$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1296e9fc-5f84-32da-9b7f-82cfa2a9a1c9.roa File: 1296e9fc-5f84-32da-9b7f-82cfa2a9a1c9.roa (raw, json) Hash identifier: BB4ChWtjeCQRatZZkro/Iu9eQfapxnws6dc50JSEK6E= Subject key identifier: 1E:34:2E:53:D3:2A:A4:66:72:BB:8D:0B:33:CC:01:77:AE:75:56:92 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF649D4E5D6949BF2FE11A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1296e9fc-5f84-32da-9b7f-82cfa2a9a1c9.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 73.209.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:49:d4:e5:d6:94:9b:f2:fe:11:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=46cf89ba-597f-4f76-bbf3-2069194c2ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:07:eb:61:37:28:62:da:e1:e4:6a:77:30: 65:bd:30:dc:6f:6b:b4:70:40:b1:a7:92:c3:9e:23: 03:65:c9:23:83:19:22:d9:9e:93:2c:43:08:1e:c5: 25:6c:81:95:47:3a:e2:d2:bf:80:1f:ee:bb:fc:e5: 3e:53:48:92:aa:5b:a4:09:ef:1f:ba:e9:d5:d3:1c: 06:10:7c:2a:ee:9f:13:c9:ad:a8:b8:ac:d8:cf:9f: 2e:c1:17:de:98:04:5f:1c:26:27:4a:17:fb:c5:88: 7b:85:6c:7f:1b:7f:26:7f:77:78:76:a8:34:de:1a: ea:ed:b9:5b:3f:64:62:1f:39:09:c5:6f:09:60:5c: a9:05:cc:5e:c2:fd:7b:fe:c0:35:ba:65:7a:ce:8b: a8:cd:03:1f:ce:e3:39:9e:b2:8d:77:79:dd:aa:e4: d3:c8:1f:f8:6c:14:a0:b5:62:93:4a:b4:c2:7a:66: ba:e0:01:7c:46:73:05:9d:69:57:de:21:f0:1a:a6: 2a:58:88:c0:01:f2:3c:8b:c5:87:ba:50:13:37:db: c5:d0:6c:b1:58:ba:17:16:9b:c8:44:8d:d7:77:9c: c5:39:1b:5c:42:94:9b:81:46:ed:fe:10:f7:e7:55: 55:df:cd:cd:34:26:34:cc:bd:c6:d1:ab:e2:06:65: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:34:2E:53:D3:2A:A4:66:72:BB:8D:0B:33:CC:01:77:AE:75:56:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1296e9fc-5f84-32da-9b7f-82cfa2a9a1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:90:ac:9b:67:c9:74:5c:0f:85:45:dd:82:66:5c:8e:97:b9: 86:b5:96:17:60:98:8e:8f:71:19:6d:db:5d:98:15:fd:d4:22: 55:c3:2d:7c:40:c2:7e:16:3a:ae:63:39:13:fc:3c:69:1e:10: 0f:86:f7:0a:4d:a7:60:49:6b:77:96:84:87:fe:3b:11:b3:6b: 8c:09:72:c8:b6:92:be:59:96:5f:dd:a3:ee:97:d4:b8:8c:57: 9c:ef:1a:b5:91:c8:a7:be:f5:7b:43:ef:b8:71:26:45:8f:75: 8e:e7:af:14:b3:21:21:13:0a:03:2a:db:31:31:99:72:15:91: 73:f1:f4:81:2c:0b:3e:f4:07:ef:81:55:dc:44:55:d2:bc:9a: be:0c:f3:8d:33:80:36:0d:05:00:b5:c4:71:e7:48:43:e2:72: 46:b0:e4:17:19:77:73:43:12:b8:a1:4e:14:29:e5:33:f8:66: d6:4e:9c:78:a1:bc:af:dd:cc:2a:de:30:26:da:f9:f4:b5:c7: 6c:16:f5:b6:ff:d1:74:7b:1b:7a:8b:d1:10:4c:ba:cb:90:44: 38:54:e2:23:24:ff:34:bf:3b:7c:95:fc:29:42:4f:1c:82:ef: 81:6e:f8:31:82:3e:22:ca:64:f2:42:4d:3d:7f:8d:c0:2f:39: 33:8e:27:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9knU5daUm/L+EaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NDZjZjg5YmEtNTk3Zi00Zjc2LWJiZjMtMjA2OTE5NGMyZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh50H62E3KGLa4eRqdzBlvTDcb2u0cECxp5LD niMDZckjgxki2Z6TLEMIHsUlbIGVRzri0r+AH+67/OU+U0iSqlukCe8fuunV0xwG EHwq7p8Tya2ouKzYz58uwRfemARfHCYnShf7xYh7hWx/G38mf3d4dqg03hrq7blb P2RiHzkJxW8JYFypBcxewv17/sA1umV6zouozQMfzuM5nrKNd3ndquTTyB/4bBSg tWKTSrTCema64AF8RnMFnWlX3iHwGqYqWIjAAfI8i8WHulATN9vF0GyxWLoXFpvI RI3Xd5zFORtcQpSbgUbt/hD351VV383NNCY0zL3G0aviBmWAjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB40LlPTKqRmcruNCzPMAXeudVaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTI5NmU5ZmMtNWY4NC0z MmRhLTliN2YtODJjZmEyYTlhMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdHmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANuQrJtnyXRcD4VF3YJmXI6XuYa1lhdgmI6PcRlt212YFf3UIlXDLXxA wn4WOq5jORP8PGkeEA+G9wpNp2BJa3eWhIf+OxGza4wJcsi2kr5Zll/do+6X1LiM V5zvGrWRyKe+9XtD77hxJkWPdY7nrxSzISETCgMq2zExmXIVkXPx9IEsCz70B++B VdxEVdK8mr4M840zgDYNBQC1xHHnSEPickaw5BcZd3NDErihThQp5TP4ZtZOnHih vK/dzCreMCba+fS1x2wW9bb/0XR7G3qL0RBMusuQRDhU4iMk/zS/O3yV/ClCTxyC 74Fu+DGCPiLKZPJCTT1/jcAvOTOOJwU= -----END CERTIFICATE-----Generated at Tue Apr 21 22:54:19 2026 by rpki-client