$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/874514e9-54a4-39a4-9b78-ec6921b75ee4.roa File: 874514e9-54a4-39a4-9b78-ec6921b75ee4.roa (raw, json) Hash identifier: nKzSHjKOszSx8a4H14aoiKgvnGmDD2bFc+ykXzz06ro= Subject key identifier: 25:88:80:B4:32:F0:67:35:C8:5D:6B:38:61:E8:98:81:C3:17:C6:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC027E7D807A96A1BA6200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/874514e9-54a4-39a4-9b78-ec6921b75ee4.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 73.238.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:02:7e:7d:80:7a:96:a1:ba:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=6b9cc61e-ed36-46a4-9550-2aafcca34e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6b:c2:24:eb:05:97:19:b2:14:29:8d:39:6c: 19:cb:00:20:65:18:89:23:2d:e7:da:a4:6e:0d:90: 54:fe:f9:c1:80:c6:01:eb:b7:1b:e6:b0:40:21:e3: 9c:c1:ff:8e:71:98:3e:54:52:5c:be:3d:ab:2b:05: e1:ac:3c:53:dd:01:be:08:a4:9b:71:6a:2f:24:54: 1b:76:15:7c:22:81:fb:43:68:61:a4:f1:4d:84:d7: e8:db:d4:d4:a1:17:fc:24:0d:50:6a:1a:70:91:e1: 9c:1d:d2:4b:6e:be:00:87:41:a1:e6:80:b8:ad:5b: 7f:e9:54:44:82:45:f3:15:18:a4:f0:49:cf:28:c8: 3a:6a:c4:ba:79:ca:ea:80:00:27:df:90:e1:09:a7: c4:97:0b:f0:c8:db:89:89:81:21:93:97:0e:be:1f: c1:1e:a2:19:fb:1a:9b:49:fa:c7:6d:d0:66:90:96: b8:fc:bf:02:a1:b6:ad:46:4d:68:bf:e3:52:fb:79: 8a:d5:4f:a0:35:1a:ae:56:ab:62:1f:c4:9f:d8:1c: d8:ad:67:2b:2a:85:de:d6:db:de:89:5e:47:2d:3c: c0:70:23:2d:b7:72:f5:97:77:5f:23:86:96:59:bb: 34:01:b8:32:8c:e4:62:2e:18:20:f0:39:19:17:09: b3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:88:80:B4:32:F0:67:35:C8:5D:6B:38:61:E8:98:81:C3:17:C6:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/874514e9-54a4-39a4-9b78-ec6921b75ee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.238.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b3:aa:14:e0:bc:38:67:aa:72:f1:6c:a4:c7:80:91:71:e9: cf:48:0b:0d:d8:88:af:09:8c:67:23:5a:13:a4:65:84:5b:a7: 3b:f6:3f:00:43:c7:91:35:48:35:97:c4:68:31:fc:55:24:72: ca:ed:eb:85:98:3f:06:a5:66:fa:dd:7b:9a:bc:90:2f:01:8d: 22:a9:a9:f7:53:28:56:a7:8e:da:7a:57:ae:eb:f9:4b:7a:24: bf:d7:0f:70:ed:5d:c3:7d:95:5c:8d:d6:18:0c:61:4f:d6:7c: a2:0c:ff:34:3e:42:52:ab:99:60:43:09:4c:19:2a:63:6e:d8: 66:51:8b:e5:01:27:25:99:dc:7f:e4:99:a5:55:d8:27:83:52: ae:41:d2:6d:69:b5:cd:28:23:c3:d7:ce:15:9b:b9:d6:7b:e6: 42:38:ff:e0:42:48:13:0b:81:9b:52:87:a9:0f:c4:56:4a:56: 31:47:cb:ca:72:16:f1:08:65:47:a6:0f:cb:32:04:e9:e2:5c: 30:ab:b5:4e:23:48:28:65:09:b4:af:cc:48:5c:1e:f8:f4:e9: 8a:a8:6c:03:8a:94:10:db:03:6c:78:d1:c9:2d:13:24:b1:7f: ef:e1:f3:1f:ee:9c:fd:88:40:1e:76:83:02:36:6b:b4:7c:c4: 2a:b2:fe:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvAJ+fYB6lqG6YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NmI5Y2M2MWUtZWQzNi00NmE0LTk1NTAtMmFhZmNjYTM0ZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGvCJOsFlxmyFCmNOWwZywAgZRiJIy3n2qRu DZBU/vnBgMYB67cb5rBAIeOcwf+OcZg+VFJcvj2rKwXhrDxT3QG+CKSbcWovJFQb dhV8IoH7Q2hhpPFNhNfo29TUoRf8JA1QahpwkeGcHdJLbr4Ah0Gh5oC4rVt/6VRE gkXzFRik8EnPKMg6asS6ecrqgAAn35DhCafElwvwyNuJiYEhk5cOvh/BHqIZ+xqb SfrHbdBmkJa4/L8CobatRk1ov+NS+3mK1U+gNRquVqtiH8Sf2BzYrWcrKoXe1tve iV5HLTzAcCMtt3L1l3dfI4aWWbs0AbgyjORiLhgg8DkZFwmzgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWIgLQy8Gc1yF1rOGHomIHDF8ZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODc0NTE0ZTktNTRhNC0z OWE0LTliNzgtZWM2OTIxYjc1ZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSe7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSzqhTgvDhnqnLxbKTHgJFx6c9ICw3YiK8JjGcjWhOkZYRbpzv2PwBD x5E1SDWXxGgx/FUkcsrt64WYPwalZvrde5q8kC8BjSKpqfdTKFanjtp6V67r+Ut6 JL/XD3DtXcN9lVyN1hgMYU/WfKIM/zQ+QlKrmWBDCUwZKmNu2GZRi+UBJyWZ3H/k maVV2CeDUq5B0m1ptc0oI8PXzhWbudZ75kI4/+BCSBMLgZtSh6kPxFZKVjFHy8py FvEIZUemD8syBOniXDCrtU4jSChlCbSvzEhcHvj06YqobAOKlBDbA2x40cktEySx f+/h8x/unP2IQB52gwI2a7R8xCqy/nM= -----END CERTIFICATE-----Generated at Fri Apr 17 14:37:52 2026 by rpki-client