$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bad45c34-1d8f-3103-9ced-cd1aa90d36de.roa File: bad45c34-1d8f-3103-9ced-cd1aa90d36de.roa (raw, json) Hash identifier: t+FL5fgmdfH5tfDXfpwPId5OWQQPOeSrcErFqFr0bjY= Subject key identifier: 5C:B2:FF:13:E8:76:91:D7:F5:22:4E:6C:05:73:14:03:F8:3D:64:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB2C30341F0D71023C6C60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bad45c34-1d8f-3103-9ced-cd1aa90d36de.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 73.161.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:2c:30:34:1f:0d:71:02:3c:6c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=d9a5d502-6794-427e-8ccc-548e473ba003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3a:00:3b:b8:55:c1:38:e6:d7:c7:bb:cb:b0: 86:62:4c:0c:3f:76:b8:49:ea:a6:97:30:df:29:df: ea:14:51:c4:8c:0d:04:3b:32:04:6e:6f:70:45:87: 68:7e:9b:c8:6b:38:f4:c4:43:de:db:3a:95:f0:d2: 5c:5c:63:24:64:27:1c:b5:e3:ab:95:cf:ac:2a:16: ef:99:60:56:93:ff:7c:5b:cf:c7:12:5b:73:75:20: 22:dc:4b:34:e6:1a:fc:7c:b7:2d:f3:c8:88:ca:31: dd:7d:12:41:ba:76:38:9b:54:4b:6d:6b:4a:bb:0e: 45:32:84:55:24:50:bb:06:bb:88:06:cf:56:23:1a: e1:93:e4:35:3e:3f:8b:1c:2f:e0:35:1b:fc:54:fb: fd:9c:31:17:bb:ea:2e:3c:75:58:41:e4:7d:b9:01: cd:c2:71:29:4e:2d:ec:05:13:12:60:20:bb:8d:07: b4:d4:ba:f5:19:f9:8a:e1:a5:a3:5c:6e:02:58:a9: ad:b6:e5:86:14:48:ad:c0:18:8f:4e:70:64:2f:d4: eb:80:9b:4d:9d:58:a5:42:55:eb:cf:2f:98:6b:23: f7:74:66:39:26:2a:56:eb:20:e0:da:b3:22:cc:d3: fb:2f:12:ee:5e:ff:4f:44:4d:5b:aa:ff:79:81:de: b0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B2:FF:13:E8:76:91:D7:F5:22:4E:6C:05:73:14:03:F8:3D:64:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bad45c34-1d8f-3103-9ced-cd1aa90d36de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:50:c8:11:82:c7:82:78:53:9d:66:50:67:75:30:68:6b:33: 54:ad:bc:45:68:fa:eb:ac:bf:72:41:ae:6a:5f:5f:84:d9:5a: b9:b3:81:5e:83:31:ff:34:4d:f8:b7:2c:67:e3:da:70:85:be: 56:24:5e:c7:4f:ce:ac:0f:81:09:24:6f:91:98:cf:7d:ef:a9: 60:77:2a:fc:3e:92:8f:ab:08:58:85:7f:cf:ba:10:59:72:02: 5d:7f:1f:ac:d1:84:a4:5f:bc:42:33:bb:b8:db:d6:de:6a:ed: 28:62:a2:6f:d6:8f:24:1d:5a:31:81:3f:1f:91:d4:cb:eb:a2: 6b:77:19:3b:92:1c:53:6b:78:0a:ec:54:7f:7b:11:4d:83:64: 4c:ec:35:da:91:1e:07:64:46:9f:36:86:7c:9a:5a:4f:93:82: 1e:de:c9:50:3e:97:4a:48:f2:ea:c2:31:50:76:2f:b0:ea:83: f7:f2:95:e3:a4:6a:14:10:45:1d:4e:e8:7d:80:6e:19:b3:2e: bd:b8:c9:83:2d:b7:e5:68:a7:8e:eb:31:d4:0f:f0:8a:ec:f2: 39:02:d0:81:0a:87:8b:41:cf:23:bc:dc:6f:6f:ac:c8:0a:c3: 7f:bb:41:f6:60:68:31:7e:27:43:e6:db:67:e6:27:d0:0d:ef: ed:12:59:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuywwNB8NcQI8bGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZDlhNWQ1MDItNjc5NC00MjdlLThjY2MtNTQ4ZTQ3M2JhMDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDoAO7hVwTjm18e7y7CGYkwMP3a4SeqmlzDf Kd/qFFHEjA0EOzIEbm9wRYdofpvIazj0xEPe2zqV8NJcXGMkZCccteOrlc+sKhbv mWBWk/98W8/HEltzdSAi3Es05hr8fLct88iIyjHdfRJBunY4m1RLbWtKuw5FMoRV JFC7BruIBs9WIxrhk+Q1Pj+LHC/gNRv8VPv9nDEXu+ouPHVYQeR9uQHNwnEpTi3s BRMSYCC7jQe01Lr1GfmK4aWjXG4CWKmttuWGFEitwBiPTnBkL9TrgJtNnVilQlXr zy+YayP3dGY5JipW6yDg2rMizNP7LxLuXv9PRE1bqv95gd6wawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyy/xPodpHX9SJObAVzFAP4PWQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFkNDVjMzQtMWQ4Zi0z MTAzLTljZWQtY2QxYWE5MGQzNmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSaEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlQyBGCx4J4U51mUGd1MGhrM1StvEVo+uusv3JBrmpfX4TZWrmzgV6D Mf80Tfi3LGfj2nCFvlYkXsdPzqwPgQkkb5GYz33vqWB3Kvw+ko+rCFiFf8+6EFly Al1/H6zRhKRfvEIzu7jb1t5q7Shiom/WjyQdWjGBPx+R1Mvromt3GTuSHFNreArs VH97EU2DZEzsNdqRHgdkRp82hnyaWk+Tgh7eyVA+l0pI8urCMVB2L7Dqg/fyleOk ahQQRR1O6H2AbhmzLr24yYMtt+Vop47rMdQP8Irs8jkC0IEKh4tBzyO83G9vrMgK w3+7QfZgaDF+J0Pm22fmJ9AN7+0SWY0= -----END CERTIFICATE-----Generated at Fri Apr 17 10:30:12 2026 by rpki-client