$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/536f2bdc-1acb-314e-bf46-7209ac2b35fc.roa File: 536f2bdc-1acb-314e-bf46-7209ac2b35fc.roa (raw, json) Hash identifier: siEdrCry07NR0hJuJ8XhnZdQ+jLUd7Y/V5pekYQsmpY= Subject key identifier: F5:B7:33:99:6D:03:9A:F9:63:DC:19:13:4E:A8:DC:B0:81:86:E2:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BAD470A9BDF289A0BC6980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/536f2bdc-1acb-314e-bf46-7209ac2b35fc.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 73.253.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:d4:70:a9:bd:f2:89:a0:bc:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=8367e790-fdd6-4f92-8ea2-e341b70db8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:bd:84:2b:fa:a6:3c:9e:a4:6f:f2:49:03: ca:10:0e:67:51:5a:ff:e3:2d:61:3d:11:61:0c:5f: b4:a1:f8:86:db:9c:50:54:e9:56:79:a3:ef:a0:5c: 42:a5:47:51:35:ae:c6:4f:31:2e:e7:0a:b9:b8:ec: 89:fb:27:0a:1e:6d:42:55:b7:44:8a:31:c4:8d:69: 43:8b:be:ae:5e:01:44:c7:97:21:f8:89:53:4e:64: 84:9d:44:53:18:56:18:f1:9a:39:21:76:85:27:8c: 85:96:a5:8d:c3:47:2e:45:28:ea:ab:94:76:07:95: b1:97:0a:c4:f3:43:ea:20:66:c4:14:4c:bf:c1:90: a8:e3:24:65:2f:da:82:8f:56:8b:15:a1:d4:34:0f: b4:5b:8b:8a:81:95:05:c8:ee:11:65:a7:3d:ea:99: 52:18:d4:51:89:0e:ad:d5:79:52:82:80:1d:8a:60: b1:40:e4:ae:3a:a1:97:85:3f:33:6b:8b:b5:43:56: 77:9a:11:19:48:d2:a9:ed:f0:dd:3f:9a:53:79:73: c6:a1:bd:e1:49:c4:11:7e:95:fe:a4:ad:c0:0c:b0: 10:6e:88:cf:f1:d8:13:23:34:ba:cf:41:42:dd:6e: c4:d5:c5:17:d9:e1:d3:0c:b5:00:31:36:df:b4:ed: 6c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B7:33:99:6D:03:9A:F9:63:DC:19:13:4E:A8:DC:B0:81:86:E2:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/536f2bdc-1acb-314e-bf46-7209ac2b35fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.253.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:86:c4:12:46:bb:97:31:8f:df:e7:32:8f:3f:2f:0d:c7:21: 97:46:e6:f0:a8:4f:79:3d:d0:07:85:14:cb:ef:1d:b9:ea:a2: f9:86:13:70:49:c0:f9:52:be:0a:78:9b:fe:7b:8f:c6:86:7b: db:65:7b:de:bd:38:c7:90:06:bf:75:41:36:6a:eb:30:0c:df: 6a:77:4b:85:23:6a:c1:88:75:f2:43:43:b8:80:92:9e:73:1f: dc:53:6f:21:e3:8b:eb:4c:8b:08:05:ca:b4:72:08:0d:bf:8b: bb:cb:f9:46:29:4e:b6:4f:89:57:e3:89:73:bf:95:91:c5:8b: dd:d1:ad:b0:19:c3:04:04:05:be:de:f3:f0:c2:d1:60:55:0c: 2a:df:05:d1:80:b8:92:9f:ab:ea:f5:d6:c8:93:5a:ca:b1:16: f2:9d:8e:43:e3:e7:c8:09:ce:ac:23:45:a4:d4:00:92:03:37: 06:8b:cf:4e:d6:ab:9e:c3:6b:b9:75:fa:78:70:39:49:9b:99: d9:75:e8:ca:54:a9:52:a6:2e:b5:9c:00:2b:3a:fc:31:9f:3a: 58:bf:74:7c:1b:d0:cd:20:21:04:28:23:46:dd:04:33:04:40: 37:06:54:b8:b9:01:4f:1d:d1:ca:ff:37:26:a8:08:b6:ca:5c: 46:45:24:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VutRwqb3yiaC8aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODM2N2U3OTAtZmRkNi00ZjkyLThlYTItZTM0MWI3MGRiOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1q9hCv6pjyepG/ySQPKEA5nUVr/4y1hPRFh DF+0ofiG25xQVOlWeaPvoFxCpUdRNa7GTzEu5wq5uOyJ+ycKHm1CVbdEijHEjWlD i76uXgFEx5ch+IlTTmSEnURTGFYY8Zo5IXaFJ4yFlqWNw0cuRSjqq5R2B5WxlwrE 80PqIGbEFEy/wZCo4yRlL9qCj1aLFaHUNA+0W4uKgZUFyO4RZac96plSGNRRiQ6t 1XlSgoAdimCxQOSuOqGXhT8za4u1Q1Z3mhEZSNKp7fDdP5pTeXPGob3hScQRfpX+ pK3ADLAQbojP8dgTIzS6z0FC3W7E1cUX2eHTDLUAMTbftO1slwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPW3M5ltA5r5Y9wZE06o3LCBhuK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTM2ZjJiZGMtMWFjYi0z MTRlLWJmNDYtNzIwOWFjMmIzNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASf2rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKGxBJGu5cxj9/nMo8/Lw3HIZdG5vCoT3k90AeFFMvvHbnqovmGE3BJ wPlSvgp4m/57j8aGe9tle969OMeQBr91QTZq6zAM32p3S4UjasGIdfJDQ7iAkp5z H9xTbyHji+tMiwgFyrRyCA2/i7vL+UYpTrZPiVfjiXO/lZHFi93RrbAZwwQEBb7e 8/DC0WBVDCrfBdGAuJKfq+r11siTWsqxFvKdjkPj58gJzqwjRaTUAJIDNwaLz07W q57Da7l1+nhwOUmbmdl16MpUqVKmLrWcACs6/DGfOli/dHwb0M0gIQQoI0bdBDME QDcGVLi5AU8d0cr/NyaoCLbKXEZFJGk= -----END CERTIFICATE-----Generated at Fri Apr 17 10:04:19 2026 by rpki-client