$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436be6c8-9af4-33bc-aefa-b380d7d0b860.roa File: 436be6c8-9af4-33bc-aefa-b380d7d0b860.roa (raw, json) Hash identifier: 3XJTYlr1U3axek0CnushZWgmlMZkvFkWU5ErLyES9B4= Subject key identifier: 95:2D:E3:2A:18:74:55:4C:1A:18:14:E2:FA:8C:FB:E5:F9:D2:D5:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF5F57D0771CE4ABCED6B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436be6c8-9af4-33bc-aefa-b380d7d0b860.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33287 IP address blocks: 73.165.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:f5:7d:07:71:ce:4a:bc:ed:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f2a9da1d-beeb-4230-b906-a2d379ac1dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:bd:de:67:47:ef:57:af:31:58:da:9c:c9: 07:b5:b6:81:bb:20:11:3e:ab:c6:e8:86:db:f5:1f: e2:a4:22:bd:66:09:fa:90:db:61:fd:67:f4:6a:60: e5:00:a9:f2:e7:50:45:10:d3:3c:f0:4d:3a:63:b8: 44:0a:4e:20:69:d5:d2:ce:34:2e:1b:ee:fe:e3:60: 84:6a:a8:7b:87:58:25:90:54:68:84:7c:23:95:66: a2:6a:05:58:d0:84:d0:2e:c8:81:c1:62:65:01:e2: 98:0a:9c:95:d9:68:55:89:bc:10:a4:38:a4:48:3b: 09:fa:13:51:35:4a:e9:b7:ec:36:9f:0c:e7:3c:78: 96:82:55:e2:29:62:c2:3c:05:7d:6d:58:48:01:e8: 2a:b2:72:85:ac:1a:9f:8e:ea:55:8a:ca:07:39:42: 27:1e:3b:0f:45:1c:5a:10:0e:d6:6d:4f:3c:7f:5f: b1:23:1f:fd:4c:bd:7c:08:8d:a7:14:0d:5f:68:65: 10:38:81:7a:ea:d0:70:6d:1a:94:b4:66:b9:c9:cd: 0b:ad:13:e2:49:fd:73:4f:1f:51:5b:d9:70:35:a9: a6:84:d3:9a:da:a2:a5:9d:d5:81:e6:42:54:96:72: 96:16:4f:e1:72:aa:73:d6:c5:20:43:36:2e:0d:84: 97:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2D:E3:2A:18:74:55:4C:1A:18:14:E2:FA:8C:FB:E5:F9:D2:D5:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436be6c8-9af4-33bc-aefa-b380d7d0b860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.165.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:d5:3e:00:94:ce:9a:e8:67:48:d4:8d:f0:73:8f:ba:96:1a: 22:fa:2d:a3:89:88:2c:40:f3:40:a8:bd:5e:5f:e6:fb:5a:de: f0:d4:1d:ba:19:c2:94:e5:1c:8f:94:ce:09:81:1c:7f:b7:0a: 21:86:95:85:56:ef:61:88:c9:0b:18:bc:c3:d3:86:cb:82:db: 33:a8:f7:bd:b0:36:ce:6e:37:6e:d1:20:ad:ce:c8:01:73:a3: 82:2c:75:da:d7:5a:b2:31:39:43:ac:a0:4f:31:c6:63:d1:0b: 97:66:7c:21:04:e5:d3:5c:c7:ad:fd:46:8c:85:aa:e1:68:b0: 3e:ee:7a:65:7b:8d:6d:17:4c:8f:2a:53:dd:ab:be:7c:92:38: 9f:4d:bc:98:ab:ed:1d:99:31:5a:fb:08:20:2f:bb:6c:e7:5b: 2a:c1:a0:63:df:31:7e:ba:34:cd:19:a5:f1:5d:31:4b:92:42: 06:7f:ca:24:79:33:e3:c3:ff:8c:34:2d:ed:8c:54:24:d6:27: c3:e9:b6:0c:36:15:1a:e0:09:b9:80:4f:15:e1:0a:78:9e:6c: 6c:81:19:6e:6a:d0:71:46:99:e0:c7:7a:cb:fa:72:05:2f:87: 65:4d:89:30:30:21:45:f0:a4:36:54:bd:55:4a:b7:f5:c2:23: 08:9b:0e:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9fV9B3HOSrzta0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjJhOWRhMWQtYmVlYi00MjMwLWI5MDYtYTJkMzc5YWMxZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooK93mdH71evMVjanMkHtbaBuyARPqvG6Ibb 9R/ipCK9Zgn6kNth/Wf0amDlAKny51BFENM88E06Y7hECk4gadXSzjQuG+7+42CE aqh7h1glkFRohHwjlWaiagVY0ITQLsiBwWJlAeKYCpyV2WhVibwQpDikSDsJ+hNR NUrpt+w2nwznPHiWglXiKWLCPAV9bVhIAegqsnKFrBqfjupVisoHOUInHjsPRRxa EA7WbU88f1+xIx/9TL18CI2nFA1faGUQOIF66tBwbRqUtGa5yc0LrRPiSf1zTx9R W9lwNammhNOa2qKlndWB5kJUlnKWFk/hcqpz1sUgQzYuDYSX1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUt4yoYdFVMGhgU4vqM++X50tUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM2YmU2YzgtOWFmNC0z M2JjLWFlZmEtYjM4MGQ3ZDBiODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbVPgCUzproZ0jUjfBzj7qWGiL6LaOJiCxA80CovV5f5vta3vDUHboZ wpTlHI+UzgmBHH+3CiGGlYVW72GIyQsYvMPThsuC2zOo972wNs5uN27RIK3OyAFz o4IsddrXWrIxOUOsoE8xxmPRC5dmfCEE5dNcx639RoyFquFosD7uemV7jW0XTI8q U92rvnySOJ9NvJir7R2ZMVr7CCAvu2znWyrBoGPfMX66NM0ZpfFdMUuSQgZ/yiR5 M+PD/4w0Le2MVCTWJ8Pptgw2FRrgCbmATxXhCniebGyBGW5q0HFGmeDHesv6cgUv h2VNiTAwIUXwpDZUvVVKt/XCIwibDg0= -----END CERTIFICATE-----Generated at Tue Apr 21 22:03:20 2026 by rpki-client