$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c969f025-d1ff-32a0-a8b0-308599b39b7e.roa File: c969f025-d1ff-32a0-a8b0-308599b39b7e.roa (raw, json) Hash identifier: GJRg1yB8dyXZSyckd+syx0i0wL5L6OFe/2OLhKg763k= Subject key identifier: 5F:66:D3:CA:0C:F4:EA:8C:A0:75:84:D5:E2:B8:1A:2B:29:5E:30:6F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB2FF2FB38100AFF767A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c969f025-d1ff-32a0-a8b0-308599b39b7e.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 73.191.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:2f:f2:fb:38:10:0a:ff:76:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=f0673275-cbfb-4af5-90f2-65bb67bfdd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3b:db:75:24:18:5e:e6:33:57:54:84:37:49: 4e:63:0f:64:0d:62:e1:be:2c:be:17:67:36:df:58: 84:d5:1d:2a:de:24:80:8b:10:5c:71:52:d9:cd:04: 8d:7f:8a:cc:75:10:28:94:b7:9c:f3:38:f8:6f:f1: 79:8b:97:a9:10:d1:2c:c8:22:d0:b5:f8:74:3e:66: ac:f0:50:97:28:ff:e2:65:9f:d9:28:7c:1f:10:f5: 2d:54:ba:5c:a0:e9:9a:36:24:c3:32:ef:5a:ee:05: cf:00:42:60:4a:b5:e0:8f:7f:00:cd:93:08:f4:bc: ec:a3:79:40:e8:45:61:90:94:0f:86:79:8f:05:95: ca:87:a5:f7:a8:45:a0:7d:ab:a0:bf:3b:39:0b:cb: f1:1a:7a:02:6b:bd:ad:1c:90:bf:8b:b0:39:ae:8b: 62:50:e4:75:1f:60:cf:82:e7:a1:49:87:6b:45:4e: 5e:29:11:56:3b:13:81:57:f4:09:ec:78:19:be:3e: f6:38:bc:7b:9e:2f:fd:63:b9:04:58:62:19:b1:fd: 98:c6:8a:b2:d3:af:d4:48:65:29:5f:b3:fc:60:f9: 9f:a1:c4:9c:f1:21:4b:3b:bc:e7:a3:58:4e:cb:9c: 29:f3:35:cd:67:fc:71:40:19:ce:8e:47:74:da:3f: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:66:D3:CA:0C:F4:EA:8C:A0:75:84:D5:E2:B8:1A:2B:29:5E:30:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c969f025-d1ff-32a0-a8b0-308599b39b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.191.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:9a:07:2f:16:54:78:32:a9:61:dd:86:48:33:f5:8c:d1:c4: 76:90:8b:1f:54:8d:86:2d:71:13:5c:f3:fd:09:e5:ec:8c:fc: f2:c0:5f:6c:2c:5e:46:b6:18:c6:dc:f6:d3:ab:2a:98:52:4c: 73:13:3e:6d:cd:32:42:4a:40:fd:6b:bc:23:41:da:df:cf:a5: e6:a8:49:07:8f:82:8c:28:9b:2f:31:2f:ce:f4:6a:cb:51:22: ac:99:8a:a2:c4:27:ec:a1:8c:0c:69:56:9e:71:1c:4a:8d:ec: 25:d7:bd:d1:3d:85:a6:dd:1c:ae:6b:56:5b:81:dc:c7:7d:6a: 3c:43:1b:ca:19:2c:fb:67:b1:e0:f6:b6:65:4f:4a:30:41:11: bd:f1:72:12:88:a1:71:87:96:d0:3b:47:12:db:28:20:42:5a: 5a:b4:e9:8c:a9:22:d2:aa:07:05:e8:dd:39:81:ff:50:93:27: 8e:10:8e:88:42:e8:31:47:99:75:d0:42:1c:56:0c:17:c5:96: 39:63:93:43:2d:2e:66:6c:57:19:74:1b:74:a0:01:ae:a2:e4: 2b:ef:7e:e8:f0:97:07:68:ae:d2:a5:e2:af:c6:04:0a:33:63: 37:97:a6:d0:9c:b6:09:3f:13:61:e6:e4:9d:64:f5:be:0d:1e: 1e:5c:e7:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuy/y+zgQCv92ekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZjA2NzMyNzUtY2JmYi00YWY1LTkwZjItNjViYjY3YmZkZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzvbdSQYXuYzV1SEN0lOYw9kDWLhviy+F2c2 31iE1R0q3iSAixBccVLZzQSNf4rMdRAolLec8zj4b/F5i5epENEsyCLQtfh0Pmas 8FCXKP/iZZ/ZKHwfEPUtVLpcoOmaNiTDMu9a7gXPAEJgSrXgj38AzZMI9Lzso3lA 6EVhkJQPhnmPBZXKh6X3qEWgfaugvzs5C8vxGnoCa72tHJC/i7A5rotiUOR1H2DP guehSYdrRU5eKRFWOxOBV/QJ7HgZvj72OLx7ni/9Y7kEWGIZsf2Yxoqy06/USGUp X7P8YPmfocSc8SFLO7zno1hOy5wp8zXNZ/xxQBnOjkd02j9fEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9m08oM9OqMoHWE1eK4GispXjBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzk2OWYwMjUtZDFmZi0z MmEwLWE4YjAtMzA4NTk5YjM5YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSb+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKaBy8WVHgyqWHdhkgz9YzRxHaQix9UjYYtcRNc8/0J5eyM/PLAX2ws Xka2GMbc9tOrKphSTHMTPm3NMkJKQP1rvCNB2t/PpeaoSQePgowomy8xL870astR IqyZiqLEJ+yhjAxpVp5xHEqN7CXXvdE9habdHK5rVluB3Md9ajxDG8oZLPtnseD2 tmVPSjBBEb3xchKIoXGHltA7RxLbKCBCWlq06YypItKqBwXo3TmB/1CTJ44QjohC 6DFHmXXQQhxWDBfFljljk0MtLmZsVxl0G3SgAa6i5CvvfujwlwdortKl4q/GBAoz YzeXptCctgk/E2Hm5J1k9b4NHh5c56c= -----END CERTIFICATE-----Generated at Fri Apr 17 12:01:04 2026 by rpki-client