$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/678af622-1d34-32ad-b97d-84d097e0a1af.roa File: 678af622-1d34-32ad-b97d-84d097e0a1af.roa (raw, json) Hash identifier: vpqAM4iQW6le8NPfgytZ0Mmggny8k8XJrldrc3P6RLc= Subject key identifier: BF:DE:BC:F6:4D:CA:15:6B:58:92:97:23:D4:E5:C4:07:CF:E2:DE:CC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BBD9E3264713F115F83540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/678af622-1d34-32ad-b97d-84d097e0a1af.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 73.119.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:d9:e3:26:47:13:f1:15:f8:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=848a30b5-d53c-43e5-b091-3ee26700499e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1d:d0:d0:a3:0f:93:ac:ae:3c:f0:dd:77:10: 03:d0:e4:87:d6:02:78:0e:80:01:12:e1:7b:7d:43: 88:ac:3a:a1:bd:d3:03:5f:09:bd:c9:f8:51:22:b2: 07:b3:02:7b:b7:02:19:47:14:61:6f:21:91:d9:92: 46:f1:1e:08:75:c6:55:a0:5a:a5:9d:3e:72:32:3f: 50:27:74:4c:e5:de:d0:55:12:44:92:dd:45:bb:0f: 86:57:31:06:5d:7d:07:80:30:9d:42:ae:cd:7b:71: 1b:60:1d:b2:dc:39:4e:44:8b:b8:02:25:15:a3:bb: f7:2d:a5:1a:8e:35:8f:b8:d7:99:60:e3:fc:d0:ec: 53:80:b1:48:94:0f:a9:09:f6:10:b5:ac:c2:48:68: ad:cc:7a:a0:f7:78:06:f5:0d:5e:b6:70:87:d7:9c: 48:a9:6d:f5:0a:25:68:fb:c8:38:86:b9:2c:12:f5: 87:ac:be:41:e9:17:35:cb:dc:c6:f8:0b:4a:79:f3: 4e:46:0a:46:49:78:b8:b0:69:14:3c:5a:66:72:9c: 50:40:fb:40:2d:11:bc:13:9d:9a:54:f9:eb:5f:b9: a0:cb:bc:f8:f3:c3:57:89:19:fb:0d:3e:26:7d:d8: cf:99:e7:8e:27:58:71:ba:48:9e:2e:e1:af:33:19: e1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DE:BC:F6:4D:CA:15:6B:58:92:97:23:D4:E5:C4:07:CF:E2:DE:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/678af622-1d34-32ad-b97d-84d097e0a1af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.119.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:63:39:66:fb:5b:35:a7:43:3f:5f:7a:cb:d9:15:1e:23:f3: 07:72:c2:34:45:27:d9:8b:7f:e6:7e:5c:5b:2b:3d:ca:af:29: 73:e7:52:95:05:39:3d:46:e6:c8:dc:e8:d7:39:ba:03:97:99: 1c:df:54:93:bf:ac:6a:8e:7e:c2:ef:42:72:26:0f:f1:b1:5a: 50:c6:63:af:78:7e:e5:b8:12:1d:96:97:a4:cb:11:a2:26:f5: fa:49:0f:c6:07:d3:58:a7:3e:d1:df:cb:f0:d2:5a:03:fe:f1: c6:52:39:d7:cf:03:30:16:41:f6:32:ca:94:75:9b:58:63:c9: 20:a8:fe:26:a2:58:fd:3b:14:15:a0:58:f4:65:e5:03:46:64: 15:04:b6:c0:94:f8:a9:e5:9b:5e:36:48:75:c1:ec:c7:20:54: 26:e1:03:8e:f0:d7:96:46:b2:4e:fb:a9:f3:9e:62:bd:4f:b2: 8d:28:42:dc:00:7d:78:4d:20:94:26:e6:e7:3c:b0:95:0c:d4: 80:94:02:d4:cd:d3:d3:c6:22:e6:8a:7e:0c:2b:da:8c:b8:80: 2c:eb:68:3c:a4:f8:5d:19:66:62:60:2d:5a:9d:e9:fe:d3:35: b0:4b:07:25:72:fd:ac:5d:f9:d7:c6:28:4b:9f:eb:88:70:4a: c3:c9:87:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu9njJkcT8RX4NUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODQ4YTMwYjUtZDUzYy00M2U1LWIwOTEtM2VlMjY3MDA0OTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix3Q0KMPk6yuPPDddxAD0OSH1gJ4DoABEuF7 fUOIrDqhvdMDXwm9yfhRIrIHswJ7twIZRxRhbyGR2ZJG8R4IdcZVoFqlnT5yMj9Q J3RM5d7QVRJEkt1Fuw+GVzEGXX0HgDCdQq7Ne3EbYB2y3DlORIu4AiUVo7v3LaUa jjWPuNeZYOP80OxTgLFIlA+pCfYQtazCSGitzHqg93gG9Q1etnCH15xIqW31CiVo +8g4hrksEvWHrL5B6Rc1y9zG+AtKefNORgpGSXi4sGkUPFpmcpxQQPtALRG8E52a VPnrX7mgy7z488NXiRn7DT4mfdjPmeeOJ1hxukieLuGvMxnhawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/evPZNyhVrWJKXI9TlxAfP4t7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjc4YWY2MjItMWQzNC0z MmFkLWI5N2QtODRkMDk3ZTBhMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtjOWb7WzWnQz9fesvZFR4j8wdywjRFJ9mLf+Z+XFsrPcqvKXPnUpUF OT1G5sjc6Nc5ugOXmRzfVJO/rGqOfsLvQnImD/GxWlDGY694fuW4Eh2Wl6TLEaIm 9fpJD8YH01inPtHfy/DSWgP+8cZSOdfPAzAWQfYyypR1m1hjySCo/iaiWP07FBWg WPRl5QNGZBUEtsCU+Knlm142SHXB7McgVCbhA47w15ZGsk77qfOeYr1Pso0oQtwA fXhNIJQm5uc8sJUM1ICUAtTN09PGIuaKfgwr2oy4gCzraDyk+F0ZZmJgLVqd6f7T NbBLByVy/axd+dfGKEuf64hwSsPJh2s= -----END CERTIFICATE-----Generated at Fri Apr 17 19:39:15 2026 by rpki-client