$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/595e4801-b90f-3baf-bc37-55c7db701e3f.roa File: 595e4801-b90f-3baf-bc37-55c7db701e3f.roa (raw, json) Hash identifier: +P9MitLoXyMcSAUKarrj2U39TtKM160tSIp14x7deTU= Subject key identifier: 6E:86:DC:34:5C:99:9F:E1:E0:AC:11:34:8C:24:B2:1D:8F:56:03:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6C0D194169DB4130D6140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/595e4801-b90f-3baf-bc37-55c7db701e3f.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 73.202.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:c0:d1:94:16:9d:b4:13:0d:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=07107e64-2f60-4b6e-95c0-3b9c9a71f9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d6:ad:31:e7:0f:64:8d:a6:4c:4e:3e:5e:8a: 8c:fb:75:b8:c7:b6:c2:cf:13:60:7b:ac:2f:33:5c: 07:c4:a2:09:14:b6:7e:a5:51:8e:22:39:87:c1:f1: 6f:94:29:b1:f0:5b:82:ec:90:ba:1b:0a:0f:5c:2e: c5:bb:cd:77:65:c7:02:b7:ff:a3:16:1c:ec:38:bf: 91:23:99:e5:c7:91:78:de:29:af:75:75:fe:86:5d: b3:1f:fe:42:c6:06:50:3d:d3:8d:00:f1:0f:df:64: 37:b2:89:ae:5c:e2:87:11:5c:76:4a:9b:e0:32:e5: 9f:80:82:c7:78:c5:c4:c6:8e:3f:d7:77:0c:45:e9: 6a:97:02:6d:09:fd:b0:02:8a:20:a9:6b:fd:93:6b: a7:ea:47:67:c7:f4:25:12:15:07:4a:1e:81:a8:d3: 8d:1c:b2:51:49:b8:93:32:e4:45:ba:7b:13:ac:07: 4a:5a:06:e3:e8:4e:ff:ea:c1:45:8c:a2:80:75:9b: 8a:ce:75:9c:c6:30:18:6b:53:2e:65:5d:ce:9d:03: 68:42:e3:14:5f:1f:04:f4:b8:7c:3b:24:f2:33:78: ad:74:de:27:62:64:dc:1d:09:1e:ac:30:80:0e:66: 50:57:d5:4f:72:71:b1:61:8d:cb:e6:54:00:cf:94: 33:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:86:DC:34:5C:99:9F:E1:E0:AC:11:34:8C:24:B2:1D:8F:56:03:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/595e4801-b90f-3baf-bc37-55c7db701e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.202.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:94:bc:01:44:87:2d:08:26:68:2b:d7:ed:45:a6:a3:66:e1: 78:44:c4:fa:27:eb:a6:07:c9:fb:f1:97:02:18:6c:3d:eb:cb: c0:63:dd:11:7a:15:1f:e4:47:6f:0d:a9:8e:b6:3e:d4:fc:3b: e3:a8:0a:af:10:4d:38:db:55:fe:9d:11:d3:d1:5e:51:67:5f: a6:46:eb:f0:5d:f1:0b:a9:23:2f:f2:71:9e:e3:73:fc:b1:4e: ce:71:d4:21:fd:ae:f1:42:5a:cf:7b:ad:65:d3:32:34:43:55: 21:93:77:29:e7:dd:40:2a:aa:ca:cc:23:4c:33:b1:37:e5:94: a2:40:f2:a8:24:17:f0:fe:26:79:75:02:14:0a:98:b1:02:39: 11:48:20:3a:de:bb:2a:02:ae:5b:1c:25:46:8f:e7:cc:72:a7: 0f:d2:5d:ea:6f:ec:83:70:99:91:fc:7e:2a:37:b8:d2:b6:3c: 00:1f:aa:bc:f8:73:fd:10:c7:ec:b4:4a:24:7e:f0:1d:91:bd: d5:0e:b4:f1:f6:91:21:18:35:9e:ac:11:61:01:0e:d8:6e:1f: ff:2c:c8:bf:12:68:32:6c:e2:a8:a9:51:87:68:d2:46:db:22: e4:7f:a3:68:bc:4d:a5:c5:91:f9:88:08:bb:39:e2:9c:e7:65: d8:a0:31:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9sDRlBadtBMNYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MDcxMDdlNjQtMmY2MC00YjZlLTk1YzAtM2I5YzlhNzFmOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19atMecPZI2mTE4+XoqM+3W4x7bCzxNge6wv M1wHxKIJFLZ+pVGOIjmHwfFvlCmx8FuC7JC6GwoPXC7Fu813ZccCt/+jFhzsOL+R I5nlx5F43imvdXX+hl2zH/5CxgZQPdONAPEP32Q3somuXOKHEVx2SpvgMuWfgILH eMXExo4/13cMRelqlwJtCf2wAoogqWv9k2un6kdnx/QlEhUHSh6BqNONHLJRSbiT MuRFunsTrAdKWgbj6E7/6sFFjKKAdZuKznWcxjAYa1MuZV3OnQNoQuMUXx8E9Lh8 OyTyM3itdN4nYmTcHQkerDCADmZQV9VPcnGxYY3L5lQAz5QzuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6G3DRcmZ/h4KwRNIwksh2PVgOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTk1ZTQ4MDEtYjkwZi0z YmFmLWJjMzctNTVjN2RiNzAxZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOUvAFEhy0IJmgr1+1FpqNm4XhExPon66YHyfvxlwIYbD3ry8Bj3RF6 FR/kR28NqY62PtT8O+OoCq8QTTjbVf6dEdPRXlFnX6ZG6/Bd8QupIy/ycZ7jc/yx Ts5x1CH9rvFCWs97rWXTMjRDVSGTdynn3UAqqsrMI0wzsTfllKJA8qgkF/D+Jnl1 AhQKmLECORFIIDreuyoCrlscJUaP58xypw/SXepv7INwmZH8fio3uNK2PAAfqrz4 c/0Qx+y0SiR+8B2RvdUOtPH2kSEYNZ6sEWEBDthuH/8syL8SaDJs4qipUYdo0kbb IuR/o2i8TaXFkfmICLs54pznZdigMcc= -----END CERTIFICATE-----Generated at Tue Apr 21 19:19:15 2026 by rpki-client