$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a07e83-386c-38cc-95b3-9a7e200173ac.roa File: 68a07e83-386c-38cc-95b3-9a7e200173ac.roa (raw, json) Hash identifier: zjrbTHmXcxfj1a/krkj1OHJx+1gpMp7Eu5wkWcu7z5Y= Subject key identifier: BF:45:B6:F3:9A:B7:7A:A9:EF:8A:94:5F:70:29:AE:65:D5:76:B4:E2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF64DFF39BB236983CA6600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a07e83-386c-38cc-95b3-9a7e200173ac.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 73.211.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:4d:ff:39:bb:23:69:83:ca:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=af982511-5d13-4b41-b865-d531d8d279e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:da:30:62:c4:f3:af:e8:2c:cd:66:62:0e: b0:87:06:57:21:db:81:ab:33:75:80:85:9d:e7:40: c3:01:8c:52:cb:e4:64:88:64:38:b3:a5:58:46:8d: 3f:3a:e8:42:ca:51:f5:8b:e4:18:4f:11:15:4b:bf: 87:bb:5c:1c:65:91:2c:d9:5e:a0:ca:21:9b:c2:fe: d1:ca:36:1f:c5:60:f3:83:0e:8a:76:6b:71:92:df: e6:96:34:30:c4:bb:f7:b5:63:53:22:4c:eb:40:3b: bc:89:7c:e1:02:fc:a1:c2:c4:c0:13:e4:12:e6:aa: 6d:bd:de:24:8e:1f:50:f5:43:cb:35:61:ac:1e:19: c1:ad:63:2a:08:17:2e:88:62:3b:21:c9:1d:20:9e: 78:f0:97:dc:c7:47:76:a0:4e:80:97:41:07:1f:96: 48:19:17:e6:bd:cf:30:32:49:aa:2e:4d:b7:4f:97: f2:b1:45:84:ef:b2:6d:18:24:f2:37:25:6e:f9:53: b8:ce:92:9d:aa:64:ec:99:58:f7:a0:53:b1:b3:32: bb:f9:67:f1:d0:df:fa:91:1c:4e:82:0e:7d:90:6d: 94:76:d6:66:7c:cb:a8:25:ee:2e:5f:5a:da:fb:c5: 3a:0f:cf:46:c2:a5:e0:53:5a:2d:3c:67:85:61:99: 41:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:45:B6:F3:9A:B7:7A:A9:EF:8A:94:5F:70:29:AE:65:D5:76:B4:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a07e83-386c-38cc-95b3-9a7e200173ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.211.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:dc:66:06:0d:4f:a2:14:94:ee:e8:42:54:1e:61:a3:ea:7f: 21:1c:c3:72:fe:b0:db:b9:76:31:fc:05:15:ec:9f:3a:ef:ae: 08:c7:21:f1:f7:7e:7d:77:af:08:f5:cf:46:13:73:e0:03:5b: 4a:dd:fe:95:1a:68:df:6f:ee:a5:33:b0:65:3b:e3:66:2f:d0: fc:df:a0:f9:14:a3:68:78:c1:a7:42:39:31:35:4f:93:9f:83: 4e:36:6d:8a:72:ad:e8:e1:39:96:5b:f9:85:8d:60:6e:a1:2f: 81:11:e8:5e:b4:f4:65:d9:85:79:44:6f:b6:b1:a3:f4:6e:fd: ce:5a:64:91:26:f9:e3:17:af:14:a1:dd:ab:46:22:90:db:12: 3f:0a:f9:34:6c:b9:6a:6d:3a:01:3a:a2:c7:20:60:5f:bb:2b: 58:0b:48:f0:35:94:b2:8b:9a:7a:84:13:f9:ab:b6:73:b6:78: eb:6f:91:4d:2f:53:f5:88:78:7a:1f:69:44:46:33:b2:d6:ed: ed:e4:0f:b9:eb:35:2f:62:a2:be:34:49:ee:d6:8f:fc:8b:e2: ad:bc:00:07:d8:0f:38:5d:ad:5c:40:e4:31:7a:ac:6f:bf:a7: d5:d1:f9:d9:b2:75:7a:1c:28:49:13:58:b6:8f:e6:54:ee:ca: 66:1c:ed:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9k3/ObsjaYPKZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YWY5ODI1MTEtNWQxMy00YjQxLWI4NjUtZDUzMWQ4ZDI3OWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmvaMGLE86/oLM1mYg6whwZXIduBqzN1gIWd 50DDAYxSy+RkiGQ4s6VYRo0/OuhCylH1i+QYTxEVS7+Hu1wcZZEs2V6gyiGbwv7R yjYfxWDzgw6Kdmtxkt/mljQwxLv3tWNTIkzrQDu8iXzhAvyhwsTAE+QS5qptvd4k jh9Q9UPLNWGsHhnBrWMqCBcuiGI7IckdIJ548Jfcx0d2oE6Al0EHH5ZIGRfmvc8w MkmqLk23T5fysUWE77JtGCTyNyVu+VO4zpKdqmTsmVj3oFOxszK7+Wfx0N/6kRxO gg59kG2UdtZmfMuoJe4uX1ra+8U6D89GwqXgU1otPGeFYZlBxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9FtvOat3qp74qUX3AprmXVdrTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjhhMDdlODMtMzg2Yy0z OGNjLTk1YjMtOWE3ZTIwMDE3M2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASdPuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrcZgYNT6IUlO7oQlQeYaPqfyEcw3L+sNu5djH8BRXsnzrvrgjHIfH3 fn13rwj1z0YTc+ADW0rd/pUaaN9v7qUzsGU742Yv0PzfoPkUo2h4wadCOTE1T5Of g042bYpyrejhOZZb+YWNYG6hL4ER6F609GXZhXlEb7axo/Ru/c5aZJEm+eMXrxSh 3atGIpDbEj8K+TRsuWptOgE6oscgYF+7K1gLSPA1lLKLmnqEE/mrtnO2eOtvkU0v U/WIeHofaURGM7LW7e3kD7nrNS9ior40Se7Wj/yL4q28AAfYDzhdrVxA5DF6rG+/ p9XR+dmydXocKEkTWLaP5lTuymYc7SE= -----END CERTIFICATE-----Generated at Tue Apr 21 19:29:45 2026 by rpki-client