$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2217d1a8-bd7b-3d5e-b1e5-1c8e924a8a01.roa File: 2217d1a8-bd7b-3d5e-b1e5-1c8e924a8a01.roa (raw, json) Hash identifier: pUZ5oa+gKB9RpnuUBazBu3Z/mGMW3n/nwhtLrtXC89w= Subject key identifier: BF:9E:95:9D:7F:98:B4:A4:75:23:E9:9E:A0:DC:91:34:A4:32:DC:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF65841299597CA5771BE20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2217d1a8-bd7b-3d5e-b1e5-1c8e924a8a01.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 73.44.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:58:41:29:95:97:ca:57:71:be:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=e41f15a9-be31-40dd-9aa2-b2f921fcf2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b1:86:b6:d9:74:3d:0a:32:6c:12:e3:bf:ff: d1:8b:89:55:fc:c2:ec:74:5a:a9:93:56:7b:5f:27: 9a:eb:5d:ee:07:56:46:22:58:89:b7:21:09:3f:80: d3:fb:19:db:1b:8a:53:e0:a9:97:ed:eb:08:5c:3a: c3:66:b7:af:83:5e:fa:43:ac:3b:b0:0d:94:29:39: 63:70:ae:27:dd:4b:e6:00:f9:93:2a:80:34:cc:71: c1:87:6b:de:32:0c:3a:84:69:0f:6f:90:50:2c:e8: b5:bd:1a:45:16:d7:7b:ef:06:3d:16:e5:b2:18:54: 08:0f:43:71:10:8e:53:ce:61:e2:1e:84:ab:a7:bf: 9b:71:fe:03:c8:17:8d:6a:64:f3:44:1d:ee:74:f6: 8c:62:f2:d5:6e:66:fa:17:51:e2:6a:f6:82:1f:70: 0d:e2:8c:b8:26:b8:7a:63:60:2c:8d:27:58:dd:23: 3c:cd:65:e5:7b:42:06:3e:0f:f6:a9:88:bc:d8:dd: 29:6b:74:22:1b:5e:0d:c3:c1:01:33:6f:54:dc:f4: b4:1e:f7:99:74:3a:8a:e2:83:4f:b5:47:9c:33:5f: f8:cc:13:0f:85:8c:3e:d0:de:54:8c:c3:ee:f4:63: 1f:45:0d:8e:bd:b3:c0:b1:90:d0:15:eb:d3:5e:d2: a1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9E:95:9D:7F:98:B4:A4:75:23:E9:9E:A0:DC:91:34:A4:32:DC:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2217d1a8-bd7b-3d5e-b1e5-1c8e924a8a01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.44.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:be:f0:6c:f2:30:3b:8b:d2:a6:ba:ae:3e:9b:ee:c6:06:10: 2f:66:87:3f:68:9d:3b:ed:83:2b:48:5f:9c:3c:ae:2d:7f:50: c4:72:87:ef:95:f8:c3:11:de:f3:0b:c9:f4:67:06:e4:14:c6: 38:77:d1:c1:ad:8a:c5:05:a9:3f:b4:f5:98:d5:dd:66:50:91: 17:57:d9:2d:9a:d7:82:a1:df:59:fb:5f:3a:1d:e1:f6:3d:1c: 79:4c:eb:52:f5:9b:ac:90:89:7b:5e:e0:a7:ae:14:60:e3:56: 98:86:a2:14:f1:33:bd:f7:6f:81:35:2b:2c:68:d9:63:b1:74: 08:70:20:66:d7:d0:f0:4e:6d:7b:49:30:f4:0d:45:a8:22:5a: bf:3e:b6:34:fa:29:dc:14:2b:ac:ca:a4:d0:d2:1d:4d:9d:98: 89:39:1b:da:16:2b:ef:e2:e5:00:b1:92:a5:1c:3e:d8:b1:5a: 5c:b6:c8:94:ab:1b:2d:41:b2:76:e6:f9:74:e6:52:f5:3b:b1: 4f:e4:1f:e9:61:d9:82:67:85:8d:9e:2f:27:05:d4:0e:00:48: ce:a7:75:2b:9d:14:5a:4a:ee:04:c8:63:d5:1e:b0:4c:fd:92: ff:ca:bc:49:33:9c:e2:84:ed:ec:2a:ad:dd:5b:8c:c5:da:3c: 33:09:c1:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9lhBKZWXyldxviAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZTQxZjE1YTktYmUzMS00MGRkLTlhYTItYjJmOTIxZmNmMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7GGttl0PQoybBLjv//Ri4lV/MLsdFqpk1Z7 Xyea613uB1ZGIliJtyEJP4DT+xnbG4pT4KmX7esIXDrDZrevg176Q6w7sA2UKTlj cK4n3UvmAPmTKoA0zHHBh2veMgw6hGkPb5BQLOi1vRpFFtd77wY9FuWyGFQID0Nx EI5TzmHiHoSrp7+bcf4DyBeNamTzRB3udPaMYvLVbmb6F1HiavaCH3AN4oy4Jrh6 Y2AsjSdY3SM8zWXle0IGPg/2qYi82N0pa3QiG14Nw8EBM29U3PS0HveZdDqK4oNP tUecM1/4zBMPhYw+0N5UjMPu9GMfRQ2OvbPAsZDQFevTXtKhGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+elZ1/mLSkdSPpnqDckTSkMtxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjIxN2QxYTgtYmQ3Yi0z ZDVlLWIxZTUtMWM4ZTkyNGE4YTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSwKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm+8GzyMDuL0qa6rj6b7sYGEC9mhz9onTvtgytIX5w8ri1/UMRyh++V +MMR3vMLyfRnBuQUxjh30cGtisUFqT+09ZjV3WZQkRdX2S2a14Kh31n7Xzod4fY9 HHlM61L1m6yQiXte4KeuFGDjVpiGohTxM733b4E1Kyxo2WOxdAhwIGbX0PBObXtJ MPQNRagiWr8+tjT6KdwUK6zKpNDSHU2dmIk5G9oWK+/i5QCxkqUcPtixWly2yJSr Gy1Bsnbm+XTmUvU7sU/kH+lh2YJnhY2eLycF1A4ASM6ndSudFFpK7gTIY9UesEz9 kv/KvEkznOKE7ewqrd1bjMXaPDMJwSQ= -----END CERTIFICATE-----Generated at Tue Apr 21 21:35:56 2026 by rpki-client