$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628dd431-322c-39f6-bb57-cb68a9ab5aa1.roa File: 628dd431-322c-39f6-bb57-cb68a9ab5aa1.roa (raw, json) Hash identifier: 9DtbzRINJ7H0nLlQRbDcUdv9B7hMv3ig/NYtEqgmf38= Subject key identifier: E2:A7:F7:98:95:86:67:72:DB:0C:A8:37:87:E7:67:8F:8F:6B:9B:EB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8100A2A03F719126CD2AE750 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628dd431-322c-39f6-bb57-cb68a9ab5aa1.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 33659 IP address blocks: 73.248.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:a2:a0:3f:71:91:26:cd:2a:e7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=0c4c1c2b-f5a8-478b-b6af-78b0fb6fbf30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:96:9e:ff:ea:16:d9:4d:c5:ff:c4:6c:63:c8: 72:13:60:cc:00:f8:51:fa:64:60:c1:8c:51:f2:59: 39:cf:46:dd:88:c9:f1:98:c7:27:ed:cb:87:8f:ed: b6:b3:64:23:be:fe:71:73:34:b1:4c:d4:25:45:fc: ed:fd:c2:46:05:2a:8a:ca:0d:2c:41:4b:ca:b7:67: fd:39:28:4b:89:ba:d7:bf:55:f2:1d:84:c0:a6:42: 60:71:dd:f2:c0:f3:3f:bb:47:b8:1d:e2:7c:3e:ed: 21:76:a1:20:9d:23:b1:fb:de:ba:2e:b7:41:ba:6d: 1b:e2:30:ff:4b:0b:f8:73:5c:81:05:39:38:8c:8f: 23:ad:f4:7e:64:49:2d:35:eb:2b:09:ef:31:dc:45: d6:cf:fc:f5:bb:77:e5:9a:9c:a0:27:b7:08:2b:7f: f5:b3:69:34:75:70:02:55:f4:6e:f3:d3:b4:93:06: 4a:8a:7a:45:4c:04:9d:e7:af:46:04:58:06:a3:24: 04:0f:57:03:19:30:bd:5f:74:d2:78:f0:50:cc:80: 05:9a:83:7c:d3:87:12:4b:af:c2:46:dc:d3:16:2c: 25:09:c7:df:2c:b1:e6:2e:45:ac:12:72:6f:05:08: 5f:b2:5d:d1:bd:60:35:5a:f2:54:b2:b1:00:fb:f4: 6b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A7:F7:98:95:86:67:72:DB:0C:A8:37:87:E7:67:8F:8F:6B:9B:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628dd431-322c-39f6-bb57-cb68a9ab5aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:57:e8:b7:eb:b0:8d:88:52:a6:aa:fd:d3:fc:de:a5:a9:47: 83:e6:84:02:08:e1:85:de:dd:05:75:4e:d7:1f:4a:cc:e6:20: d2:a7:d7:6c:99:be:9d:63:9d:c6:f1:6f:a9:64:c7:e6:3f:28: 1e:94:19:c5:bf:f0:49:b8:99:eb:9d:8c:27:5b:bb:f4:97:60: d7:19:bc:f5:78:19:ce:51:1c:8f:5c:f7:13:4b:50:f1:74:14: 54:51:a1:1c:3e:5f:93:c2:db:59:20:45:5b:29:c6:47:99:a1: ec:4a:3a:13:67:c5:de:53:bb:12:f2:42:ba:58:b7:6d:b9:70: 23:02:70:8f:bd:4d:7f:d2:38:26:ef:0b:3f:4a:db:e0:23:58: 8f:67:8d:22:17:b8:b5:04:29:7d:84:69:6d:39:fd:1d:0f:55: 3b:80:9a:37:e8:f8:eb:2a:d8:f7:da:14:65:c3:34:4a:25:7a: 9f:ff:7e:8b:8c:2f:39:b2:f6:ce:be:15:f9:52:d9:2c:df:73: dc:fe:dd:cd:68:4d:44:d0:41:22:d1:83:e8:c2:7a:b9:d7:59: 65:09:13:11:82:f7:2a:b3:4c:14:79:77:63:86:cd:df:ce:29: da:67:97:e1:f7:18:03:10:f9:60:f6:ec:bb:61:2b:57:33:0a: 51:fa:a5:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAKKgP3GRJs0q51AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk MGM0YzFjMmItZjVhOC00NzhiLWI2YWYtNzhiMGZiNmZiZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJae/+oW2U3F/8RsY8hyE2DMAPhR+mRgwYxR 8lk5z0bdiMnxmMcn7cuHj+22s2Qjvv5xczSxTNQlRfzt/cJGBSqKyg0sQUvKt2f9 OShLibrXv1XyHYTApkJgcd3ywPM/u0e4HeJ8Pu0hdqEgnSOx+966LrdBum0b4jD/ Swv4c1yBBTk4jI8jrfR+ZEktNesrCe8x3EXWz/z1u3flmpygJ7cIK3/1s2k0dXAC VfRu89O0kwZKinpFTASd569GBFgGoyQED1cDGTC9X3TSePBQzIAFmoN804cSS6/C RtzTFiwlCcffLLHmLkWsEnJvBQhfsl3RvWA1WvJUsrEA+/RrnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKn95iVhmdy2wyoN4fnZ4+Pa5vrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjI4ZGQ0MzEtMzIyYy0z OWY2LWJiNTctY2I2OGE5YWI1YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdX6LfrsI2IUqaq/dP83qWpR4PmhAII4YXe3QV1TtcfSszmINKn12yZ vp1jncbxb6lkx+Y/KB6UGcW/8Em4meudjCdbu/SXYNcZvPV4Gc5RHI9c9xNLUPF0 FFRRoRw+X5PC21kgRVspxkeZoexKOhNnxd5TuxLyQrpYt225cCMCcI+9TX/SOCbv Cz9K2+AjWI9njSIXuLUEKX2EaW05/R0PVTuAmjfo+Osq2PfaFGXDNEolep//fouM Lzmy9s6+FflS2Szfc9z+3c1oTUTQQSLRg+jCernXWWUJExGC9yqzTBR5d2OGzd/O Kdpnl+H3GAMQ+WD27LthK1czClH6pZ8= -----END CERTIFICATE-----Generated at Fri Apr 17 03:57:09 2026 by rpki-client