:b8:6c:5f:25: 8f:7f:29:f1:85:54:54:7a:83:58:94:02:f0:87:dc: 79:4b:cd:99:3f:2c:d9:ba:93:8a:7a:21:ed:56:52: 86:20:36:81:77:15:64:e6:f3:69:cc:82:08:1f:4a: 15:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4A:38:9D:D2:3D:A0:A0:F3:78:C4:60:29:AA:64:B2:A9:4B:83:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb54beb-acde-378d-bf39-471babc32941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.232.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:70:a0:5b:59:40:03:27:4d:1f:70:12:ba:82:01:4a:0d:5d: b1:ce:15:61:7a:b5:bb:02:c5:26:02:c0:49:10:25:a8:ec:2e: af:0e:78:44:2d:34:37:3d:fc:25:d8:16:cc:8f:35:ff:dd:8e: da:ed:bd:ac:01:16:9a:26:44:8b:2b:dc:18:26:f6:55:0f:92: ac:2b:e0:c9:c1:2c:8d:10:58:6a:dc:36:c2:34:73:75:bd:95: e0:7c:8f:6e:33:08:e5:60:ea:a0:ba:b5:84:25:f6:db:b6:c4: d6:dd:7f:2f:5d:e3:31:57:4c:b6:c6:d2:f6:a2:02:10:bc:3e: fa:3a:16:73:df:f9:87:f7:cc:97:81:5d:7b:e7:d6:c5:c0:e2: 1e:5d:50:77:4b:a0:44:fb:55:8f:37:1d:7f:69:f3:67:5c:79: a3:30:23:f8:a8:78:24:5e:a5:44:de:a5:4a:6f:c9:07:2b:db: 52:ee:01:66:58:65:7b:f6:b3:19:18:8f:5f:8b:6f:cd:03:ee: 0d:f5:ba:ef:f6:b1:65:a9:ab:78:71:b9:26:ab:ca:24:a8:c0: 3e:2f:87:84:3e:92:cc:ce:21:f8:4d:ee:b1:bc:dc:e4:af:c2: 27:b8:66:ed:f9:bc:72:82:d7:32:2e:93:6b:71:46:95:ed:fb: 6f:93:cf:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu1XVKmyC4A4KQaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MmI1ZWQ1ODUtNjI5NS00ZGQ1LTk2YzQtOGE2YWIzNTQ3OTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoitmseJvV2DTAqeSEvdO5t2B4XzQF1glWvi Kt+ASAxVYYpDsO1v/II0C38gnMx63rgp9hfJU+E0Gw8DHTNpXV/IB7YB/0h0f+6v 9DyGYxQ2n8K/uDQ9lstWST5++zLXemA/tjuWyt2ntN/jsLhEnpUJv6J0pjVXZRDb fU7zFcsvhHRbKK2vUH5DicMucEqnguUpqUAEBDhMFUDVl+xwwchuR/yV5JXAj/Pa MbkVgsZlrtq/iaIMOyTaGR+vH4O0XmEUFOkRnfgC40SClbhsXyWPfynxhVRUeoNY lALwh9x5S82ZPyzZupOKeiHtVlKGIDaBdxVk5vNpzIIIH0oV+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5KOJ3SPaCg83jEYCmqZLKpS4OHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGZiNTRiZWItYWNkZS0z NzhkLWJmMzktNDcxYmFiYzMyOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSehYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpwoFtZQAMnTR9wErqCAUoNXbHOFWF6tbsCxSYCwEkQJajsLq8OeEQt NDc9/CXYFsyPNf/djtrtvawBFpomRIsr3Bgm9lUPkqwr4MnBLI0QWGrcNsI0c3W9 leB8j24zCOVg6qC6tYQl9tu2xNbdfy9d4zFXTLbG0vaiAhC8Pvo6FnPf+Yf3zJeB XXvn1sXA4h5dUHdLoET7VY83HX9p82dceaMwI/ioeCRepUTepUpvyQcr21LuAWZY ZXv2sxkYj1+Lb80D7g31uu/2sWWpq3hxuSaryiSowD4vh4Q+kszOIfhN7rG83OSv wie4Zu35vHKC1zIuk2txRpXt+2+Tz3c= -----END CERTIFICATE-----Generated at Fri Apr 17 10:50:41 2026 by rpki-client