$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ac15901-66a7-359e-af04-aca677528571.roa File: 3ac15901-66a7-359e-af04-aca677528571.roa (raw, json) Hash identifier: xj+FCdc0iGf+XoKV2Byzz351kiZDeXgWhImkaQkzofM= Subject key identifier: F1:A5:92:9C:2F:02:F0:F7:AB:53:B4:8B:F1:D6:FF:BE:8D:CF:D9:7A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7C7F0E8164BB75BE10780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ac15901-66a7-359e-af04-aca677528571.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 73.44.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:c7:f0:e8:16:4b:b7:5b:e1:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=35b66f68-dc23-4e16-8468-2f1be3b91892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bd:cd:ab:f8:3c:3f:0b:62:51:e7:24:92:0b: dc:44:33:ae:03:ee:7b:5d:b2:a6:e1:89:55:92:36: ca:8d:a3:ee:61:43:da:a8:e4:41:19:eb:15:e4:c1: 08:f8:51:7d:7f:59:03:70:3c:5b:d9:05:65:cd:21: 2b:17:21:44:b5:54:de:31:e7:80:bf:f9:93:60:63: f8:3c:01:ab:5b:46:2a:30:89:6a:c0:d8:4a:6c:93: 6f:5e:74:15:f5:55:97:c5:23:f5:e3:d7:bd:ac:a5: bf:6e:85:a6:34:f2:ed:9f:d8:52:f7:59:2a:33:81: be:55:1f:b0:00:90:ce:c5:de:97:8a:b6:29:7f:a2: 7c:8e:7f:de:6f:7e:05:cf:bb:45:77:da:41:46:00: 7c:97:b7:5a:0f:30:f2:eb:ae:fb:e0:1a:d5:ac:8e: 14:4d:00:25:95:98:19:e0:1f:4e:f1:f0:9e:0e:09: ca:71:54:ee:9b:69:0b:52:25:65:1d:2d:7d:f4:77: 0e:d6:86:af:22:e6:3c:5e:e7:cf:cc:11:6b:8e:90: 7e:dc:a6:b3:76:ae:a2:e8:db:1c:61:21:81:14:81: 3b:52:63:bd:80:0a:20:21:b2:29:d5:bb:27:e2:64: 7a:10:56:14:db:2f:1c:62:6a:ef:cf:15:22:37:f6: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A5:92:9C:2F:02:F0:F7:AB:53:B4:8B:F1:D6:FF:BE:8D:CF:D9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ac15901-66a7-359e-af04-aca677528571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.44.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:24:17:5c:d4:44:96:6e:2a:de:ed:e8:55:23:fa:12:7b:a1: 2d:ef:ce:9f:1a:76:a4:8c:55:3a:86:64:12:7b:bf:e4:a9:7c: 7f:8a:82:0f:69:13:10:ec:e9:e5:86:bc:24:e2:f4:78:99:1c: 3c:17:70:92:8b:8a:d0:2a:7e:46:12:38:7e:c3:50:4c:7e:42: da:3f:06:19:cd:e3:52:c7:44:d1:69:14:30:66:61:42:cd:b5: b0:79:1c:23:4b:29:99:b9:3e:b4:e1:7f:d0:55:96:07:dd:6c: 0c:db:00:9d:61:e7:3f:9b:9a:eb:85:45:ec:16:bd:38:a5:46: 17:77:5f:d5:38:1a:49:00:ae:86:77:31:de:43:50:c2:c8:86: 38:38:de:0e:c1:1b:4e:c5:13:e7:a1:1a:42:cd:d9:3c:c3:6f: d8:6e:08:dd:68:6d:4b:a4:1f:ef:20:9c:f6:c9:81:38:95:73: 1b:9f:a5:53:6b:8c:ea:1c:2c:e1:5c:e3:71:03:d2:6b:48:8d: a1:4b:a7:76:c6:c1:ec:2f:52:06:24:92:f7:6b:cd:df:20:81: 16:49:a9:8a:9f:0c:88:42:8b:2c:51:c9:21:3d:0b:4f:2d:e4: d6:86:02:89:fb:2f:f8:de:45:83:13:f8:e2:13:27:f9:ec:11: 30:4a:e4:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O98fw6BZLt1vhB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MzViNjZmNjgtZGMyMy00ZTE2LTg0NjgtMmYxYmUzYjkxODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb3Nq/g8PwtiUeckkgvcRDOuA+57XbKm4YlV kjbKjaPuYUPaqORBGesV5MEI+FF9f1kDcDxb2QVlzSErFyFEtVTeMeeAv/mTYGP4 PAGrW0YqMIlqwNhKbJNvXnQV9VWXxSP149e9rKW/boWmNPLtn9hS91kqM4G+VR+w AJDOxd6XirYpf6J8jn/eb34Fz7tFd9pBRgB8l7daDzDy66774BrVrI4UTQAllZgZ 4B9O8fCeDgnKcVTum2kLUiVlHS199HcO1oavIuY8XufPzBFrjpB+3Kazdq6i6Nsc YSGBFIE7UmO9gAogIbIp1bsn4mR6EFYU2y8cYmrvzxUiN/ZawQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGlkpwvAvD3q1O0i/HW/76Nz9l6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FjMTU5MDEtNjZhNy0z NTllLWFmMDQtYWNhNjc3NTI4NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHokF1zURJZuKt7t6FUj+hJ7oS3vzp8adqSMVTqGZBJ7v+SpfH+Kgg9p ExDs6eWGvCTi9HiZHDwXcJKLitAqfkYSOH7DUEx+Qto/BhnN41LHRNFpFDBmYULN tbB5HCNLKZm5PrThf9BVlgfdbAzbAJ1h5z+bmuuFRewWvTilRhd3X9U4GkkAroZ3 Md5DUMLIhjg43g7BG07FE+ehGkLN2TzDb9huCN1obUukH+8gnPbJgTiVcxufpVNr jOocLOFc43ED0mtIjaFLp3bGwewvUgYkkvdrzd8ggRZJqYqfDIhCiyxRySE9C08t 5NaGAon7L/jeRYMT+OITJ/nsETBK5Mk= -----END CERTIFICATE-----Generated at Tue Apr 21 20:53:16 2026 by rpki-client