$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3425c5ac-d6ee-35b0-9fa0-a476b7778472.roa File: 3425c5ac-d6ee-35b0-9fa0-a476b7778472.roa (raw, json) Hash identifier: ovVBf9a0VZqsrLVlqSlwfS0o2CFQVsoUqSPpuBi+jO4= Subject key identifier: B0:E3:33:73:4D:8A:45:E8:8C:AC:41:A7:23:B7:6B:87:A8:D5:98:36 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF5BED56C476402DC091F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3425c5ac-d6ee-35b0-9fa0-a476b7778472.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33659 IP address blocks: 73.193.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:be:d5:6c:47:64:02:dc:09:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9df4da54-5c3a-45d8-bf6d-5c7d028ec805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:74:26:a8:9c:89:72:b9:a3:a4:e6:7b:26:4b: 27:35:fa:1c:88:54:b5:fa:9f:f5:0a:c7:93:c6:61: 6d:7a:d6:9b:92:df:2e:07:b4:cf:5c:b2:fc:57:5f: 02:0e:d4:0c:ad:f8:0c:93:a4:25:9c:ba:b0:2f:21: 3f:30:59:94:fe:f3:a2:13:3d:cf:68:75:68:2f:03: ac:e3:c7:36:90:7e:24:db:d6:f0:f5:cc:6e:e6:ce: b0:22:75:05:aa:54:b3:14:06:c8:cb:ea:62:12:73: 45:dc:57:40:5b:29:bf:51:9c:2a:1e:bd:34:37:fa: a9:c4:f3:98:38:70:e1:05:e4:e1:a5:2e:84:10:86: fc:6f:65:9c:66:24:27:5c:08:6e:5a:d7:50:59:0c: 20:91:5d:31:b0:12:98:98:f2:bb:ff:2d:ac:2a:ad: a9:4c:f3:a2:8e:b0:c2:e7:f6:97:cb:08:8b:38:dc: a8:ab:43:21:ad:4a:23:b8:7b:eb:ec:98:2b:74:c8: f3:21:e9:9f:be:23:66:9a:01:2c:e8:8d:3e:23:3d: ca:52:4c:1f:73:29:88:8b:6d:c9:31:ab:68:16:4e: c6:90:4a:9f:5c:c2:ae:74:5a:6a:7b:60:48:b4:fb: a5:d7:ae:f5:2d:9a:ff:61:55:18:d1:3d:06:18:20: 89:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E3:33:73:4D:8A:45:E8:8C:AC:41:A7:23:B7:6B:87:A8:D5:98:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3425c5ac-d6ee-35b0-9fa0-a476b7778472.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.193.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:31:6a:44:c4:df:d6:d1:be:04:10:0f:61:33:5b:19:1d:98: 6e:d9:3f:54:86:66:58:3f:48:49:54:62:ce:07:f2:17:d7:a4: cd:6c:86:8a:65:86:3b:d0:26:7b:66:b9:32:08:e8:fb:e4:37: 46:cc:d5:8d:43:6b:53:88:01:63:37:a6:4f:db:10:7a:9d:8f: 2c:03:c8:81:92:2a:cb:02:d2:8d:07:71:93:b5:b6:57:12:d7: b4:49:27:24:b3:ca:99:06:90:e0:62:ca:9f:f3:22:dd:07:3f: d3:87:ab:ce:c3:14:3d:8d:25:e7:46:d0:da:51:50:68:00:b3: 96:23:62:b6:3a:fc:db:13:20:dd:f1:fc:26:d6:56:c0:f9:e3: ca:45:5a:f7:6c:a4:13:b6:a8:70:01:dd:4c:7d:fb:f4:07:52: 50:e4:b2:3b:17:87:d1:1f:9b:76:91:f8:8f:3d:5d:56:d4:3b: c8:8c:9d:c1:0e:ec:3a:c0:a4:48:10:ef:63:1b:b4:6d:ba:ef: 0d:27:c3:a7:e5:12:fb:b7:38:74:44:2d:11:06:e3:35:8f:7f: b5:32:94:cf:65:c5:3d:22:9b:25:f9:0f:d1:8d:9c:c9:8b:23: 90:3e:15:7f:da:ec:c7:2b:d0:ea:de:d4:6f:a4:05:fa:e2:ae: 38:4c:90:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9b7VbEdkAtwJH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWRmNGRhNTQtNWMzYS00NWQ4LWJmNmQtNWM3ZDAyOGVjODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HQmqJyJcrmjpOZ7JksnNfociFS1+p/1CseT xmFtetabkt8uB7TPXLL8V18CDtQMrfgMk6QlnLqwLyE/MFmU/vOiEz3PaHVoLwOs 48c2kH4k29bw9cxu5s6wInUFqlSzFAbIy+piEnNF3FdAWym/UZwqHr00N/qpxPOY OHDhBeThpS6EEIb8b2WcZiQnXAhuWtdQWQwgkV0xsBKYmPK7/y2sKq2pTPOijrDC 5/aXywiLONyoq0MhrUojuHvr7JgrdMjzIemfviNmmgEs6I0+Iz3KUkwfcymIi23J MatoFk7GkEqfXMKudFpqe2BItPul1671LZr/YVUY0T0GGCCJNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDjM3NNikXojKxBpyO3a4eo1Zg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQyNWM1YWMtZDZlZS0z NWIwLTlmYTAtYTQ3NmI3Nzc4NDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANIxakTE39bRvgQQD2EzWxkdmG7ZP1SGZlg/SElUYs4H8hfXpM1shopl hjvQJntmuTII6PvkN0bM1Y1Da1OIAWM3pk/bEHqdjywDyIGSKssC0o0HcZO1tlcS 17RJJySzypkGkOBiyp/zIt0HP9OHq87DFD2NJedG0NpRUGgAs5YjYrY6/NsTIN3x /CbWVsD548pFWvdspBO2qHAB3Ux9+/QHUlDksjsXh9Efm3aR+I89XVbUO8iMncEO 7DrApEgQ72MbtG267w0nw6flEvu3OHRELREG4zWPf7UylM9lxT0imyX5D9GNnMmL I5A+FX/a7Mcr0Ore1G+kBfrirjhMkEM= -----END CERTIFICATE-----Generated at Tue Apr 21 19:28:04 2026 by rpki-client