$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ce789eb-c5aa-3a60-91f1-a25b77717a32.roa File: 3ce789eb-c5aa-3a60-91f1-a25b77717a32.roa (raw, json) Hash identifier: gG8iMS/Bf7xd7a3GiN7nC8J9qsSkUPwgy58fQ51Wll0= Subject key identifier: 7B:5F:CB:85:6C:C8:28:58:F9:CC:38:78:4E:BD:2B:F9:73:89:F6:5D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6C86F8BDBB5F0CC02D880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ce789eb-c5aa-3a60-91f1-a25b77717a32.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 73.231.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:c8:6f:8b:db:b5:f0:cc:02:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=bd022c92-54b4-44d9-bc4f-c56c101b1221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0e:2e:e5:a6:72:fe:ed:7f:bb:de:e7:72:be: ec:ed:60:17:a5:fd:db:63:45:fb:5f:c1:2d:bf:d4: 2b:f3:aa:1b:9d:68:3c:fe:84:2f:28:de:76:64:47: 69:ba:ae:3f:b7:5e:fb:43:5c:e3:3d:bd:dd:c5:00: 7d:2a:b2:59:81:6b:a5:1a:45:de:bd:a1:c1:1f:2c: 19:33:60:c9:5b:3f:b3:4e:41:63:7b:11:ed:76:87: 87:a0:1d:ec:3a:34:d5:70:3f:1b:41:c5:20:fa:09: a5:3c:d6:28:3f:2f:f3:4e:ec:09:30:87:27:73:51: 33:62:e2:d1:00:f5:f7:b5:9b:1a:6b:77:61:00:62: a7:dc:c6:f3:9d:1a:0b:8a:d1:93:e7:c1:b2:81:93: 3e:04:bb:ce:5d:d9:e5:80:fb:46:c9:1c:7e:21:a0: 0a:2d:ee:3f:30:e0:88:73:25:ec:4f:d2:9f:90:82: 7c:fb:7c:21:c6:c4:3a:b4:91:b4:0b:46:c1:5e:12: 3e:2c:57:32:9b:1b:e4:9c:b4:61:29:a6:89:1b:fb: e5:d8:19:5e:d4:97:64:1f:09:d5:c1:f5:21:f2:44: c9:03:8b:95:1b:35:6b:4a:06:13:ce:87:84:e8:16: c7:0b:df:86:ae:72:71:af:08:82:28:93:fa:f6:5f: ff:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5F:CB:85:6C:C8:28:58:F9:CC:38:78:4E:BD:2B:F9:73:89:F6:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ce789eb-c5aa-3a60-91f1-a25b77717a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.231.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:0e:38:04:7c:f5:e8:f2:48:06:ac:37:20:12:43:5d:bf:8a: c7:3f:d3:82:58:1e:df:88:44:c3:d7:00:a9:5f:a0:a3:86:6c: 10:0a:0f:2f:e8:02:b2:41:01:f8:df:3f:22:09:52:aa:29:48: f2:95:ed:ad:9e:72:37:16:f9:ca:35:0b:42:c1:99:46:3f:5c: a1:91:82:e2:5b:3c:c7:0d:d3:d6:89:8a:92:00:50:ae:ee:d8: 91:e8:e7:cf:d6:f4:ef:ba:34:ef:69:ed:fc:27:b7:8a:6b:18: 93:1c:c7:24:4d:8b:9e:a5:04:13:ed:d5:eb:ec:4f:27:07:34: 99:ff:5c:cb:87:4f:ce:67:dc:aa:c7:1e:9a:70:7c:90:90:02: 66:ca:14:c0:d4:e8:47:5e:bc:12:a2:a2:68:5c:14:fd:ec:e8: 87:1e:87:79:37:b3:34:89:81:46:b0:40:a7:fc:71:b8:71:7c: 44:02:8a:fc:ab:9c:f0:5e:30:fe:0b:9a:2d:05:ba:2e:8b:9a: 6d:00:d9:ee:b3:59:87:21:12:e5:f8:81:d0:fe:de:31:7b:79: ae:11:58:83:66:67:a7:66:d5:80:03:8b:55:2b:61:68:67:77: 3a:ff:d9:f9:9a:de:72:79:e5:a3:b3:e4:fc:70:51:0e:88:3b: ec:21:3f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9shvi9u18MwC2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YmQwMjJjOTItNTRiNC00NGQ5LWJjNGYtYzU2YzEwMWIxMjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg4u5aZy/u1/u97ncr7s7WAXpf3bY0X7X8Et v9Qr86obnWg8/oQvKN52ZEdpuq4/t177Q1zjPb3dxQB9KrJZgWulGkXevaHBHywZ M2DJWz+zTkFjexHtdoeHoB3sOjTVcD8bQcUg+gmlPNYoPy/zTuwJMIcnc1EzYuLR APX3tZsaa3dhAGKn3MbznRoLitGT58GygZM+BLvOXdnlgPtGyRx+IaAKLe4/MOCI cyXsT9KfkIJ8+3whxsQ6tJG0C0bBXhI+LFcymxvknLRhKaaJG/vl2Ble1JdkHwnV wfUh8kTJA4uVGzVrSgYTzoeE6BbHC9+GrnJxrwiCKJP69l//7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtfy4VsyChY+cw4eE69K/lzifZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NlNzg5ZWItYzVhYS0z YTYwLTkxZjEtYTI1Yjc3NzE3YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASeffMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgOOAR89ejySAasNyASQ12/isc/04JYHt+IRMPXAKlfoKOGbBAKDy/o ArJBAfjfPyIJUqopSPKV7a2ecjcW+co1C0LBmUY/XKGRguJbPMcN09aJipIAUK7u 2JHo58/W9O+6NO9p7fwnt4prGJMcxyRNi56lBBPt1evsTycHNJn/XMuHT85n3KrH HppwfJCQAmbKFMDU6EdevBKiomhcFP3s6Iceh3k3szSJgUawQKf8cbhxfEQCivyr nPBeMP4Lmi0Fui6Lmm0A2e6zWYchEuX4gdD+3jF7ea4RWINmZ6dm1YADi1UrYWhn dzr/2fma3nJ55aOz5PxwUQ6IO+whP3A= -----END CERTIFICATE-----Generated at Tue Apr 21 23:00:46 2026 by rpki-client