$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb6bfc1b-4387-31eb-8bac-67d4d67943fc.roa File: cb6bfc1b-4387-31eb-8bac-67d4d67943fc.roa (raw, json) Hash identifier: CNse7/2b07KgrzA/dMS8CcqFAasTNj8LGh2mNU9EADs= Subject key identifier: 24:92:8F:81:6E:CA:D8:64:90:68:2C:00:88:8E:B3:C1:E2:DF:26:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BBFF5748F24B6324B4E0C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb6bfc1b-4387-31eb-8bac-67d4d67943fc.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 73.234.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:ff:57:48:f2:4b:63:24:b4:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=254b0968-f2b3-421f-9916-482068326730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:78:c0:47:e2:30:c0:d0:6c:1f:10:ce:d4:3f: 2f:49:6b:63:28:35:56:10:7c:0e:a0:f8:b8:be:d8: 60:58:f8:71:81:e0:58:9f:df:92:7f:f3:dc:ea:bd: 13:f5:a5:cb:ba:0f:66:14:89:bc:a6:db:4a:fd:c5: a3:a6:8c:ed:43:78:05:66:50:65:2d:db:ce:d5:c3: 48:8f:fe:98:bc:eb:64:10:77:48:fb:a8:97:e3:34: e2:07:4d:cf:88:ac:67:b7:05:a4:28:8c:03:4f:0c: 14:ba:cc:ef:17:10:54:42:23:6a:95:53:98:58:87: ac:c3:40:90:70:23:4d:55:0f:21:32:27:f8:8d:38: fe:f1:ca:f5:3a:a2:78:40:ef:05:3f:3e:48:a7:27: 08:86:ce:6d:3d:1f:ce:ea:6c:dd:f2:88:e9:c0:35: c1:27:0b:fc:d6:cd:6c:29:f8:29:e3:dd:44:46:c6: 36:f8:f8:a0:5b:ea:40:96:f0:b2:f1:e0:24:0d:8b: 5d:40:dd:35:c8:f6:86:4e:ae:7e:1e:95:cd:8b:4a: 9a:05:07:14:f0:54:4b:82:a5:d2:02:43:4c:07:20: d8:cf:f3:71:ce:d4:d0:77:49:1a:d6:d6:8e:7e:59: 7c:4b:c8:50:fc:3c:ca:b0:45:90:9a:44:5b:b4:16: ad:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:92:8F:81:6E:CA:D8:64:90:68:2C:00:88:8E:B3:C1:E2:DF:26:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb6bfc1b-4387-31eb-8bac-67d4d67943fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.234.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8a:79:15:36:28:8f:3d:af:ee:af:be:11:43:f7:fb:47:2f: 44:6d:10:75:49:f3:7b:b8:ec:09:cd:a7:af:13:d9:4c:32:4e: bd:59:86:60:93:23:c3:ec:f1:24:c0:ea:3b:4d:5d:49:42:cc: 65:38:53:50:6f:c6:b9:e1:1c:88:39:f5:9b:3f:6c:63:7e:e9: dd:ba:68:fe:58:9e:b8:ed:3c:9c:01:97:a3:66:2a:31:a5:66: 95:ab:70:b3:af:c0:f5:35:e2:eb:15:f1:a3:f8:2e:ac:6d:5e: f9:17:12:76:0d:72:d6:ba:07:22:c8:43:06:e1:d7:3a:2c:3c: 45:ac:ad:6d:3e:08:4b:97:0d:cd:c5:89:f3:5b:e8:b8:ef:d8: 7f:13:84:26:41:cd:af:8d:d0:5d:06:61:76:fd:f6:e5:b9:6b: e6:c0:cb:bf:5a:d7:ab:49:4e:82:9c:91:b9:98:45:71:d4:bc: cf:d3:b5:3e:61:13:7b:d9:70:6e:af:c4:0f:d8:54:ff:9c:69: 7a:ee:5b:0b:66:d4:d1:4f:64:d7:bf:98:a1:5f:51:48:f0:fd: 80:64:e5:89:4f:52:b3:1e:77:46:09:d0:8f:dc:7b:57:3d:9b: 7a:26:ef:f8:43:13:1e:bf:4d:39:75:73:e3:ac:dd:52:ee:84: f0:00:65:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu/9XSPJLYyS04MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MjU0YjA5NjgtZjJiMy00MjFmLTk5MTYtNDgyMDY4MzI2NzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXjAR+IwwNBsHxDO1D8vSWtjKDVWEHwOoPi4 vthgWPhxgeBYn9+Sf/Pc6r0T9aXLug9mFIm8pttK/cWjpoztQ3gFZlBlLdvO1cNI j/6YvOtkEHdI+6iX4zTiB03PiKxntwWkKIwDTwwUuszvFxBUQiNqlVOYWIesw0CQ cCNNVQ8hMif4jTj+8cr1OqJ4QO8FPz5IpycIhs5tPR/O6mzd8ojpwDXBJwv81s1s Kfgp491ERsY2+PigW+pAlvCy8eAkDYtdQN01yPaGTq5+HpXNi0qaBQcU8FRLgqXS AkNMByDYz/NxztTQd0ka1taOfll8S8hQ/DzKsEWQmkRbtBatOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSSj4FuythkkGgsAIiOs8Hi3yYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I2YmZjMWItNDM4Ny0z MWViLThiYWMtNjdkNGQ2Nzk0M2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASer+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWKeRU2KI89r+6vvhFD9/tHL0RtEHVJ83u47AnNp68T2UwyTr1ZhmCT I8Ps8STA6jtNXUlCzGU4U1BvxrnhHIg59Zs/bGN+6d26aP5YnrjtPJwBl6NmKjGl ZpWrcLOvwPU14usV8aP4LqxtXvkXEnYNcta6ByLIQwbh1zosPEWsrW0+CEuXDc3F ifNb6Ljv2H8ThCZBza+N0F0GYXb99uW5a+bAy79a16tJToKckbmYRXHUvM/TtT5h E3vZcG6vxA/YVP+caXruWwtm1NFPZNe/mKFfUUjw/YBk5YlPUrMed0YJ0I/ce1c9 m3om7/hDEx6/TTl1c+Os3VLuhPAAZX0= -----END CERTIFICATE-----Generated at Fri Apr 17 11:48:05 2026 by rpki-client