$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/250a2f01-de35-31a8-8bca-415a3c221a78.roa File: 250a2f01-de35-31a8-8bca-415a3c221a78.roa (raw, json) Hash identifier: BCMI/1VEDaHYKDa5GLthr/cSpFci0IWG3XbixZZcpBo= Subject key identifier: 89:A6:BB:9B:6D:DB:7C:87:E9:73:96:7E:4B:D4:CA:92:15:1B:B9:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF8D0D083574B0ACA72B6E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/250a2f01-de35-31a8-8bca-415a3c221a78.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 73.223.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:d0:d0:83:57:4b:0a:ca:72:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=1ee8fd59-0961-4551-ade7-6701e5f7be8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:44:e5:fd:99:50:46:57:6d:44:10:9e:bc:91: a0:f2:c1:cd:78:f0:a7:1d:2a:d5:66:c6:14:c9:79: cf:a1:99:3e:6a:ac:ea:12:2d:1a:b4:14:10:3e:48: 4d:72:f3:b1:a6:b0:37:fb:bf:54:e5:b3:ba:36:b0: c5:23:72:e2:b6:d9:36:2d:e9:21:02:2c:dc:0d:b0: 0c:9f:e4:54:5c:0e:2a:fb:1e:ab:7d:f6:7f:d9:f9: 08:ba:54:8b:01:b8:a4:0d:4e:ec:78:21:b4:ed:52: e7:1b:ab:d3:b1:36:ad:f5:77:36:fa:8c:e3:be:c6: e5:44:70:24:f0:d3:33:61:c8:04:30:73:24:bf:c4: 21:d6:7b:4d:85:21:67:8c:dc:49:3b:96:51:eb:59: 9c:c1:82:4a:e7:cf:85:10:48:ea:ca:2a:14:8e:14: 4e:7c:41:4b:76:9a:fc:88:46:91:32:95:41:83:0a: a5:4a:ca:fa:81:40:d4:b8:20:9b:e2:ea:52:61:2a: fb:0d:9a:77:65:a7:86:54:93:66:a2:d6:91:22:68: ea:62:7c:e5:15:c7:77:49:c2:fc:25:b1:7f:af:bf: cd:91:18:42:f5:57:18:46:f4:ab:55:73:56:fe:6e: 4b:18:93:19:ee:d0:24:8f:82:e4:cb:3e:17:25:fd: 9d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A6:BB:9B:6D:DB:7C:87:E9:73:96:7E:4B:D4:CA:92:15:1B:B9:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/250a2f01-de35-31a8-8bca-415a3c221a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:be:ab:2f:e0:e5:15:a5:6d:43:61:1b:ed:13:62:9f:b7:88: 93:eb:85:c0:e0:c9:29:92:a2:41:d9:3b:80:b5:c5:08:78:ab: 93:43:a7:76:93:03:b5:9a:dc:3d:48:39:8c:ce:2b:55:89:a3: 1b:16:df:10:a5:4e:48:77:a6:f0:a7:c6:19:f4:c6:52:98:00: ee:00:e8:a9:32:17:8f:e1:ea:74:50:e4:c5:2d:b1:2a:55:35: dd:38:74:24:31:56:aa:cd:ba:4c:8c:95:4d:71:57:a6:75:01: f3:18:14:d6:79:1d:c8:9d:76:20:df:44:d7:f4:4d:e8:31:93: e0:5b:b6:4e:d0:ff:03:23:ff:79:d9:76:a3:a1:a6:c9:07:58: 85:57:2b:66:94:22:52:2a:9d:5d:73:7d:dd:ed:6c:8e:c0:6d: b1:98:20:3b:2e:5c:b4:67:94:bb:4f:53:8b:c4:69:09:61:66: 66:bb:9b:61:91:4b:f9:18:6e:0b:7e:f3:7a:13:6b:7e:82:8b: b2:19:52:c8:ce:48:6e:4a:7a:b5:53:05:69:8b:62:d6:48:a4: bd:c0:3a:18:6f:02:52:2d:fd:47:f3:f8:d8:33:dc:e6:21:68: f4:4a:fc:e2:37:08:a1:92:3d:cb:0d:5f:a3:4e:53:72:75:cb: 77:b6:33:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+NDQg1dLCspytuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MWVlOGZkNTktMDk2MS00NTUxLWFkZTctNjcwMWU1ZjdiZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UTl/ZlQRldtRBCevJGg8sHNePCnHSrVZsYU yXnPoZk+aqzqEi0atBQQPkhNcvOxprA3+79U5bO6NrDFI3Littk2LekhAizcDbAM n+RUXA4q+x6rffZ/2fkIulSLAbikDU7seCG07VLnG6vTsTat9Xc2+ozjvsblRHAk 8NMzYcgEMHMkv8Qh1ntNhSFnjNxJO5ZR61mcwYJK58+FEEjqyioUjhROfEFLdpr8 iEaRMpVBgwqlSsr6gUDUuCCb4upSYSr7DZp3ZaeGVJNmotaRImjqYnzlFcd3ScL8 JbF/r7/NkRhC9VcYRvSrVXNW/m5LGJMZ7tAkj4Lkyz4XJf2dvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImmu5tt23yH6XOWfkvUypIVG7lUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjUwYTJmMDEtZGUzNS0z MWE4LThiY2EtNDE1YTNjMjIxYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC+qy/g5RWlbUNhG+0TYp+3iJPrhcDgySmSokHZO4C1xQh4q5NDp3aT A7Wa3D1IOYzOK1WJoxsW3xClTkh3pvCnxhn0xlKYAO4A6KkyF4/h6nRQ5MUtsSpV Nd04dCQxVqrNukyMlU1xV6Z1AfMYFNZ5HciddiDfRNf0Tegxk+Bbtk7Q/wMj/3nZ dqOhpskHWIVXK2aUIlIqnV1zfd3tbI7AbbGYIDsuXLRnlLtPU4vEaQlhZma7m2GR S/kYbgt+83oTa36Ci7IZUsjOSG5KerVTBWmLYtZIpL3AOhhvAlIt/Ufz+Ngz3OYh aPRK/OI3CKGSPcsNX6NOU3J1y3e2MzI= -----END CERTIFICATE-----Generated at Tue Apr 21 19:25:12 2026 by rpki-client