$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b3cff43-140a-39e6-b4db-24ff1bf0c829.roa File: 7b3cff43-140a-39e6-b4db-24ff1bf0c829.roa (raw, json) Hash identifier: QkrpsrgqLV/szI2oJgCZJ2asOQSJikpsWM4OvVGyYCw= Subject key identifier: 2D:11:9C:27:F2:00:6D:D9:08:20:FE:22:F2:87:67:32:69:DB:26:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BBABFF3FA4BF2F7014F1ED Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b3cff43-140a-39e6-b4db-24ff1bf0c829.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 73.96.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:ab:ff:3f:a4:bf:2f:70:14:f1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=0a5201c4-77b7-4f0e-bec9-0b8965687d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:20:17:87:2a:8d:7c:a9:14:7c:87:7f:6c:30: 74:1f:e9:4f:18:b0:ae:6f:23:21:5f:c8:5f:68:be: 5e:0d:bf:0f:8d:65:e2:fd:f0:79:21:5c:18:87:b0: 84:2d:25:59:0d:2b:e5:9e:51:11:00:4c:bb:fe:d2: 74:33:e9:c8:53:59:14:f2:84:7e:3a:6f:dd:a2:23: 1f:5a:bf:01:6a:3e:20:be:a6:78:ac:d5:bd:dc:33: 8a:94:3e:79:77:05:0f:79:1c:b0:c4:d2:60:dc:11: ee:50:15:e6:dc:76:f1:16:a5:b1:44:73:29:ef:a3: 33:56:e3:a7:77:30:40:ce:33:a3:1d:59:61:e1:58: 81:43:61:be:c4:c3:90:ca:1e:06:65:72:31:76:99: c7:76:cf:81:d2:7c:b5:20:db:1e:4d:4a:d8:75:79: 66:17:22:90:71:61:21:2e:a0:5f:48:3d:6d:6c:83: 43:3e:b0:f4:f7:af:2e:8f:ef:01:31:6e:44:01:15: 41:cd:34:02:16:25:05:9e:0e:90:20:42:b0:c8:78: 32:f7:9f:18:0e:fe:44:d7:c7:81:26:ca:f9:92:64: 25:5a:15:ca:0b:48:25:11:4c:32:44:ad:7b:0f:17: 1f:bd:d6:b0:57:07:26:d1:6a:5d:e5:be:73:2b:23: 4e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:11:9C:27:F2:00:6D:D9:08:20:FE:22:F2:87:67:32:69:DB:26:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b3cff43-140a-39e6-b4db-24ff1bf0c829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.96.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:af:8c:2d:4c:f2:ad:b8:7c:30:12:bd:0b:a6:31:82:6d:ed: c5:5b:9d:85:7a:21:80:64:e8:d1:92:b9:a4:f0:1d:93:d7:10: 10:da:d5:e3:b2:d3:93:75:a7:69:6b:33:55:db:dd:83:68:b0: 73:08:e2:0d:00:33:93:6e:c2:b8:26:06:37:ce:5a:3d:13:9d: 07:70:38:68:73:f8:0b:de:cd:3c:6d:fc:b5:31:69:c7:57:b0: e1:30:b5:92:3a:67:c4:66:b8:24:8b:11:eb:12:da:57:60:74: 19:d8:b3:48:14:13:cb:82:1b:97:49:ab:f3:55:86:03:22:92: 6b:81:68:d0:1f:75:8a:4b:42:1a:00:7b:93:f0:fc:bc:a8:2f: 98:10:ec:e7:5a:61:34:69:9c:22:57:62:50:ce:ec:41:65:68: 09:d1:21:2f:b2:11:5f:6f:de:fc:2e:14:72:51:df:ba:e5:a6: 4b:1b:f2:7b:90:a2:39:3b:e7:ee:23:92:0e:33:88:ca:2f:5c: a3:4c:f7:a1:64:11:03:d2:bb:2f:ec:97:f5:5b:79:3f:7c:77: 21:b4:bd:f2:0a:f5:01:42:79:13:9f:17:83:a7:c3:6f:ac:fb: 26:f7:b0:fb:b9:91:99:7b:bb:04:91:b4:a4:80:f9:db:52:72: b7:ab:46:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu6v/P6S/L3AU8e0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MGE1MjAxYzQtNzdiNy00ZjBlLWJlYzktMGI4OTY1Njg3ZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSAXhyqNfKkUfId/bDB0H+lPGLCubyMhX8hf aL5eDb8PjWXi/fB5IVwYh7CELSVZDSvlnlERAEy7/tJ0M+nIU1kU8oR+Om/doiMf Wr8Baj4gvqZ4rNW93DOKlD55dwUPeRywxNJg3BHuUBXm3HbxFqWxRHMp76MzVuOn dzBAzjOjHVlh4ViBQ2G+xMOQyh4GZXIxdpnHds+B0ny1INseTUrYdXlmFyKQcWEh LqBfSD1tbINDPrD0968uj+8BMW5EARVBzTQCFiUFng6QIEKwyHgy958YDv5E18eB Jsr5kmQlWhXKC0glEUwyRK17DxcfvdawVwcm0Wpd5b5zKyNOJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0RnCfyAG3ZCCD+IvKHZzJp2yZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2IzY2ZmNDMtMTQwYS0z OWU2LWI0ZGItMjRmZjFiZjBjODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSWBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM6vjC1M8q24fDASvQumMYJt7cVbnYV6IYBk6NGSuaTwHZPXEBDa1eOy 05N1p2lrM1Xb3YNosHMI4g0AM5NuwrgmBjfOWj0TnQdwOGhz+AvezTxt/LUxacdX sOEwtZI6Z8RmuCSLEesS2ldgdBnYs0gUE8uCG5dJq/NVhgMikmuBaNAfdYpLQhoA e5Pw/LyoL5gQ7OdaYTRpnCJXYlDO7EFlaAnRIS+yEV9v3vwuFHJR37rlpksb8nuQ ojk75+4jkg4ziMovXKNM96FkEQPSuy/sl/VbeT98dyG0vfIK9QFCeROfF4Onw2+s +yb3sPu5kZl7uwSRtKSA+dtScrerRgc= -----END CERTIFICATE-----Generated at Fri Apr 17 05:06:04 2026 by rpki-client