$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39873da3-8881-3459-ad71-33da20d3da5e.roa File: 39873da3-8881-3459-ad71-33da20d3da5e.roa (raw, json) Hash identifier: uTa/rYAeLN7FPhaUQSxrtYj0SCqIEPG2xKlWqztfEE0= Subject key identifier: B8:7E:04:85:B3:36:D1:23:7B:DC:D2:B3:9A:1A:3A:B0:42:D4:43:2F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6C03D97F9A4937E7A2BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39873da3-8881-3459-ad71-33da20d3da5e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 73.202.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:c0:3d:97:f9:a4:93:7e:7a:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=857b96fe-af57-486d-9d00-2bf0b56609ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a7:5f:04:7a:6c:0e:d9:39:97:80:eb:9c:d3: 46:5c:0d:c3:0d:d9:6a:70:cd:07:b7:60:26:6d:d9: e6:99:ac:da:50:fa:fb:9b:ad:a2:1e:87:70:d4:dd: 8c:e8:93:46:a5:4c:2b:d6:b0:b9:85:67:00:30:a7: 7f:76:5e:7f:e2:93:ad:ed:a1:9d:bf:e9:e0:df:30: f4:a9:a6:5a:52:70:43:74:df:39:69:88:e3:77:e6: 1e:0a:fa:d7:34:a9:d6:19:f0:8e:2b:29:5c:53:1c: 48:9f:99:de:f1:d2:bb:88:83:11:f0:10:04:91:c0: c5:80:9f:70:6f:c7:ad:46:59:78:72:d2:68:83:c9: 69:ae:a3:f9:67:cd:ec:b2:e4:c2:f7:c0:49:db:89: cb:60:82:0b:80:6e:97:e3:a4:b8:56:8b:80:7c:bc: 23:49:a2:29:89:e7:64:9e:4b:0b:f0:10:fc:c0:b5: 34:43:4c:ab:5c:0e:1a:56:12:4a:f3:8a:c4:4c:6e: 5d:aa:29:f0:ac:54:1b:b1:ed:c5:9b:fa:c7:41:9d: 28:29:97:14:de:7c:81:1c:02:c2:5b:23:24:0f:f3: 6a:7b:40:b6:1c:39:98:58:e1:bc:09:6b:15:f3:7d: d7:c5:64:29:42:24:e5:cc:9d:f6:7b:d2:45:c1:c0: a7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7E:04:85:B3:36:D1:23:7B:DC:D2:B3:9A:1A:3A:B0:42:D4:43:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39873da3-8881-3459-ad71-33da20d3da5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.202.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:93:84:7c:41:44:7a:70:41:7b:4d:09:1e:58:32:93:a0:b1: 7b:aa:7f:c6:77:9d:8b:60:83:2e:01:41:e1:ce:8f:01:22:53: 9b:8b:8f:fb:a7:13:9d:ee:a0:25:11:65:46:da:af:11:2c:fc: 25:2b:de:09:fc:6e:d1:39:3c:19:5a:d6:c1:90:bd:bb:0f:79: 5f:ca:6e:66:2d:36:ba:d5:92:f9:2d:a1:7e:8e:c1:01:9d:b6: d5:6a:ab:24:0e:94:6d:81:72:d3:e7:01:d5:28:3e:64:d3:b3: 99:a9:dc:cf:29:90:6b:58:c0:7b:48:c4:c8:27:be:59:23:5e: ef:21:6a:2f:49:57:c8:fe:40:1d:67:74:62:63:8a:cf:f0:b8: 87:57:57:81:cc:58:8c:88:51:19:81:61:34:63:10:62:65:d6: d5:e6:b0:a0:f6:90:e4:bd:96:84:c5:9a:6a:1e:57:3e:62:2c: bb:4b:36:71:cc:a5:49:7c:7d:19:d9:e5:ae:63:da:42:be:61: b8:ed:b4:c8:5d:62:a7:ac:47:d2:27:ed:39:ff:5f:d4:65:94: 84:e0:92:c2:98:47:45:3c:a3:fd:b9:3c:1b:fd:9c:27:44:97: 27:46:05:fd:e5:28:9b:b5:a5:c9:68:30:f3:94:ad:a5:b0:ba: 29:6e:7e:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9sA9l/mkk356K8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ODU3Yjk2ZmUtYWY1Ny00ODZkLTlkMDAtMmJmMGI1NjYwOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6dfBHpsDtk5l4DrnNNGXA3DDdlqcM0Ht2Am bdnmmazaUPr7m62iHodw1N2M6JNGpUwr1rC5hWcAMKd/dl5/4pOt7aGdv+ng3zD0 qaZaUnBDdN85aYjjd+YeCvrXNKnWGfCOKylcUxxIn5ne8dK7iIMR8BAEkcDFgJ9w b8etRll4ctJog8lprqP5Z83ssuTC98BJ24nLYIILgG6X46S4VouAfLwjSaIpiedk nksL8BD8wLU0Q0yrXA4aVhJK84rETG5dqinwrFQbse3Fm/rHQZ0oKZcU3nyBHALC WyMkD/Nqe0C2HDmYWOG8CWsV833XxWQpQiTlzJ32e9JFwcCnAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLh+BIWzNtEje9zSs5oaOrBC1EMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk4NzNkYTMtODg4MS0z NDU5LWFkNzEtMzNkYTIwZDNkYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCScp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2ThHxBRHpwQXtNCR5YMpOgsXuqf8Z3nYtggy4BQeHOjwEiU5uLj/un E53uoCURZUbarxEs/CUr3gn8btE5PBla1sGQvbsPeV/KbmYtNrrVkvktoX6OwQGd ttVqqyQOlG2BctPnAdUoPmTTs5mp3M8pkGtYwHtIxMgnvlkjXu8hai9JV8j+QB1n dGJjis/wuIdXV4HMWIyIURmBYTRjEGJl1tXmsKD2kOS9loTFmmoeVz5iLLtLNnHM pUl8fRnZ5a5j2kK+YbjttMhdYqesR9In7Tn/X9RllITgksKYR0U8o/25PBv9nCdE lydGBf3lKJu1pcloMPOUraWwuiluflQ= -----END CERTIFICATE-----Generated at Tue Apr 21 19:26:23 2026 by rpki-client