$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d123f48a-5bbd-3f4c-bfba-9042555daf96.roa File: d123f48a-5bbd-3f4c-bfba-9042555daf96.roa (raw, json) Hash identifier: s6f+EZeXw6RsB4uARUWmdY8zBj7ZlV7WpsfDaXjr08k= Subject key identifier: 77:36:9E:08:83:65:82:78:53:1B:E4:4A:5A:44:8B:BF:EB:0F:E6:14 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB30E17EC4794466262F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d123f48a-5bbd-3f4c-bfba-9042555daf96.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 73.191.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:30:e1:7e:c4:79:44:66:26:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=c8057ae2-eed4-4e1a-a4a9-6b65b1ece9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2d:a8:c8:4f:66:34:9f:8f:81:7f:3d:43:0a: c4:f8:e5:cb:9c:8e:93:79:fb:04:97:ef:2c:a4:bc: 71:ce:57:b3:21:34:eb:e9:28:5f:be:e3:aa:a5:38: e6:59:3f:0e:d4:43:1e:f2:07:04:52:90:cc:45:92: f3:6c:8e:9b:e8:85:af:6f:41:41:c7:20:5f:b3:cd: 0c:0a:ef:7e:ad:08:fa:48:41:5b:c8:e1:40:0d:c1: 63:06:ca:ee:5c:af:e4:3c:d2:43:cf:4d:6e:af:7c: 4c:fd:57:ec:75:a0:15:15:ab:e9:56:29:3d:32:45: c5:08:26:da:c1:cd:67:c3:c6:02:ec:95:66:c1:8b: 42:81:bd:63:8b:56:0a:0a:02:18:08:d7:3d:4d:1f: 16:0a:3b:6b:5f:27:19:60:45:0a:83:cd:0d:59:c9: b0:39:f8:2f:80:86:53:25:47:94:e7:ec:11:b5:12: 8d:3a:00:0b:3d:19:b2:c0:07:2e:96:aa:24:45:66: 2e:92:a2:8e:39:59:1a:ec:0c:17:65:37:cc:d5:ae: 9d:9e:a9:77:a7:6f:69:35:3f:55:2b:19:30:ed:e0: 36:91:5a:9c:39:62:6f:b9:be:cc:22:a9:79:f9:f7: 6b:1c:8b:51:d2:ba:98:d9:0f:32:58:c3:61:c9:67: 6a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:36:9E:08:83:65:82:78:53:1B:E4:4A:5A:44:8B:BF:EB:0F:E6:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d123f48a-5bbd-3f4c-bfba-9042555daf96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.191.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:40:70:fe:b6:42:54:07:fd:4c:e5:25:1f:9a:97:73:72:5f: bd:7c:b1:5f:7c:70:36:e9:28:26:f7:e5:5f:22:c6:ba:4c:2d: 41:ab:30:1f:49:25:e2:6c:ae:01:30:8d:79:f5:c8:4a:c1:83: a1:9a:9c:54:e2:e9:03:c9:1c:04:b1:ab:1e:fc:da:53:29:a6: 4d:8a:0a:3e:af:92:30:b5:95:2a:ed:ed:e5:17:da:61:fd:69: 31:4f:e5:e6:9c:05:81:e6:04:7e:88:ce:8e:a1:77:43:01:86: f0:f4:58:b3:09:4e:24:01:c0:8f:12:49:7f:de:4a:a8:28:32: 38:f2:cf:6e:32:52:c4:6b:1a:df:45:42:9a:56:e3:48:55:24: f1:ba:18:e7:c4:4f:79:3c:43:8e:05:b0:6f:1e:a7:fc:3e:14: 22:1c:f7:a7:3c:0f:fd:91:25:81:f3:f3:44:bd:b5:cf:92:02: ef:39:61:9d:31:02:29:9f:f3:73:04:5c:74:07:e3:0b:c1:c7: 00:3c:fa:f1:e0:72:bd:34:95:4f:a5:9e:a0:d8:96:a8:d0:1f: 31:3f:9a:b4:f5:01:92:2f:2c:19:d4:cb:30:53:fb:51:1c:65: cd:23:bb:7a:69:c9:a0:5c:01:03:a8:5d:ce:ab:95:b0:28:b0: ed:fd:47:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuzDhfsR5RGYmLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YzgwNTdhZTItZWVkNC00ZTFhLWE0YTktNmI2NWIxZWNlOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky2oyE9mNJ+PgX89QwrE+OXLnI6TefsEl+8s pLxxzlezITTr6ShfvuOqpTjmWT8O1EMe8gcEUpDMRZLzbI6b6IWvb0FBxyBfs80M Cu9+rQj6SEFbyOFADcFjBsruXK/kPNJDz01ur3xM/VfsdaAVFavpVik9MkXFCCba wc1nw8YC7JVmwYtCgb1ji1YKCgIYCNc9TR8WCjtrXycZYEUKg80NWcmwOfgvgIZT JUeU5+wRtRKNOgALPRmywAculqokRWYukqKOOVka7AwXZTfM1a6dnql3p29pNT9V Kxkw7eA2kVqcOWJvub7MIql5+fdrHItR0rqY2Q8yWMNhyWdqFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc2ngiDZYJ4UxvkSlpEi7/rD+YUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDEyM2Y0OGEtNWJiZC0z ZjRjLWJmYmEtOTA0MjU1NWRhZjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASb/hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZAcP62QlQH/UzlJR+al3NyX718sV98cDbpKCb35V8ixrpMLUGrMB9J JeJsrgEwjXn1yErBg6GanFTi6QPJHASxqx782lMppk2KCj6vkjC1lSrt7eUX2mH9 aTFP5eacBYHmBH6Izo6hd0MBhvD0WLMJTiQBwI8SSX/eSqgoMjjyz24yUsRrGt9F QppW40hVJPG6GOfET3k8Q44FsG8ep/w+FCIc96c8D/2RJYHz80S9tc+SAu85YZ0x Aimf83MEXHQH4wvBxwA8+vHgcr00lU+lnqDYlqjQHzE/mrT1AZIvLBnUyzBT+1Ec Zc0ju3ppyaBcAQOoXc6rlbAosO39R5U= -----END CERTIFICATE-----Generated at Fri Apr 17 07:32:22 2026 by rpki-client