$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/068c63de-41e5-379d-b93f-e8225856a1b1.roa File: 068c63de-41e5-379d-b93f-e8225856a1b1.roa (raw, json) Hash identifier: bMx2YPpyOMKB+fhtQ7LRaZ4o6LBKFaEyETFWT7UYeHA= Subject key identifier: C3:AB:2B:7C:5E:A9:16:20:4D:9D:D4:9E:66:AD:A2:CA:4F:66:DE:AC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF765567A0EE1D7C6DBE748 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/068c63de-41e5-379d-b93f-e8225856a1b1.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33287 IP address blocks: 73.233.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:65:56:7a:0e:e1:d7:c6:db:e7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=223ffe73-5156-406a-8791-dcfb91a85a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5a:b0:59:5b:8f:ea:36:2b:20:8c:81:95:f3: 19:6f:cd:6d:c3:2e:2e:78:87:b7:e1:b6:d3:fa:10: cf:4f:13:e9:da:fa:cc:0a:d5:88:91:be:34:04:6a: 31:b7:3a:74:23:d8:00:51:2a:04:78:2c:06:89:06: 3b:4d:c8:42:0e:4b:a7:65:d0:ba:96:46:be:85:39: 1d:ca:a1:1c:80:4d:3e:b0:0a:15:4a:a9:3e:ac:da: 33:b9:c5:7a:bc:d5:66:c8:e9:4e:f9:97:64:fc:3b: 68:cd:ea:ed:9f:47:b4:fe:e1:9c:15:b5:2c:a4:c8: 6a:73:35:bb:0d:36:d9:45:3b:df:6e:45:a1:5f:26: b9:45:9b:e4:93:8e:5d:de:6f:31:be:11:db:48:72: c8:ed:14:ba:e2:db:16:7f:f2:fb:ad:30:26:dc:a7: 0e:3a:03:34:72:46:2e:9b:c8:cc:4d:51:68:6a:9c: ca:c9:94:bb:13:15:5f:e8:3f:a6:a0:3a:51:8b:24: 0e:65:b2:e6:da:e9:82:01:15:da:9a:97:87:f6:97: fd:57:c7:c2:c9:a4:4f:c8:2d:d8:25:0a:ba:21:3d: 16:64:fd:fd:e6:42:06:32:72:5f:4e:46:e7:e8:59: 7a:a7:4d:05:b7:c8:62:ed:90:9a:68:20:9d:2d:e6: a5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AB:2B:7C:5E:A9:16:20:4D:9D:D4:9E:66:AD:A2:CA:4F:66:DE:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/068c63de-41e5-379d-b93f-e8225856a1b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.233.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b7:2e:75:ef:64:c3:75:da:0c:77:2a:97:77:83:92:a0:f6: 83:7d:37:43:33:8f:47:13:be:94:61:c9:22:28:1b:ac:07:07: ff:c8:d6:4b:c1:4b:3c:92:90:8b:47:0b:63:70:42:66:84:6d: 57:05:51:75:5f:65:db:92:4a:ae:bc:6a:af:d8:8c:c7:61:62: c0:de:b3:7c:8d:b0:a8:4e:c7:b7:a6:bc:d4:af:9e:30:a4:e9: 7b:37:ad:71:9f:00:77:f8:31:15:76:d6:1f:4e:e8:16:0b:da: de:0c:67:1c:3c:a0:b2:cf:bb:ca:79:79:af:fa:b3:ff:7a:60: c2:7c:b9:b6:10:67:70:09:46:67:1a:7b:72:94:6d:65:b5:b2: 22:36:81:cf:e3:c9:91:c4:08:92:a9:cf:d1:72:1d:59:3e:9e: d7:96:8e:9a:dc:06:ea:72:b5:a0:04:f0:35:90:43:62:df:57: 17:bf:90:d1:3c:98:ba:df:56:fa:bc:0f:a3:e6:52:2b:05:e2: 9b:cc:52:10:76:5b:f1:9d:2a:bb:0e:1d:76:a5:5f:f7:0a:89: 52:49:84:db:5d:33:1e:3d:1e:8c:ab:2a:4c:d8:13:a2:39:9f: 90:9b:12:64:23:15:2e:61:e5:e7:a7:b5:54:d7:a2:57:d3:1d: 9d:44:0c:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O92VWeg7h18bb50gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MjIzZmZlNzMtNTE1Ni00MDZhLTg3OTEtZGNmYjkxYTg1YTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFqwWVuP6jYrIIyBlfMZb81twy4ueIe34bbT +hDPTxPp2vrMCtWIkb40BGoxtzp0I9gAUSoEeCwGiQY7TchCDkunZdC6lka+hTkd yqEcgE0+sAoVSqk+rNozucV6vNVmyOlO+Zdk/Dtozertn0e0/uGcFbUspMhqczW7 DTbZRTvfbkWhXya5RZvkk45d3m8xvhHbSHLI7RS64tsWf/L7rTAm3KcOOgM0ckYu m8jMTVFoapzKyZS7ExVf6D+moDpRiyQOZbLm2umCARXampeH9pf9V8fCyaRPyC3Y JQq6IT0WZP395kIGMnJfTkbn6Fl6p00Ft8hi7ZCaaCCdLealhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOrK3xeqRYgTZ3UnmatospPZt6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDY4YzYzZGUtNDFlNS0z NzlkLWI5M2YtZTgyMjU4NTZhMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSemAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq3LnXvZMN12gx3Kpd3g5Kg9oN9N0Mzj0cTvpRhySIoG6wHB//I1kvB SzySkItHC2NwQmaEbVcFUXVfZduSSq68aq/YjMdhYsDes3yNsKhOx7emvNSvnjCk 6Xs3rXGfAHf4MRV21h9O6BYL2t4MZxw8oLLPu8p5ea/6s/96YMJ8ubYQZ3AJRmca e3KUbWW1siI2gc/jyZHECJKpz9FyHVk+nteWjprcBupytaAE8DWQQ2LfVxe/kNE8 mLrfVvq8D6PmUisF4pvMUhB2W/GdKrsOHXalX/cKiVJJhNtdMx49HoyrKkzYE6I5 n5CbEmQjFS5h5eentVTXolfTHZ1EDKg= -----END CERTIFICATE-----Generated at Tue Apr 21 19:17:29 2026 by rpki-client