$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cffaa33c-0d38-3600-9fae-2a0db464b8ec.roa File: cffaa33c-0d38-3600-9fae-2a0db464b8ec.roa (raw, json) Hash identifier: 3/yg9TXYOuPgwcUk5OC1UMbEekgp6KY4XtvvVnRbBP8= Subject key identifier: D5:9C:B1:05:A1:E7:3F:69:80:DA:86:EC:56:D1:4B:5F:4A:16:03:DB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE87A34F658D68D678F22660 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cffaa33c-0d38-3600-9fae-2a0db464b8ec.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 13367 IP address blocks: 73.94.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:87:a3:4f:65:8d:68:d6:78:f2:26:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=2fd795be-d53c-471e-9498-d0d30d42f593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:fe:78:72:83:7e:4d:00:5b:44:16:8d:58: 34:11:d3:26:6c:5a:8b:44:99:6c:93:c1:08:6d:58: 49:4e:67:72:11:45:c5:0e:96:b5:2c:e8:11:dd:58: e3:da:ce:4d:f8:ac:17:17:9e:44:42:62:ef:09:9f: d8:24:5d:d9:bd:56:2c:51:27:43:5e:a7:03:3f:29: c0:8b:c2:e0:d3:7a:f4:16:f8:a9:d1:89:e5:74:a3: 90:25:6e:0c:ad:f4:45:21:69:e0:6d:e5:d7:05:df: 6e:84:9e:56:75:d1:04:af:56:b1:ef:39:d6:c2:48: 8b:52:a7:94:32:80:9f:9f:36:57:63:35:7a:52:65: b0:43:dc:ad:3d:6d:f5:a5:c2:e2:3a:d6:98:3f:31: bb:ea:43:66:16:1c:d7:4a:32:36:1c:ae:b6:73:2f: 06:01:c6:be:03:e7:25:7c:19:fa:ce:9e:ad:10:6c: 5e:8a:f7:95:ff:a5:5a:b4:ea:c3:ca:e6:33:5a:ff: 90:63:ec:5a:ac:9d:fa:c4:90:13:3a:23:26:19:b7: 90:e0:2b:7e:38:8b:92:3e:1b:b9:ed:f4:49:4b:71: 3b:93:02:f5:b0:9c:c3:04:b6:69:ed:bd:32:5c:f7: d6:c3:50:31:b0:be:07:84:e0:86:7f:d9:0f:89:24: bf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9C:B1:05:A1:E7:3F:69:80:DA:86:EC:56:D1:4B:5F:4A:16:03:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cffaa33c-0d38-3600-9fae-2a0db464b8ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.94.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c0:02:99:aa:f9:14:a8:9e:76:08:5c:84:3e:f9:1a:65:d0: c0:ec:34:2d:ff:d3:e1:8a:b7:a0:0a:0f:74:5b:19:f4:0e:31: 28:56:53:ad:ab:1b:2a:34:11:fc:44:fa:8f:b2:13:fe:41:03: 2c:d1:bf:d4:cd:6b:d3:b5:80:d3:2a:2c:97:8e:13:74:2d:3a: 7b:00:35:48:af:b1:99:48:cf:39:da:8c:e6:d7:4f:a5:e6:2a: a5:d1:a4:d3:63:27:6e:32:ae:6d:86:be:bd:9c:5f:34:ad:9d: 4d:03:68:84:29:fe:3b:86:14:79:16:14:d9:2b:5a:c2:d9:01: a0:87:1b:d5:e6:56:7d:43:c0:bb:5c:ed:64:d8:04:cf:e1:47: 94:2b:0a:85:dd:91:fd:2d:88:e8:de:42:16:a5:db:9b:76:7d: 73:37:c1:3b:00:ee:c2:70:02:c2:d7:a0:bf:41:20:50:1e:14: bb:4d:80:71:38:a7:67:8f:75:8a:2f:ab:42:b5:d3:13:ac:7d: 97:34:e2:4e:a1:f6:40:7f:3a:71:75:32:a7:21:ba:04:ab:67: 5a:1b:4a:67:12:2f:23:ce:ec:ec:e4:7c:6e:e4:d8:1d:9c:31: c9:3b:4e:9b:11:5e:c4:9a:a3:44:6f:ba:c2:d2:d2:99:aa:ba: 49:1e:04:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3eh6NPZY1o1njyJmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk MmZkNzk1YmUtZDUzYy00NzFlLTk0OTgtZDBkMzBkNDJmNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9L+eHKDfk0AW0QWjVg0EdMmbFqLRJlsk8EI bVhJTmdyEUXFDpa1LOgR3Vjj2s5N+KwXF55EQmLvCZ/YJF3ZvVYsUSdDXqcDPynA i8Lg03r0Fvip0YnldKOQJW4MrfRFIWngbeXXBd9uhJ5WddEEr1ax7znWwkiLUqeU MoCfnzZXYzV6UmWwQ9ytPW31pcLiOtaYPzG76kNmFhzXSjI2HK62cy8GAca+A+cl fBn6zp6tEGxeiveV/6VatOrDyuYzWv+QY+xarJ36xJATOiMmGbeQ4Ct+OIuSPhu5 7fRJS3E7kwL1sJzDBLZp7b0yXPfWw1AxsL4HhOCGf9kPiSS/3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWcsQWh5z9pgNqG7FbRS19KFgPbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZmYWEzM2MtMGQzOC0z NjAwLTlmYWUtMmEwZGI0NjRiOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSV5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3AApmq+RSonnYIXIQ++Rpl0MDsNC3/0+GKt6AKD3RbGfQOMShWU62r Gyo0EfxE+o+yE/5BAyzRv9TNa9O1gNMqLJeOE3QtOnsANUivsZlIzznajObXT6Xm KqXRpNNjJ24yrm2Gvr2cXzStnU0DaIQp/juGFHkWFNkrWsLZAaCHG9XmVn1DwLtc 7WTYBM/hR5QrCoXdkf0tiOjeQhal25t2fXM3wTsA7sJwAsLXoL9BIFAeFLtNgHE4 p2ePdYovq0K10xOsfZc04k6h9kB/OnF1MqchugSrZ1obSmcSLyPO7OzkfG7k2B2c Mck7TpsRXsSao0RvusLS0pmqukkeBIQ= -----END CERTIFICATE-----Generated at Sat Jun 13 19:32:39 2026 by rpki-client