$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4226a0-d4c3-3369-b0bf-f0456fdda616.roa File: 3a4226a0-d4c3-3369-b0bf-f0456fdda616.roa (raw, json) Hash identifier: kP4um3N5CRrCS78v/eh/Dhp+sffJO9YNdBJDAVUtlkw= Subject key identifier: 46:A4:C9:7B:87:A6:6B:C9:F1:E8:97:98:56:D5:A0:94:57:A1:9E:A0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF5FA580CA30276C9E0DAE8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4226a0-d4c3-3369-b0bf-f0456fdda616.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33287 IP address blocks: 73.248.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:fa:58:0c:a3:02:76:c9:e0:da:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9d3aa469-202e-4006-9f89-992cc88a45e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5b:94:47:d2:c4:7e:fd:bd:49:a9:66:b5:dd: 4a:4a:ba:e1:b0:84:65:ac:7e:2c:75:d6:7b:c2:60: 62:3f:cf:32:d2:c5:b5:ff:00:b7:88:91:49:37:6b: 2d:a3:b4:76:3b:53:1f:27:cb:02:f4:41:ad:ce:3c: d4:26:db:54:33:67:dc:af:a8:bc:34:a0:df:34:b7: d2:1b:32:95:29:2d:6a:bf:9e:34:b0:04:3d:96:93: d4:32:94:46:8d:8c:51:26:7f:7c:10:2f:b9:d0:73: 1f:7e:31:0c:45:6f:5a:9a:ba:42:3d:9b:c9:eb:ff: 36:4f:57:37:69:8e:5b:1e:b7:a7:c0:29:76:4b:2f: 3d:9d:fc:29:56:da:2b:ca:59:9d:ef:dc:96:36:f4: 69:3b:b3:af:2c:6a:ca:42:55:31:5c:3b:26:1d:09: 42:61:51:58:f2:56:9c:24:58:27:37:d7:ad:12:fd: 6b:f8:b2:ec:89:f4:94:a0:8d:58:db:2b:d6:33:75: 3e:d4:d2:9a:24:ab:d5:51:08:dd:e7:f5:e7:c5:0b: 3c:67:0a:20:cc:4f:7a:f9:9d:e4:90:83:a5:38:f5: dd:f7:5e:60:42:09:c9:04:09:3c:bf:e4:21:87:a8: f7:ca:6f:9e:b8:07:18:52:2a:b1:ba:e7:cc:da:6b: 5f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A4:C9:7B:87:A6:6B:C9:F1:E8:97:98:56:D5:A0:94:57:A1:9E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a4226a0-d4c3-3369-b0bf-f0456fdda616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:dd:c2:26:96:83:6b:7d:40:8d:af:50:21:5b:9e:fb:67:18: ac:01:6c:e8:6f:6a:bb:97:5c:ff:52:e8:33:38:bc:17:2f:6f: 06:d1:64:53:65:41:3d:10:27:70:89:65:dc:58:07:20:e0:16: 4f:06:26:2e:33:40:7b:ce:63:c6:d4:2c:57:15:c3:bf:08:2e: 58:11:5e:5a:40:8a:b4:db:ea:4f:4f:f2:f6:95:82:3c:68:7c: cf:67:aa:e0:d5:41:23:31:36:56:4a:44:cd:c1:41:c9:83:02: 51:13:a9:5a:af:8c:3d:3e:c4:95:98:ea:48:1c:87:5c:1a:89: 9f:4c:00:70:90:59:b3:cf:44:3b:20:d7:64:99:0e:32:e9:9a: 72:44:21:aa:7d:f8:b3:32:94:b1:e1:0b:9e:96:c4:71:5b:8f: 81:7c:d8:f9:05:90:a8:1f:03:84:41:5c:ee:fd:2a:2a:44:51: 73:36:a2:4d:13:65:0c:f4:0e:f3:9e:8a:88:aa:dc:b1:da:19: 2a:c6:9b:a8:29:84:e6:5a:71:ed:4e:fe:18:c9:ae:d5:ad:02: b2:dc:d6:61:4f:b5:b8:d1:d4:df:f3:11:95:ff:5b:3a:e7:27: e3:f1:91:cf:b0:68:42:b8:d8:88:ed:e5:d6:2d:32:12:3c:b6: be:9f:23:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9fpYDKMCdsng2ugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWQzYWE0NjktMjAyZS00MDA2LTlmODktOTkyY2M4OGE0NWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VuUR9LEfv29Salmtd1KSrrhsIRlrH4sddZ7 wmBiP88y0sW1/wC3iJFJN2sto7R2O1MfJ8sC9EGtzjzUJttUM2fcr6i8NKDfNLfS GzKVKS1qv540sAQ9lpPUMpRGjYxRJn98EC+50HMffjEMRW9amrpCPZvJ6/82T1c3 aY5bHrenwCl2Sy89nfwpVtorylmd79yWNvRpO7OvLGrKQlUxXDsmHQlCYVFY8lac JFgnN9etEv1r+LLsifSUoI1Y2yvWM3U+1NKaJKvVUQjd5/XnxQs8ZwogzE96+Z3k kIOlOPXd915gQgnJBAk8v+Qhh6j3ym+euAcYUiqxuufM2mtfiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEakyXuHpmvJ8eiXmFbVoJRXoZ6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2E0MjI2YTAtZDRjMy0z MzY5LWIwYmYtZjA0NTZmZGRhNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrdwiaWg2t9QI2vUCFbnvtnGKwBbOhvaruXXP9S6DM4vBcvbwbRZFNl QT0QJ3CJZdxYByDgFk8GJi4zQHvOY8bULFcVw78ILlgRXlpAirTb6k9P8vaVgjxo fM9nquDVQSMxNlZKRM3BQcmDAlETqVqvjD0+xJWY6kgch1waiZ9MAHCQWbPPRDsg 12SZDjLpmnJEIap9+LMylLHhC56WxHFbj4F82PkFkKgfA4RBXO79KipEUXM2ok0T ZQz0DvOeioiq3LHaGSrGm6gphOZace1O/hjJrtWtArLc1mFPtbjR1N/zEZX/Wzrn J+Pxkc+waEK42Ijt5dYtMhI8tr6fI9E= -----END CERTIFICATE-----Generated at Tue Apr 21 20:53:13 2026 by rpki-client