$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c367be3-4d25-3766-ba3f-0068ac2e8e1e.roa File: 2c367be3-4d25-3766-ba3f-0068ac2e8e1e.roa (raw, json) Hash identifier: lFgUDwE9MdkxO8uCJP1Wd9nlaTOMJZlfFyq9vw9W1Oc= Subject key identifier: E4:6F:CE:70:98:18:F3:0B:98:4F:95:FF:84:41:53:A1:44:B0:CE:AE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6C7AF9AC7E82E58F24A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c367be3-4d25-3766-ba3f-0068ac2e8e1e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 73.231.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:c7:af:9a:c7:e8:2e:58:f2:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=341683b3-848e-494a-b69b-d1482a402202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:9a:51:fe:39:72:a5:81:f6:c6:f0:13:2b: e8:95:56:72:3b:6f:4a:39:ec:bb:b2:a8:16:65:40: 12:50:1b:7e:85:2e:d5:82:b7:e3:69:9d:d5:c7:36: fb:b8:3e:50:9d:5b:10:9b:8e:2b:e8:f9:f1:d9:ec: f2:ca:3d:04:3a:82:3e:af:d4:9a:bf:68:6d:b9:46: b3:a1:73:33:f5:38:3c:92:23:6a:32:cd:1a:5f:7f: 80:07:f8:de:77:44:e5:95:bc:02:11:66:c0:ea:5d: 68:94:59:a8:a0:f3:d0:29:fd:76:84:89:15:04:2d: 40:ed:1d:3d:36:dd:d9:66:69:9f:29:db:ee:62:0d: 80:7f:38:c0:10:f5:17:91:d8:54:63:bd:c8:05:0b: 07:60:06:64:67:34:3a:ad:81:16:77:d4:66:a1:ff: 06:a4:e7:ae:99:81:be:43:6a:fa:ea:7b:41:7b:17: 2c:5a:32:4f:31:a7:a6:1e:55:9e:68:0b:eb:bf:f3: ac:f1:98:86:e7:af:28:33:16:65:8e:c4:53:48:cd: fd:37:fe:00:76:28:60:ab:ed:7f:2d:bf:1f:9e:e0: 68:33:85:e3:0a:6f:b3:85:5c:03:b6:39:8d:c4:25: 12:16:a8:81:be:2d:d2:39:0c:bd:e5:78:56:5e:3a: 7d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6F:CE:70:98:18:F3:0B:98:4F:95:FF:84:41:53:A1:44:B0:CE:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c367be3-4d25-3766-ba3f-0068ac2e8e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.231.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:28:4e:df:19:79:35:b7:6e:18:69:d0:50:dd:99:6c:19:4b: c5:c0:0b:d5:7d:07:1f:71:31:c0:ce:1e:2a:f9:29:d3:ad:5a: 52:b6:0b:3e:fd:fa:32:68:26:d4:46:30:39:4c:61:ef:6d:24: 91:86:e4:36:db:f0:fe:fc:c5:1f:29:4c:5b:8b:94:aa:04:0f: a8:51:44:9f:79:68:4f:97:7b:bf:db:a0:20:fd:3e:80:dd:24: a5:7f:10:04:9b:16:0f:78:b0:b3:64:26:df:e5:a3:d0:a5:d3: bc:f6:40:50:70:1b:55:26:7d:93:2e:b4:ba:69:f1:c3:1e:45: 17:05:52:d9:cd:ee:cc:b5:ad:c0:af:07:cd:89:a2:d5:24:53: 88:75:ff:c5:9d:48:52:9b:40:b3:b6:45:4b:2a:85:8a:d9:31: b2:45:4e:c0:92:c8:49:77:00:8a:52:d9:84:a5:70:71:55:f1: 64:7c:63:02:43:f1:62:4f:1d:e9:54:1c:a4:3a:d1:0c:ff:5d: 78:96:ea:42:b0:83:c3:87:3b:a3:78:43:4f:05:1a:a9:01:78: 15:07:90:c8:92:6f:a6:9c:a5:80:79:58:d7:a1:a2:62:4f:41: 14:c8:0e:e9:3c:fa:73:82:94:47:4f:47:2c:e3:03:e8:a2:1a: c4:3c:cf:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9sevmsfoLljySkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MzQxNjgzYjMtODQ4ZS00OTRhLWI2OWItZDE0ODJhNDAyMjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo+aUf45cqWB9sbwEyvolVZyO29KOey7sqgW ZUASUBt+hS7VgrfjaZ3Vxzb7uD5QnVsQm44r6Pnx2ezyyj0EOoI+r9Sav2htuUaz oXMz9Tg8kiNqMs0aX3+AB/jed0TllbwCEWbA6l1olFmooPPQKf12hIkVBC1A7R09 Nt3ZZmmfKdvuYg2AfzjAEPUXkdhUY73IBQsHYAZkZzQ6rYEWd9Rmof8GpOeumYG+ Q2r66ntBexcsWjJPMaemHlWeaAvrv/Os8ZiG568oMxZljsRTSM39N/4Adihgq+1/ Lb8fnuBoM4XjCm+zhVwDtjmNxCUSFqiBvi3SOQy95XhWXjp9WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORvznCYGPMLmE+V/4RBU6FEsM6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmMzNjdiZTMtNGQyNS0z NzY2LWJhM2YtMDA2OGFjMmU4ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIoTt8ZeTW3bhhp0FDdmWwZS8XAC9V9Bx9xMcDOHir5KdOtWlK2Cz79 +jJoJtRGMDlMYe9tJJGG5Dbb8P78xR8pTFuLlKoED6hRRJ95aE+Xe7/boCD9PoDd JKV/EASbFg94sLNkJt/lo9Cl07z2QFBwG1UmfZMutLpp8cMeRRcFUtnN7sy1rcCv B82JotUkU4h1/8WdSFKbQLO2RUsqhYrZMbJFTsCSyEl3AIpS2YSlcHFV8WR8YwJD 8WJPHelUHKQ60Qz/XXiW6kKwg8OHO6N4Q08FGqkBeBUHkMiSb6acpYB5WNehomJP QRTIDuk8+nOClEdPRyzjA+iiGsQ8z3I= -----END CERTIFICATE-----Generated at Tue Apr 21 20:20:31 2026 by rpki-client