$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71b0f10c-bddb-3a71-8356-2121d7fbb50b.roa File: 71b0f10c-bddb-3a71-8356-2121d7fbb50b.roa (raw, json) Hash identifier: qHKiAqBVz73B+xdMiq4vXEEcy/klk6QSrb9JhvxHv/U= Subject key identifier: 34:CC:AA:40:C2:05:20:31:D3:F9:03:65:59:24:29:54:E0:10:71:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6C837A96C63939DB6B770 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71b0f10c-bddb-3a71-8356-2121d7fbb50b.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 73.231.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:c8:37:a9:6c:63:93:9d:b6:b7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=75a224dd-104f-41e7-9fd6-e1efd6cee401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:55:0f:00:b1:b0:2c:83:d8:60:df:f0:93:81: 3e:e4:ec:26:8a:32:91:d6:a8:c3:7c:f4:b0:1f:dd: 8f:2a:8b:06:98:d2:37:8c:39:4c:39:63:e1:be:45: 0a:39:d7:67:20:f5:52:1c:f5:68:40:16:88:46:ba: f3:10:bf:7b:df:d9:34:57:5a:e2:16:48:47:a6:d4: 12:21:d2:1e:1e:13:2e:f4:af:71:39:1a:4f:83:25: 4c:be:46:42:5b:89:89:de:e9:ba:d6:0e:6f:bd:8b: 8a:d0:0b:29:34:f8:65:0e:25:35:81:77:1d:c6:fe: ad:cc:94:56:cb:c5:e4:b8:78:d0:dd:2c:f9:f0:15: e2:ae:6b:0f:8f:90:21:81:0c:a6:ba:4c:6a:4c:5b: 25:a3:0f:b8:83:ac:3f:bd:c5:d2:bd:00:02:15:21: dd:9b:21:c3:58:33:22:f3:c9:a9:74:ed:95:38:3f: 32:f2:8f:58:41:94:d1:be:ba:10:2e:3d:41:5f:a3: e2:df:b9:05:d1:e3:2c:0f:e5:be:63:fd:3c:c4:c8: c3:f0:2e:c6:0b:57:ca:f7:e8:2d:93:f8:7d:db:81: 7b:31:bd:11:b7:c7:3b:21:1b:31:c1:7c:43:30:c4: d4:42:5f:12:52:5c:cc:db:38:f7:2d:86:9e:7a:13: 90:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CC:AA:40:C2:05:20:31:D3:F9:03:65:59:24:29:54:E0:10:71:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71b0f10c-bddb-3a71-8356-2121d7fbb50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.231.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:78:80:6a:e7:4a:d0:0f:2d:e8:d4:3d:4d:76:29:61:65:70: 41:35:c5:c9:93:f2:80:3b:4a:1a:76:3c:69:dc:f1:50:58:58: f3:15:1d:45:84:54:6e:94:45:97:ee:26:36:23:fa:57:90:72: 35:7a:80:c1:5a:60:fa:21:5c:d3:98:ca:32:35:2e:5f:8a:18: 21:1d:fd:5c:84:1a:e1:c8:ba:33:11:b5:44:e3:67:c4:24:b3: 91:61:20:e8:59:28:d2:55:8b:44:6c:af:66:3b:eb:a1:cd:b1: b8:3f:11:4e:13:36:9f:ef:73:ff:9b:86:c0:24:6c:44:98:48: 6f:8c:cb:d5:fe:90:0e:ca:54:ab:c3:d3:08:b5:f2:76:16:6d: 83:c8:f0:31:38:8a:16:51:f8:25:61:20:52:35:76:6d:8c:cf: db:1a:01:6c:3f:2a:e2:d6:f3:d9:e0:76:ea:ca:ff:a7:69:c6: ec:b5:2f:7c:7c:e3:55:33:b5:7a:1a:1e:88:be:c1:54:fb:0b: 7e:f0:04:75:fe:68:28:c3:da:d2:91:24:7e:77:08:d8:ab:d2: 83:05:4b:cd:0d:46:b3:d3:4e:69:43:14:44:d9:62:09:db:81: a0:5d:66:d0:e9:38:c1:65:ae:91:2b:90:9d:7b:74:68:f8:48: 4f:a4:98:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9sg3qWxjk522t3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzVhMjI0ZGQtMTA0Zi00MWU3LTlmZDYtZTFlZmQ2Y2VlNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1UPALGwLIPYYN/wk4E+5OwmijKR1qjDfPSw H92PKosGmNI3jDlMOWPhvkUKOddnIPVSHPVoQBaIRrrzEL9739k0V1riFkhHptQS IdIeHhMu9K9xORpPgyVMvkZCW4mJ3um61g5vvYuK0AspNPhlDiU1gXcdxv6tzJRW y8XkuHjQ3Sz58BXirmsPj5AhgQymukxqTFslow+4g6w/vcXSvQACFSHdmyHDWDMi 88mpdO2VOD8y8o9YQZTRvroQLj1BX6Pi37kF0eMsD+W+Y/08xMjD8C7GC1fK9+gt k/h924F7Mb0Rt8c7IRsxwXxDMMTUQl8SUlzM2zj3LYaeehOQTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTMqkDCBSAx0/kDZVkkKVTgEHEoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzFiMGYxMGMtYmRkYi0z YTcxLTgzNTYtMjEyMWQ3ZmJiNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSefEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd4gGrnStAPLejUPU12KWFlcEE1xcmT8oA7Shp2PGnc8VBYWPMVHUWE VG6URZfuJjYj+leQcjV6gMFaYPohXNOYyjI1Ll+KGCEd/VyEGuHIujMRtUTjZ8Qk s5FhIOhZKNJVi0Rsr2Y766HNsbg/EU4TNp/vc/+bhsAkbESYSG+My9X+kA7KVKvD 0wi18nYWbYPI8DE4ihZR+CVhIFI1dm2Mz9saAWw/KuLW89ngdurK/6dpxuy1L3x8 41UztXoaHoi+wVT7C37wBHX+aCjD2tKRJH53CNir0oMFS80NRrPTTmlDFETZYgnb gaBdZtDpOMFlrpErkJ17dGj4SE+kmMY= -----END CERTIFICATE-----Generated at Tue Apr 21 20:29:24 2026 by rpki-client