$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d14979-68d3-3c32-bb9b-a958e7ec2c08.roa File: 42d14979-68d3-3c32-bb9b-a958e7ec2c08.roa (raw, json) Hash identifier: ip8peioX8uZ5P51pQrVLUzlQ9m4Xm3e7jm2GIxUMcYE= Subject key identifier: 5B:08:6D:BC:2D:1C:C9:F1:0E:DF:6F:36:AD:92:69:D3:FB:B0:31:0C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7B5C40D08DE76EAC9D400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d14979-68d3-3c32-bb9b-a958e7ec2c08.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 73.209.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:b5:c4:0d:08:de:76:ea:c9:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=8956ddde-3f94-4a67-ba24-bd21c8748dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b7:2e:49:de:d1:f4:cc:78:86:a8:24:4c:2d: 83:e5:42:7f:4d:2d:2c:42:b3:18:f8:ce:cd:73:98: 12:cd:6b:03:17:d5:da:54:c4:20:5b:6b:26:75:1a: bf:c4:78:89:00:69:e7:aa:cf:4e:c1:17:c0:d3:1a: 74:8d:36:bc:b6:1e:92:3d:65:7c:ca:7f:67:26:ef: 53:52:19:7a:07:20:7d:fd:f8:c4:a7:35:f0:38:90: 77:e3:58:1d:a4:11:9f:11:aa:d7:93:ef:fb:8f:7b: 9e:ee:b2:60:91:09:e0:02:fb:56:72:75:86:85:5f: 94:29:84:dd:5f:f9:5a:28:8d:db:e1:e2:0d:39:e8: b0:8b:fa:0d:8c:8f:15:97:6f:e0:01:7e:35:74:a4: f6:84:df:3a:f1:98:cf:f1:5f:02:10:d0:cb:4d:f9: d0:4a:be:06:92:ff:7c:7d:2d:67:05:f6:ab:49:e5: 76:ff:7e:50:9e:c9:ed:9e:ed:1b:2a:dd:dc:e9:99: ed:12:6a:6a:ec:a1:23:56:db:6b:61:ab:4f:8f:82: 68:33:a0:85:24:db:7e:a2:fe:38:d2:76:0b:d1:82: 6c:9e:d5:9d:cb:4a:b7:f4:a3:fc:57:03:e6:60:e2: c1:4c:aa:26:52:4b:42:fb:bb:38:4f:13:34:4c:32: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:08:6D:BC:2D:1C:C9:F1:0E:DF:6F:36:AD:92:69:D3:FB:B0:31:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42d14979-68d3-3c32-bb9b-a958e7ec2c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:5d:3c:cd:48:d1:1f:1d:7b:4c:a4:1a:1c:a8:84:5e:51:11: 13:c0:a3:26:34:65:cc:b0:62:74:85:84:07:dd:ec:85:1f:75: 94:11:c9:de:d4:8e:52:63:06:64:b9:64:5d:f9:72:91:0f:67: 32:71:e7:1a:f9:6b:8f:0b:99:77:6e:1d:70:5e:90:06:5f:2b: 05:ed:44:c5:56:c9:5c:fb:d6:5a:ca:59:c5:f8:0a:7f:5a:4d: d9:56:58:2e:54:ba:b9:76:69:84:04:6b:76:28:2a:d1:54:38: 97:97:1d:79:d2:9d:f2:e3:d2:1d:63:29:0a:7a:69:7f:fe:55: 97:fd:cb:8b:d0:75:35:f6:07:48:8d:1c:13:fb:98:2f:a5:a6: 71:62:ba:0f:5f:7a:14:a0:6c:aa:31:14:a7:15:a3:8e:7b:9f: 8f:eb:53:42:26:e1:b7:c3:81:4b:d5:53:fa:89:28:c5:7f:a2: 7f:29:a9:c7:e2:65:d6:2d:eb:8c:58:30:ce:08:14:b5:72:d1: cf:ec:99:f3:0c:a6:62:10:32:3d:4c:e5:5f:ad:21:d0:ca:b9: 3f:6b:f8:0c:fc:72:63:4e:9f:d2:d2:27:74:d0:ee:ee:c7:1b: 8d:c8:55:fd:44:16:cd:1f:34:ec:c8:cb:72:59:a3:fd:39:93: 47:18:2f:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O97XEDQjedurJ1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ODk1NmRkZGUtM2Y5NC00YTY3LWJhMjQtYmQyMWM4NzQ4ZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLcuSd7R9Mx4hqgkTC2D5UJ/TS0sQrMY+M7N c5gSzWsDF9XaVMQgW2smdRq/xHiJAGnnqs9OwRfA0xp0jTa8th6SPWV8yn9nJu9T Uhl6ByB9/fjEpzXwOJB341gdpBGfEarXk+/7j3ue7rJgkQngAvtWcnWGhV+UKYTd X/laKI3b4eINOeiwi/oNjI8Vl2/gAX41dKT2hN868ZjP8V8CENDLTfnQSr4Gkv98 fS1nBfarSeV2/35Qnsntnu0bKt3c6ZntEmpq7KEjVttrYatPj4JoM6CFJNt+ov44 0nYL0YJsntWdy0q39KP8VwPmYOLBTKomUktC+7s4TxM0TDL0mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsIbbwtHMnxDt9vNq2SadP7sDEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDJkMTQ5NzktNjhkMy0z YzMyLWJiOWItYTk1OGU3ZWMyYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdFiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpdPM1I0R8de0ykGhyohF5RERPAoyY0ZcywYnSFhAfd7IUfdZQRyd7U jlJjBmS5ZF35cpEPZzJx5xr5a48LmXduHXBekAZfKwXtRMVWyVz71lrKWcX4Cn9a TdlWWC5Uurl2aYQEa3YoKtFUOJeXHXnSnfLj0h1jKQp6aX/+VZf9y4vQdTX2B0iN HBP7mC+lpnFiug9fehSgbKoxFKcVo457n4/rU0Im4bfDgUvVU/qJKMV/on8pqcfi ZdYt64xYMM4IFLVy0c/smfMMpmIQMj1M5V+tIdDKuT9r+Az8cmNOn9LSJ3TQ7u7H G43IVf1EFs0fNOzIy3JZo/05k0cYL3o= -----END CERTIFICATE-----Generated at Tue Apr 21 20:31:14 2026 by rpki-client