$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2afff78b-9d3a-3b43-b250-843e3492ae3e.roa File: 2afff78b-9d3a-3b43-b250-843e3492ae3e.roa (raw, json) Hash identifier: ONfdDCCFoYRcs+MFdMrhAFDn4iPkh+0dRoT+oKM88kM= Subject key identifier: 32:DF:B6:29:73:4E:35:AB:5E:3E:79:42:3B:E9:F5:65:CF:FF:9A:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF5C449D9DCCF46D25F0200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2afff78b-9d3a-3b43-b250-843e3492ae3e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33659 IP address blocks: 73.196.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:c4:49:d9:dc:cf:46:d2:5f:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=134094d5-2578-4c89-af46-18bb5a80349d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:67:cc:d4:86:df:6b:77:07:0a:bc:54:88:d9: cd:6e:d3:5f:b8:1d:24:8b:89:d8:66:17:7c:c5:6c: 8c:8d:a0:88:07:b0:ea:42:32:54:7f:a0:89:53:71: c9:22:90:c8:8a:86:16:66:dd:54:c7:e9:16:18:86: 44:1d:8d:e0:3c:da:db:03:71:cc:76:5f:e4:d5:e1: 0b:c3:6e:20:ae:cf:ed:21:64:6c:b5:57:8e:42:1a: 0f:37:e7:66:07:2f:e5:d1:1b:23:90:98:5e:52:59: 88:85:40:0f:a5:2f:34:66:59:20:a0:4b:51:c2:51: 8e:88:65:a3:da:28:32:3c:85:2e:81:b2:a7:f8:dc: 63:e5:90:21:41:9d:4a:e3:64:7c:9c:79:b8:96:aa: 33:38:fd:cf:82:05:17:7d:f5:9c:3d:50:9a:47:3c: 79:45:f4:f4:6c:27:5c:8e:7a:78:e9:09:e0:50:13: 34:36:97:4b:27:d0:10:ca:d6:ba:b9:4e:43:47:d8: 2e:34:1e:07:cf:76:f7:c7:6c:90:36:4c:76:f2:4a: 99:32:54:a8:b9:3c:ed:c4:dd:5d:05:b2:9b:68:6e: f6:1a:fd:94:e9:cc:0f:f3:63:65:0f:07:d3:5f:4d: 6c:df:03:fe:e4:5f:2b:e3:c8:fe:91:1a:a1:db:f3: 21:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DF:B6:29:73:4E:35:AB:5E:3E:79:42:3B:E9:F5:65:CF:FF:9A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2afff78b-9d3a-3b43-b250-843e3492ae3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.196.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:16:12:0e:30:40:4d:7f:ab:b3:0c:c3:9d:9e:aa:9c:d2:d4: b0:24:67:9a:1a:02:d4:18:a1:01:65:32:fd:a8:62:1d:cd:44: e3:6a:16:c7:73:5f:68:28:c5:eb:14:af:c4:f8:08:6b:0b:f2: 4b:e8:62:89:43:57:1d:d2:9f:df:91:ad:04:6e:27:bb:a5:25: 66:2f:b3:b8:91:39:11:51:9c:95:05:92:b4:e4:ad:46:97:9e: 73:7c:65:26:b6:ea:a2:e6:c1:c6:0c:e0:3b:6d:ca:26:ea:7e: 7a:49:d6:7a:21:22:af:28:20:3b:31:8e:10:8d:de:78:12:61: 98:4e:fb:29:67:76:36:17:62:a4:e2:c8:8b:99:ba:1c:3c:b9: a8:4f:98:f1:b1:89:6a:99:a1:c0:98:39:0a:4f:32:93:7e:ea: 10:0d:fa:f6:1c:15:90:88:3a:24:ef:31:e2:92:1b:c6:50:01: cd:c0:75:40:d5:4a:a8:b1:ae:10:3b:17:9a:20:5f:3d:44:20: 3e:75:d3:06:f2:ab:6f:0d:d1:16:27:c1:38:c2:eb:0e:28:44: eb:a4:b9:69:ea:02:8c:9f:58:73:ca:93:4f:d2:4b:eb:82:52: e6:ca:1e:af:ef:fa:5d:5d:e7:a0:76:3c:4c:ef:91:31:af:07: f5:93:5a:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9cRJ2dzPRtJfAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MTM0MDk0ZDUtMjU3OC00Yzg5LWFmNDYtMThiYjVhODAzNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2fM1Ibfa3cHCrxUiNnNbtNfuB0ki4nYZhd8 xWyMjaCIB7DqQjJUf6CJU3HJIpDIioYWZt1Ux+kWGIZEHY3gPNrbA3HMdl/k1eEL w24grs/tIWRstVeOQhoPN+dmBy/l0RsjkJheUlmIhUAPpS80ZlkgoEtRwlGOiGWj 2igyPIUugbKn+Nxj5ZAhQZ1K42R8nHm4lqozOP3PggUXffWcPVCaRzx5RfT0bCdc jnp46QngUBM0NpdLJ9AQyta6uU5DR9guNB4Hz3b3x2yQNkx28kqZMlSouTztxN1d BbKbaG72Gv2U6cwP82NlDwfTX01s3wP+5F8r48j+kRqh2/MhoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLftilzTjWrXj55Qjvp9WXP/5rTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmFmZmY3OGItOWQzYS0z YjQzLWIyNTAtODQzZTM0OTJhZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScSiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIWEg4wQE1/q7MMw52eqpzS1LAkZ5oaAtQYoQFlMv2oYh3NRONqFsdz X2goxesUr8T4CGsL8kvoYolDVx3Sn9+RrQRuJ7ulJWYvs7iRORFRnJUFkrTkrUaX nnN8ZSa26qLmwcYM4DttyibqfnpJ1nohIq8oIDsxjhCN3ngSYZhO+ylndjYXYqTi yIuZuhw8uahPmPGxiWqZocCYOQpPMpN+6hAN+vYcFZCIOiTvMeKSG8ZQAc3AdUDV SqixrhA7F5ogXz1EID510wbyq28N0RYnwTjC6w4oROukuWnqAoyfWHPKk0/SS+uC UubKHq/v+l1d56B2PEzvkTGvB/WTWkU= -----END CERTIFICATE-----Generated at Tue Apr 21 21:40:29 2026 by rpki-client