$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cece860-2432-3f49-a092-f0c40e8840e7.roa File: 3cece860-2432-3f49-a092-f0c40e8840e7.roa (raw, json) Hash identifier: XuSXtJngHL3pSJOIjB4oUFl6KdOMSv1O17aTafDkATc= Subject key identifier: 09:87:7F:B3:0C:A6:61:4D:62:97:11:76:70:E4:D1:7D:2C:EC:B1:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF72ED3C2B3474D85F53080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cece860-2432-3f49-a092-f0c40e8840e7.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33659 IP address blocks: 73.215.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:2e:d3:c2:b3:47:4d:85:f5:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=907ad55c-feef-4225-8dee-d3b73333c2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:65:0f:28:a7:2c:b9:ae:6b:09:df:90:86:35: 0b:76:8c:25:41:08:ac:35:c7:5a:4b:48:b2:47:9c: 2f:8f:a3:c8:b0:0d:07:aa:7f:2b:d3:48:6b:ff:35: 5c:94:8f:54:97:4e:3a:c7:94:70:fc:8c:f6:fe:cb: 2b:a0:74:c9:65:4d:32:75:15:bb:1c:ea:e8:10:aa: 70:85:6c:74:f3:cc:39:f1:0f:bd:af:c2:56:b5:dd: 10:66:20:82:6d:e5:28:83:76:b9:21:70:e7:5c:dd: 6d:c0:ec:60:4b:2f:b4:a4:d5:2b:e7:0e:72:e7:6d: b2:45:04:24:0b:ff:d2:27:b5:27:67:3a:84:1b:ff: 10:ab:d1:59:64:76:d4:3f:fa:74:31:4a:7a:df:98: ce:d8:56:f1:2f:ff:74:13:5c:23:bd:25:12:42:67: 2c:d5:80:e8:bd:89:db:ec:a8:77:e1:3b:e5:1f:33: 2d:79:03:7c:d9:3d:95:a4:b4:59:22:48:cc:11:22: 18:0a:37:7b:26:65:f0:de:20:12:87:5d:47:e4:ee: 26:84:a0:7c:8e:f0:69:64:86:76:32:cb:24:7a:ee: 66:72:b5:a7:cc:26:93:9a:7b:26:69:98:4f:19:2a: 0a:c2:cb:3c:24:a3:56:53:db:b2:36:ee:20:36:f6: 95:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:87:7F:B3:0C:A6:61:4D:62:97:11:76:70:E4:D1:7D:2C:EC:B1:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cece860-2432-3f49-a092-f0c40e8840e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.215.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:7f:ef:82:15:81:d3:62:78:d4:85:0e:f3:94:28:c5:27:80: ba:66:ae:99:76:c8:d7:7a:7d:ff:01:b5:38:28:16:88:96:59: e5:dd:25:06:c6:2a:68:c9:fc:2f:3d:f2:d1:c7:fa:86:c0:0e: 34:57:21:34:e4:9e:0a:ee:9c:5b:39:63:d5:2a:49:be:12:dd: 92:06:8e:8f:dc:5d:2b:61:62:41:db:e6:1e:5d:29:34:2f:cb: bb:e5:6e:5d:dc:49:15:c5:22:f9:5f:3e:ea:3f:c8:ec:e7:f7: 96:d6:8e:87:e8:ea:f0:f6:86:cd:08:b8:29:f0:6b:44:5e:83: cb:a8:0c:e7:d6:24:2e:03:88:6b:e4:f1:32:8a:41:05:42:b7: 92:ef:cb:9c:9d:2e:63:ad:ec:3a:8f:47:de:77:94:67:64:c5: cb:bb:e3:b4:27:f0:e1:7c:f3:f3:13:2a:6c:e3:58:59:63:a4: 82:4d:f0:2f:3f:c0:8d:6f:2a:48:89:ba:9f:ad:3a:85:86:fc: da:ba:bd:33:b9:a8:24:e8:10:85:49:ff:aa:be:c5:ca:36:8d: 10:48:4e:3b:12:0d:77:f3:eb:06:be:2e:e1:3b:74:55:80:87: 86:d6:79:ee:e8:60:f4:4b:a9:e8:a8:84:e4:53:0a:2a:7c:d1: 84:3e:89:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9y7TwrNHTYX1MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTA3YWQ1NWMtZmVlZi00MjI1LThkZWUtZDNiNzMzMzNjMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GUPKKcsua5rCd+QhjULdowlQQisNcdaS0iy R5wvj6PIsA0Hqn8r00hr/zVclI9Ul046x5Rw/Iz2/ssroHTJZU0ydRW7HOroEKpw hWx088w58Q+9r8JWtd0QZiCCbeUog3a5IXDnXN1twOxgSy+0pNUr5w5y522yRQQk C//SJ7UnZzqEG/8Qq9FZZHbUP/p0MUp635jO2FbxL/90E1wjvSUSQmcs1YDovYnb 7Kh34TvlHzMteQN82T2VpLRZIkjMESIYCjd7JmXw3iASh11H5O4mhKB8jvBpZIZ2 Msskeu5mcrWnzCaTmnsmaZhPGSoKwss8JKNWU9uyNu4gNvaVQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmHf7MMpmFNYpcRdnDk0X0s7LEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NlY2U4NjAtMjQzMi0z ZjQ5LWEwOTItZjBjNDBlODg0MGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSdcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl/74IVgdNieNSFDvOUKMUngLpmrpl2yNd6ff8BtTgoFoiWWeXdJQbG KmjJ/C898tHH+obADjRXITTkngrunFs5Y9UqSb4S3ZIGjo/cXSthYkHb5h5dKTQv y7vlbl3cSRXFIvlfPuo/yOzn95bWjofo6vD2hs0IuCnwa0Reg8uoDOfWJC4DiGvk 8TKKQQVCt5Lvy5ydLmOt7DqPR953lGdkxcu747Qn8OF88/MTKmzjWFljpIJN8C8/ wI1vKkiJup+tOoWG/Nq6vTO5qCToEIVJ/6q+xco2jRBITjsSDXfz6wa+LuE7dFWA h4bWee7oYPRLqeiohORTCip80YQ+iTU= -----END CERTIFICATE-----Generated at Tue Apr 21 20:51:35 2026 by rpki-client