$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d497ab-6f71-3e40-aa46-b1efa9f454f1.roa File: b2d497ab-6f71-3e40-aa46-b1efa9f454f1.roa (raw, json) Hash identifier: N0P7uDtr+VitpvBip9uNXLcwRtehkFYVh3u8hhwZPOM= Subject key identifier: 9D:EE:0A:CB:5B:46:DF:36:45:EC:24:C7:F0:5B:3B:08:7A:BA:8C:0B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC03F9647F21C8C9B266C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d497ab-6f71-3e40-aa46-b1efa9f454f1.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 73.249.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:03:f9:64:7f:21:c8:c9:b2:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=60b6868a-606a-4469-975d-4a39d46e1b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e3:30:4e:39:47:30:98:83:db:81:00:74:80: f0:28:dc:77:0f:e4:19:96:8f:a9:6c:d4:7d:4a:db: db:f5:89:67:0c:bf:37:67:a7:ea:bc:16:c9:e1:09: a8:7c:d4:34:0d:e9:ac:9a:ee:fc:72:39:75:28:f1: 0e:65:61:19:f4:96:63:b0:ac:77:c3:73:ac:20:dd: 64:7b:f3:a1:20:c6:00:91:87:73:62:c1:02:70:4c: 19:2d:60:51:25:ac:64:60:86:26:64:25:38:75:c1: 09:a6:7e:53:ab:35:48:46:bd:e9:b2:3a:15:fa:42: 5a:aa:73:18:d9:b6:c8:17:ea:f4:77:62:74:ef:66: c0:33:b7:18:98:6f:a4:ef:a6:20:f1:6b:81:df:ee: 7b:86:bb:6c:b0:83:67:57:37:04:8f:bd:a0:81:aa: 69:47:0c:fb:10:8d:e5:d6:a3:1c:7f:81:33:64:02: 94:f5:f8:d2:27:99:34:d7:a4:c0:1b:76:fd:e4:52: 73:45:a8:9d:5d:2c:ed:03:11:98:c2:82:b4:52:82: bd:f0:57:66:ea:06:5a:2f:6c:78:95:4e:16:98:4e: cf:46:31:2b:83:fb:7f:a5:f2:96:c8:7a:8a:60:29: 67:24:eb:ba:09:8c:96:35:1f:2c:ab:e5:28:83:42: d4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EE:0A:CB:5B:46:DF:36:45:EC:24:C7:F0:5B:3B:08:7A:BA:8C:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d497ab-6f71-3e40-aa46-b1efa9f454f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.249.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:74:a0:d8:19:ba:82:70:44:3f:ea:f1:dc:6a:99:af:71:52: f0:b8:7c:b2:e8:8c:5f:33:01:97:f8:4e:af:82:44:69:05:45: 00:df:55:0c:88:e7:ec:66:17:ed:b1:7a:c5:eb:11:a6:ae:72: 90:a3:fd:fe:c9:4d:9b:81:c2:80:fe:af:fc:31:ed:4d:b0:7c: e6:9c:81:c9:11:b2:eb:2f:7c:a3:d5:0a:6b:c9:45:69:7b:d8: df:cf:60:78:f2:2d:c7:27:d2:52:67:88:eb:05:d8:74:69:73: fa:76:1a:7a:42:6f:b5:35:9b:ed:cc:10:d7:81:a5:44:d0:92: ca:0d:92:46:02:e5:98:44:9b:ef:9e:81:d8:30:6b:c5:35:ad: 5d:c3:19:8b:26:6c:6c:4c:c4:d9:2e:96:33:78:fc:5d:ce:76: 76:cc:17:0d:a9:8f:82:63:83:52:44:c1:c6:36:ae:47:ef:e2: ab:6b:3b:d9:d3:bf:74:13:6e:59:39:47:30:34:92:3c:f8:2d: c6:5f:a3:a3:e8:10:58:bd:06:c7:22:67:4c:d4:69:6c:22:ca: 95:5c:02:ec:35:21:d4:21:53:c1:88:58:c8:ac:0a:b9:0a:ec: c4:60:05:23:f1:bb:4c:14:23:20:b5:56:01:e9:3e:c2:08:70: 9a:e1:32:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvAP5ZH8hyMmyZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NjBiNjg2OGEtNjA2YS00NDY5LTk3NWQtNGEzOWQ0NmUxYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeMwTjlHMJiD24EAdIDwKNx3D+QZlo+pbNR9 Stvb9YlnDL83Z6fqvBbJ4QmofNQ0Demsmu78cjl1KPEOZWEZ9JZjsKx3w3OsIN1k e/OhIMYAkYdzYsECcEwZLWBRJaxkYIYmZCU4dcEJpn5TqzVIRr3psjoV+kJaqnMY 2bbIF+r0d2J072bAM7cYmG+k76Yg8WuB3+57hrtssINnVzcEj72ggappRwz7EI3l 1qMcf4EzZAKU9fjSJ5k016TAG3b95FJzRaidXSztAxGYwoK0UoK98Fdm6gZaL2x4 lU4WmE7PRjErg/t/pfKWyHqKYClnJOu6CYyWNR8sq+Uog0LUjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3uCstbRt82Rewkx/BbOwh6uowLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjJkNDk3YWItNmY3MS0z ZTQwLWFhNDYtYjFlZmE5ZjQ1NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSfmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV0oNgZuoJwRD/q8dxqma9xUvC4fLLojF8zAZf4Tq+CRGkFRQDfVQyI 5+xmF+2xesXrEaaucpCj/f7JTZuBwoD+r/wx7U2wfOacgckRsusvfKPVCmvJRWl7 2N/PYHjyLccn0lJniOsF2HRpc/p2GnpCb7U1m+3MENeBpUTQksoNkkYC5ZhEm++e gdgwa8U1rV3DGYsmbGxMxNkuljN4/F3OdnbMFw2pj4Jjg1JEwcY2rkfv4qtrO9nT v3QTblk5RzA0kjz4LcZfo6PoEFi9BsciZ0zUaWwiypVcAuw1IdQhU8GIWMisCrkK 7MRgBSPxu0wUIyC1VgHpPsIIcJrhMlc= -----END CERTIFICATE-----Generated at Fri Apr 17 11:56:57 2026 by rpki-client