$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd20f60-d4f6-3d14-9be5-2879842f081a.roa File: 8dd20f60-d4f6-3d14-9be5-2879842f081a.roa (raw, json) Hash identifier: sTV4GY2e8i0NmxEv3s7eqh6hRkMoeOeopISksxGU1dU= Subject key identifier: A9:8C:65:A3:73:FC:19:2F:A1:C3:8A:80:3F:B9:9F:9B:7C:56:9D:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC7FE7D90B693BE8EDD0DC Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd20f60-d4f6-3d14-9be5-2879842f081a.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 73.232.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:7f:e7:d9:0b:69:3b:e8:ed:d0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=1874477f-ec38-4ed5-9e86-d0b490d202a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:aa:eb:4d:9a:f1:22:09:c9:39:42:ed:35:03: e6:b9:1f:85:db:6c:00:5a:bb:b5:c6:16:73:23:08: 82:11:1a:d1:e4:76:66:56:f8:f6:7a:c7:46:fc:78: 98:ef:02:18:a0:a3:66:f9:99:bc:29:93:d9:d5:a5: d2:31:59:38:0c:b8:96:4d:72:ca:26:2a:9c:e0:34: 2e:7e:6c:87:3c:0d:a2:e0:45:12:8c:56:6e:d0:72: c7:99:87:61:ac:f9:48:f7:e6:2f:4b:42:ce:cb:14: c3:62:87:8f:73:a5:13:d0:8c:a9:26:90:be:9a:09: ce:5f:0b:6e:58:33:8e:2c:03:e0:ad:f1:91:56:51: 4e:a2:5c:71:5d:61:c8:40:40:2e:50:63:78:87:60: 82:f2:e7:d2:9f:8c:b1:81:44:02:b1:90:18:a4:c9: fc:d5:0b:95:d6:19:06:26:1a:9f:f4:6b:64:96:fb: e8:75:c2:18:8e:fd:e6:e8:cc:a7:32:c7:c2:bb:8a: 69:6c:1b:85:9d:41:b3:bb:9f:92:56:f9:bf:33:38: 9e:09:73:14:67:23:57:cb:12:30:20:af:31:6d:a5: 01:d9:a9:24:44:c6:1b:cd:95:aa:4c:74:34:41:6e: 03:1f:d4:b5:d3:48:3c:d0:ae:9b:06:33:4f:b4:62: 90:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8C:65:A3:73:FC:19:2F:A1:C3:8A:80:3F:B9:9F:9B:7C:56:9D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd20f60-d4f6-3d14-9be5-2879842f081a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.232.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b8:76:e5:a7:d7:39:18:0f:b0:7a:a3:7f:d7:71:e8:35:0b: 85:86:59:64:52:85:36:ab:a3:83:1b:23:22:22:0c:56:48:d6: 3a:4a:62:df:9d:ce:fa:96:d4:e7:5f:7f:6d:a6:e1:e6:55:a4: b9:00:90:4d:38:5d:bc:20:f3:5d:9b:a3:df:28:f9:a7:93:c4: 4d:0c:81:01:97:df:70:86:23:9c:7c:f3:0c:0f:a9:d6:47:25: 5d:e4:e4:2e:6a:4f:fb:51:34:92:0b:58:54:4a:de:a1:8a:7e: d9:4c:fe:d4:98:0e:25:83:9d:93:45:91:d0:d3:10:4c:1f:16: c1:fa:dd:18:11:95:7a:00:ed:8e:21:c5:e1:e9:e1:fe:1a:80: 94:26:24:89:ef:f0:3a:22:86:fb:95:cc:d5:ea:c1:b3:06:11: ce:95:54:c7:23:fc:fd:5f:7c:1a:9a:fa:42:ba:e5:14:73:58: 75:c8:86:42:25:10:77:87:9d:29:01:cf:be:ab:86:bf:0d:fc: 17:97:ba:17:57:6b:ff:f3:70:bb:59:15:30:f4:10:58:3b:1b: d2:00:0c:c9:35:f6:50:eb:37:46:d0:0b:4c:11:59:5a:f3:3e: 80:8f:62:0f:7e:37:09:78:08:26:13:75:d2:77:db:b3:63:4a: 55:28:da:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvH/n2QtpO+jt0NwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MTg3NDQ3N2YtZWMzOC00ZWQ1LTllODYtZDBiNDkwZDIwMmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6rrTZrxIgnJOULtNQPmuR+F22wAWru1xhZz IwiCERrR5HZmVvj2esdG/HiY7wIYoKNm+Zm8KZPZ1aXSMVk4DLiWTXLKJiqc4DQu fmyHPA2i4EUSjFZu0HLHmYdhrPlI9+YvS0LOyxTDYoePc6UT0IypJpC+mgnOXwtu WDOOLAPgrfGRVlFOolxxXWHIQEAuUGN4h2CC8ufSn4yxgUQCsZAYpMn81QuV1hkG Jhqf9GtklvvodcIYjv3m6MynMsfCu4ppbBuFnUGzu5+SVvm/MzieCXMUZyNXyxIw IK8xbaUB2akkRMYbzZWqTHQ0QW4DH9S100g80K6bBjNPtGKQFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmMZaNz/BkvocOKgD+5n5t8Vp2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRkMjBmNjAtZDRmNi0z ZDE0LTliZTUtMjg3OTg0MmYwODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG4duWn1zkYD7B6o3/Xceg1C4WGWWRShTaro4MbIyIiDFZI1jpKYt+d zvqW1Odff22m4eZVpLkAkE04Xbwg812bo98o+aeTxE0MgQGX33CGI5x88wwPqdZH JV3k5C5qT/tRNJILWFRK3qGKftlM/tSYDiWDnZNFkdDTEEwfFsH63RgRlXoA7Y4h xeHp4f4agJQmJInv8DoihvuVzNXqwbMGEc6VVMcj/P1ffBqa+kK65RRzWHXIhkIl EHeHnSkBz76rhr8N/BeXuhdXa//zcLtZFTD0EFg7G9IADMk19lDrN0bQC0wRWVrz PoCPYg9+Nwl4CCYTddJ327NjSlUo2js= -----END CERTIFICATE-----Generated at Fri Apr 17 12:09:09 2026 by rpki-client