$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfada0a9-4c69-3021-bb7c-3a5b7b72bf9b.roa File: bfada0a9-4c69-3021-bb7c-3a5b7b72bf9b.roa (raw, json) Hash identifier: Al6zIav3XQMOFt/garN/5BOL1gfQT1YT3/EMMw7y53o= Subject key identifier: 5E:2E:44:BB:7C:54:54:69:E8:C4:3E:AC:9D:14:EE:EB:FF:03:FA:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BAB97308601F825397D080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfada0a9-4c69-3021-bb7c-3a5b7b72bf9b.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 73.167.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:b9:73:08:60:1f:82:53:97:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=8cf5a2e1-6cd8-48d4-8099-c7d08313eba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:da:29:3f:9c:4a:8c:51:40:38:90:ed:92:22: d7:b4:25:17:8b:55:08:01:7e:ae:4f:35:7c:b2:d0: 98:20:d4:f1:49:9a:70:44:39:5e:dc:b4:b5:4e:db: 2f:71:42:71:fa:92:82:09:f1:84:dd:93:57:61:04: d4:d5:a7:32:33:3f:45:13:85:92:75:c3:39:6d:8c: 6c:61:de:50:0a:5d:c2:f3:bf:a1:63:57:1d:9a:7d: 39:03:8c:fd:09:21:2c:f1:7d:23:1d:95:a8:4c:82: 20:e0:bf:8c:7f:e9:7c:ff:fe:4f:be:8a:3d:59:43: 41:cf:16:d1:c6:27:ed:58:5f:76:f0:e3:35:9b:c9: d3:6a:b1:a5:b6:ce:6e:d3:89:d0:13:b0:16:a8:05: f5:df:a3:b0:ea:45:f8:d2:93:8e:06:08:95:2d:64: 61:57:c6:78:f5:03:b1:b2:a4:5d:4f:f1:88:e3:ab: 38:73:10:10:e0:be:72:e7:c7:a7:57:24:8c:92:83: 88:d0:4d:8b:0e:01:dc:b7:3b:0b:95:c1:a7:4c:f3: ad:f5:aa:04:03:c9:94:8a:75:13:9b:de:3f:84:f5: 7a:3e:d5:bc:03:e0:80:ff:89:8b:08:ec:65:fd:af: 15:b8:88:21:d3:6d:37:66:af:8b:a6:2a:1a:17:1f: 1a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2E:44:BB:7C:54:54:69:E8:C4:3E:AC:9D:14:EE:EB:FF:03:FA:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfada0a9-4c69-3021-bb7c-3a5b7b72bf9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.167.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:09:f3:b2:33:e6:d1:4c:0b:ca:c9:2f:19:15:18:65:fc:76: d1:16:32:5f:6c:a4:92:3c:f4:f0:be:aa:3e:f3:d5:ed:75:0d: 3c:b2:1a:63:3c:f1:3b:77:a3:fb:47:b5:60:a0:43:17:70:bd: ef:40:01:95:1f:60:63:79:53:57:37:dc:33:a0:84:e3:cc:f7: bd:7c:5c:8d:5c:cf:b3:2f:7e:9f:20:c2:1b:97:aa:f1:e2:6f: 92:0f:fb:df:a5:a0:c8:c4:d0:b2:66:2e:0a:0f:9f:47:cf:5d: 0f:3a:f2:e0:41:64:0f:68:0a:42:bd:23:92:9d:b3:49:11:34: 31:99:d3:20:b8:05:61:93:32:36:03:51:03:01:7b:d2:6b:cd: 01:64:bb:98:61:9b:9f:1f:b7:71:ec:60:33:bf:00:76:9c:dd: e1:d3:34:e3:e0:c9:7d:ab:a0:61:fa:c4:cf:e4:35:9f:4c:0c: 05:85:77:61:8f:79:f6:40:1f:6b:7f:ee:c1:13:e6:39:0c:1d: b1:9f:32:e8:73:16:01:40:fd:67:48:d6:5f:8b:dd:e7:af:8f: 11:f0:ba:02:d6:a0:92:b1:1e:33:2f:30:5e:67:81:7f:07:be: ae:14:50:e5:e0:5d:c2:50:d1:0f:ce:36:64:b4:2b:da:b8:01: ad:01:53:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VurlzCGAfglOX0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OGNmNWEyZTEtNmNkOC00OGQ0LTgwOTktYzdkMDgzMTNlYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytopP5xKjFFAOJDtkiLXtCUXi1UIAX6uTzV8 stCYINTxSZpwRDle3LS1TtsvcUJx+pKCCfGE3ZNXYQTU1acyMz9FE4WSdcM5bYxs Yd5QCl3C87+hY1cdmn05A4z9CSEs8X0jHZWoTIIg4L+Mf+l8//5Pvoo9WUNBzxbR xiftWF928OM1m8nTarGlts5u04nQE7AWqAX136Ow6kX40pOOBgiVLWRhV8Z49QOx sqRdT/GI46s4cxAQ4L5y58enVySMkoOI0E2LDgHctzsLlcGnTPOt9aoEA8mUinUT m94/hPV6PtW8A+CA/4mLCOxl/a8VuIgh0203Zq+LpioaFx8aLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4uRLt8VFRp6MQ+rJ0U7uv/A/qnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZhZGEwYTktNGM2OS0z MDIxLWJiN2MtM2E1YjdiNzJiZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQJ87Iz5tFMC8rJLxkVGGX8dtEWMl9spJI89PC+qj7z1e11DTyyGmM8 8Tt3o/tHtWCgQxdwve9AAZUfYGN5U1c33DOghOPM9718XI1cz7Mvfp8gwhuXqvHi b5IP+9+loMjE0LJmLgoPn0fPXQ868uBBZA9oCkK9I5Kds0kRNDGZ0yC4BWGTMjYD UQMBe9JrzQFku5hhm58ft3HsYDO/AHac3eHTNOPgyX2roGH6xM/kNZ9MDAWFd2GP efZAH2t/7sET5jkMHbGfMuhzFgFA/WdI1l+L3eevjxHwugLWoJKxHjMvMF5ngX8H vq4UUOXgXcJQ0Q/ONmS0K9q4Aa0BU5U= -----END CERTIFICATE-----Generated at Fri Apr 17 03:21:18 2026 by rpki-client