$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/659296c3-75cf-37df-8fa0-5dc0db484a81.roa File: 659296c3-75cf-37df-8fa0-5dc0db484a81.roa (raw, json) Hash identifier: ijDiObTKChdCLi3NjS0wu0GYli06eCmWShwJBZtzOPk= Subject key identifier: 95:6E:74:76:AE:21:AA:C5:40:FA:CB:FB:FE:73:A4:F8:F4:24:E5:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF5999F9543E7EBA61E86A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/659296c3-75cf-37df-8fa0-5dc0db484a81.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33660 IP address blocks: 73.98.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:99:9f:95:43:e7:eb:a6:1e:86:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=91cce58c-bd0e-4139-89d5-b8bfa916a85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:55:d3:ed:35:29:20:48:51:71:e8:44:4f:ee: a4:2e:1b:56:32:ff:1b:bc:9b:91:b6:28:ea:4d:60: 31:11:d9:08:70:5f:73:e4:1f:02:25:57:8a:26:07: 33:36:5a:77:c5:42:0d:52:9f:90:fa:88:9e:b9:35: 10:4b:8d:7e:d8:35:b0:8a:e6:a2:75:22:5d:15:f4: 47:1e:e9:90:94:bf:5d:ce:8e:72:08:5a:ba:d4:59: 76:97:8a:3d:18:9e:10:9b:69:9f:4b:a8:de:4c:4d: c3:80:9f:c8:02:36:63:3f:8d:28:a5:27:de:6d:22: e4:76:f8:a3:f8:31:83:03:ac:5b:78:ef:a6:c1:fe: 37:cd:24:70:b8:a8:66:56:64:94:e0:9b:99:ab:1d: 2d:84:2b:d7:2e:57:c0:10:8d:24:51:25:84:e2:52: ec:3c:52:59:45:77:cf:7e:68:6e:32:f6:17:cd:85: 62:40:9a:80:f4:6d:fc:a3:b4:5f:24:3c:8f:17:4a: e0:85:87:a7:5f:46:a2:5e:1b:ee:33:e8:99:e2:6d: be:d6:1d:67:f2:c6:16:35:82:66:21:9a:a8:18:02: 7f:69:7d:dd:81:99:3d:b7:7e:fc:e7:4e:d2:88:c5: 8d:8b:29:9a:82:8e:3b:dc:a7:63:8a:9a:f3:ed:ec: ac:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6E:74:76:AE:21:AA:C5:40:FA:CB:FB:FE:73:A4:F8:F4:24:E5:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/659296c3-75cf-37df-8fa0-5dc0db484a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.98.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:c5:c4:0b:0b:a4:18:6b:ad:66:31:23:cc:f6:f0:9f:ea:07: cb:48:ae:a2:92:e8:f5:03:a2:00:23:60:da:96:af:78:4e:24: 71:6b:bd:04:c8:56:9b:3b:4e:0f:74:d5:45:c8:d7:0b:09:86: dd:fe:fe:61:b4:27:bd:e5:22:1d:52:32:89:81:84:f8:d4:74: 14:c2:1d:82:ec:03:7a:ac:01:3f:ad:eb:dc:83:3c:f7:99:4b: c8:0c:74:2f:12:28:00:21:23:28:6b:7d:e9:fc:e4:6a:cc:17: 06:62:e3:48:5e:25:6c:34:70:63:86:6f:85:07:93:8a:29:a6: 3a:a2:6a:7f:ac:b8:83:90:4f:d5:64:63:0b:81:0b:cf:87:e8: 1f:4b:97:94:9c:52:60:fb:a2:1f:ce:8b:7e:fe:62:bb:b8:b4: 8c:16:28:e8:95:ca:eb:4c:91:03:f6:10:44:a5:aa:3f:b1:65: eb:b7:91:5a:51:0e:2f:c4:7a:0c:40:ac:f9:b5:2a:fc:96:e9: ca:f2:83:bf:e3:e6:dd:c0:47:ac:54:d8:39:25:84:f9:6b:06: b8:11:ce:e7:93:f0:cd:6e:7f:37:c2:69:73:d1:cb:5e:79:c9: 55:a6:6d:f6:54:bf:05:b7:18:a8:84:f9:7f:ad:9e:cb:51:0c: df:43:e4:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9ZmflUPn66YehqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTFjY2U1OGMtYmQwZS00MTM5LTg5ZDUtYjhiZmE5MTZhODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylXT7TUpIEhRcehET+6kLhtWMv8bvJuRtijq TWAxEdkIcF9z5B8CJVeKJgczNlp3xUINUp+Q+oieuTUQS41+2DWwiuaidSJdFfRH HumQlL9dzo5yCFq61Fl2l4o9GJ4Qm2mfS6jeTE3DgJ/IAjZjP40opSfebSLkdvij +DGDA6xbeO+mwf43zSRwuKhmVmSU4JuZqx0thCvXLlfAEI0kUSWE4lLsPFJZRXfP fmhuMvYXzYViQJqA9G38o7RfJDyPF0rghYenX0aiXhvuM+iZ4m2+1h1n8sYWNYJm IZqoGAJ/aX3dgZk9t378507SiMWNiymago473Kdjiprz7eysawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVudHauIarFQPrL+/5zpPj0JOUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjU5Mjk2YzMtNzVjZi0z N2RmLThmYTAtNWRjMGRiNDg0YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSWLuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/FxAsLpBhrrWYxI8z28J/qB8tIrqKS6PUDogAjYNqWr3hOJHFrvQTI Vps7Tg901UXI1wsJht3+/mG0J73lIh1SMomBhPjUdBTCHYLsA3qsAT+t69yDPPeZ S8gMdC8SKAAhIyhrfen85GrMFwZi40heJWw0cGOGb4UHk4oppjqian+suIOQT9Vk YwuBC8+H6B9Ll5ScUmD7oh/Oi37+Yru4tIwWKOiVyutMkQP2EESlqj+xZeu3kVpR Di/EegxArPm1KvyW6cryg7/j5t3AR6xU2DklhPlrBrgRzueT8M1ufzfCaXPRy155 yVWmbfZUvwW3GKiE+X+tnstRDN9D5L0= -----END CERTIFICATE-----Generated at Tue Apr 21 22:57:42 2026 by rpki-client