$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47c25af7-8d22-3678-9fd9-1f4f9d69a977.roa File: 47c25af7-8d22-3678-9fd9-1f4f9d69a977.roa (raw, json) Hash identifier: MkKlZJ+C3R4zojAFfnNuUvMW5fozNbZXvGeyLR6u0Sk= Subject key identifier: 7B:FA:D4:29:1F:90:08:0D:0B:0E:55:CE:F0:12:3A:42:30:70:47:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF59ADFF6EC6CBF583C95D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47c25af7-8d22-3678-9fd9-1f4f9d69a977.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33660 IP address blocks: 73.131.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:9a:df:f6:ec:6c:bf:58:3c:95:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=4cfe52bf-d495-47dd-b60d-2231b5d9761a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:8f:8b:e3:67:98:0a:b0:24:af:93:19:61: 61:8c:18:91:b9:6f:7f:02:42:60:08:39:43:4a:03: a2:f3:e7:33:20:97:2b:af:34:02:8d:97:c3:9b:07: 6c:c5:ce:f6:47:80:c7:91:2e:45:58:a1:39:37:e0: b2:6d:ce:77:38:a2:05:a1:75:79:6e:d7:74:c4:f8: 1e:69:f0:05:4e:97:4c:5f:18:8c:44:f5:91:7b:90: 72:3e:90:ce:74:2e:2b:c2:26:79:2a:50:8e:84:54: 2e:4e:27:c0:8e:7e:57:7a:9d:d7:4d:ae:2c:bc:d3: 88:59:62:ad:19:2c:56:2e:7a:a9:f6:13:cb:30:52: fb:4d:ca:00:31:f6:da:0a:ca:61:e2:12:63:b7:0d: 7f:6f:5c:98:9c:ac:c9:26:f0:fa:2e:b8:63:58:4b: 37:84:4c:3c:ed:20:66:83:d2:71:9b:39:18:62:84: 21:13:9c:a0:f5:67:8b:6b:7d:2b:e6:80:87:6c:a7: 02:cf:1a:ca:0f:b9:2c:ec:15:37:e9:fb:96:06:e5: f5:62:61:a9:70:40:5f:71:c0:96:79:84:ac:81:d0: 00:a8:1e:b5:38:65:4b:5d:b0:ef:a5:70:85:0e:74: 89:95:ff:d4:68:d8:40:f2:22:42:6e:1b:54:21:f3: 24:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FA:D4:29:1F:90:08:0D:0B:0E:55:CE:F0:12:3A:42:30:70:47:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47c25af7-8d22-3678-9fd9-1f4f9d69a977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.131.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:0c:39:29:a5:89:08:fc:7b:d9:fc:f6:e6:3a:93:d9:ea:ea: 5f:ff:c8:46:d7:0d:65:b1:3f:b3:61:e7:83:60:e2:fa:d2:ca: 45:c4:f7:3e:bf:db:e3:f9:11:ce:72:d7:34:33:0e:ff:88:62: 96:bb:2e:05:b2:75:8d:a2:0b:f1:c8:96:a6:a0:93:de:17:df: 24:de:29:5c:90:02:e8:13:25:e0:df:ba:37:d8:b3:36:7e:70: 8e:43:8d:79:43:7c:e9:e7:36:6d:05:39:02:19:98:b0:1c:2a: a8:a1:76:a3:16:8a:83:14:9a:30:74:76:c0:e6:45:85:6b:ad: f0:f3:90:47:54:ef:96:96:4a:f3:e0:81:4f:01:dc:77:68:0f: ea:8c:6b:55:95:9e:f0:da:b5:34:c3:2f:4c:d3:4f:80:5b:c7: 13:22:cc:9f:e9:12:e5:51:8e:3c:31:ad:c3:13:3d:7f:38:43: c8:d1:3a:a2:0c:3c:5c:c0:b4:6d:af:9e:1e:87:c8:a9:4c:db: 0d:b3:63:38:58:cd:fe:27:37:3b:d4:14:66:17:72:2e:bd:49: 53:3d:6b:b3:05:dd:69:b9:46:ef:0b:c4:80:d4:e6:ec:25:b4: 64:28:23:fb:1d:79:56:9c:b1:99:f4:80:d4:00:a7:ca:2f:9a: 9b:d5:bd:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9Zrf9uxsv1g8ldAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NGNmZTUyYmYtZDQ5NS00N2RkLWI2MGQtMjIzMWI1ZDk3NjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxmPi+NnmAqwJK+TGWFhjBiRuW9/AkJgCDlD SgOi8+czIJcrrzQCjZfDmwdsxc72R4DHkS5FWKE5N+Cybc53OKIFoXV5btd0xPge afAFTpdMXxiMRPWRe5ByPpDOdC4rwiZ5KlCOhFQuTifAjn5Xep3XTa4svNOIWWKt GSxWLnqp9hPLMFL7TcoAMfbaCsph4hJjtw1/b1yYnKzJJvD6LrhjWEs3hEw87SBm g9JxmzkYYoQhE5yg9WeLa30r5oCHbKcCzxrKD7ks7BU36fuWBuX1YmGpcEBfccCW eYSsgdAAqB61OGVLXbDvpXCFDnSJlf/UaNhA8iJCbhtUIfMk5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHv61CkfkAgNCw5VzvASOkIwcEc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDdjMjVhZjctOGQyMi0z Njc4LTlmZDktMWY0ZjlkNjlhOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSYPKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEMOSmliQj8e9n89uY6k9nq6l//yEbXDWWxP7Nh54Ng4vrSykXE9z6/ 2+P5Ec5y1zQzDv+IYpa7LgWydY2iC/HIlqagk94X3yTeKVyQAugTJeDfujfYszZ+ cI5DjXlDfOnnNm0FOQIZmLAcKqihdqMWioMUmjB0dsDmRYVrrfDzkEdU75aWSvPg gU8B3HdoD+qMa1WVnvDatTTDL0zTT4BbxxMizJ/pEuVRjjwxrcMTPX84Q8jROqIM PFzAtG2vnh6HyKlM2w2zYzhYzf4nNzvUFGYXci69SVM9a7MF3Wm5Ru8LxIDU5uwl tGQoI/sdeVacsZn0gNQAp8ovmpvVvTQ= -----END CERTIFICATE-----Generated at Tue Apr 21 22:04:44 2026 by rpki-client