$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e8e9093-1ef8-3762-83b5-c43114329fc3.roa File: 8e8e9093-1ef8-3762-83b5-c43114329fc3.roa (raw, json) Hash identifier: Taf6X0lP17vV3eHeL/nbY9xvujf8982iZdbjWBnOkk8= Subject key identifier: C8:55:8F:AF:42:2E:5B:54:33:06:CA:A1:A3:87:A2:69:C1:B3:7E:45 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC59DBEDFF7AB711459EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e8e9093-1ef8-3762-83b5-c43114329fc3.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 73.18.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:59:db:ed:ff:7a:b7:11:45:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=bb90d490-9681-40e7-a60d-ca75c771b430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8e:c0:02:6a:51:2c:da:e7:c6:00:32:c6:16: 12:bf:f9:65:f2:4e:ac:75:98:e2:d5:18:91:c6:22: 78:10:6b:c0:49:f6:09:3b:75:3d:aa:06:ca:b1:fa: 4e:ef:3c:bf:13:72:f6:d3:f6:13:a0:8d:ef:61:79: 51:74:ef:bb:72:89:9b:36:47:69:67:cf:13:b3:cd: 1d:c6:d0:0c:9c:a8:f7:f4:64:a8:3c:da:60:cc:3a: aa:27:52:d0:25:0b:54:d5:cc:a9:ec:2b:18:d9:41: 49:7c:80:16:9c:20:7d:44:81:cb:b4:14:55:2a:cb: 2e:28:09:4b:a9:c8:d5:1a:fa:5d:32:94:27:98:40: 53:64:7c:ae:f4:6f:03:34:49:54:60:e5:14:30:4c: 32:9b:ec:89:b7:6f:43:d3:5c:2e:7b:4b:51:e2:b7: 0c:3c:05:e9:c2:0e:06:97:01:6d:dc:01:56:63:a9: dd:fa:bd:7e:ae:c1:5d:dc:4b:fd:0d:82:20:5f:98: 44:91:af:7b:eb:53:83:cb:ca:21:9f:03:e0:3f:9e: 65:8f:85:91:05:57:57:52:27:a7:cb:45:b5:81:88: 40:76:17:0e:ae:65:71:45:1a:0d:df:26:36:54:6d: c6:60:e7:c3:95:0e:d3:82:e5:fb:26:51:0b:44:9d: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:55:8F:AF:42:2E:5B:54:33:06:CA:A1:A3:87:A2:69:C1:B3:7E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e8e9093-1ef8-3762-83b5-c43114329fc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.18.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f6:8d:99:38:f8:7b:59:6a:fc:f9:38:28:62:d6:b8:0a:d8: c9:5b:38:8f:a7:82:ef:63:b5:e7:50:2f:a4:5c:30:a7:97:c0: d7:fc:14:11:0b:23:da:99:fd:c0:50:56:d8:53:8f:77:96:15: a1:31:6a:81:6f:98:de:63:01:17:6d:5d:c0:bc:d9:e7:d5:f6: ff:1d:2a:3f:05:bb:6a:65:94:63:ef:de:61:0a:10:9a:90:03: e9:f3:e9:53:4b:13:4d:26:99:ff:c5:24:8a:6b:31:6b:7b:a5: e0:7d:66:8a:1e:21:ed:7f:f7:09:77:26:ec:7b:dd:86:e3:a3: d5:fc:f8:27:06:22:e1:20:bf:7f:b4:2b:dd:e6:c9:47:19:d8: 48:7b:c7:b1:14:4a:64:0e:55:1e:73:ea:87:31:22:10:88:03: c3:8b:d2:77:82:ce:6b:84:aa:97:55:94:c5:a2:7f:85:85:a8: 8a:c7:d7:f3:d1:a8:a5:d9:40:df:ed:91:03:2d:61:c6:40:f0: 8e:c2:50:b3:25:74:8a:b0:a8:ab:5b:0c:84:eb:15:d8:d1:f5: 78:07:eb:37:80:9d:0a:15:56:d8:ba:db:8b:ed:69:f1:67:c3: ae:8c:df:03:6d:a7:06:54:91:98:f2:19:fd:5c:41:1b:8b:b2: 50:31:69:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvFnb7f96txFFnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YmI5MGQ0OTAtOTY4MS00MGU3LWE2MGQtY2E3NWM3NzFiNDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo7AAmpRLNrnxgAyxhYSv/ll8k6sdZji1RiR xiJ4EGvASfYJO3U9qgbKsfpO7zy/E3L20/YToI3vYXlRdO+7combNkdpZ88Ts80d xtAMnKj39GSoPNpgzDqqJ1LQJQtU1cyp7CsY2UFJfIAWnCB9RIHLtBRVKssuKAlL qcjVGvpdMpQnmEBTZHyu9G8DNElUYOUUMEwym+yJt29D01wue0tR4rcMPAXpwg4G lwFt3AFWY6nd+r1+rsFd3Ev9DYIgX5hEka9761ODy8ohnwPgP55lj4WRBVdXUien y0W1gYhAdhcOrmVxRRoN3yY2VG3GYOfDlQ7TguX7JlELRJ3dKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhVj69CLltUMwbKoaOHomnBs35FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGU4ZTkwOTMtMWVmOC0z NzYyLTgzYjUtYzQzMTE0MzI5ZmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSRKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT2jZk4+HtZavz5OChi1rgK2MlbOI+ngu9jtedQL6RcMKeXwNf8FBEL I9qZ/cBQVthTj3eWFaExaoFvmN5jARdtXcC82efV9v8dKj8Fu2pllGPv3mEKEJqQ A+nz6VNLE00mmf/FJIprMWt7peB9ZooeIe1/9wl3Jux73Ybjo9X8+CcGIuEgv3+0 K93myUcZ2Eh7x7EUSmQOVR5z6ocxIhCIA8OL0neCzmuEqpdVlMWif4WFqIrH1/PR qKXZQN/tkQMtYcZA8I7CULMldIqwqKtbDITrFdjR9XgH6zeAnQoVVti624vtafFn w66M3wNtpwZUkZjyGf1cQRuLslAxacE= -----END CERTIFICATE-----Generated at Fri Apr 17 14:42:41 2026 by rpki-client