$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ba38de0-db6a-38d1-9191-ee4c58fa3b02.roa File: 7ba38de0-db6a-38d1-9191-ee4c58fa3b02.roa (raw, json) Hash identifier: m1kQ2J9phj/RDfFbktPSBdXKo3BdSHtHgiWsxxpRjzo= Subject key identifier: 34:21:43:74:EA:9B:65:FD:BB:30:80:8B:35:81:A6:27:5E:3E:B4:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF71C8B387A6F55AFD78B20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ba38de0-db6a-38d1-9191-ee4c58fa3b02.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33659 IP address blocks: 73.150.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:1c:8b:38:7a:6f:55:af:d7:8b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9deee5a3-1419-413f-a6b6-e900aab19121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dd:5c:76:56:0b:ab:ab:16:b3:71:d3:75:1a: f2:ad:1e:c5:10:ae:82:4a:bb:8a:47:6a:e8:f4:d6: b3:ba:a0:12:e3:77:27:9b:b3:e1:81:59:d1:43:90: 0c:be:a0:e9:3a:f0:84:f0:b1:c4:89:ae:84:d1:76: bb:a1:60:1e:0e:91:2d:0b:74:a0:2d:54:ef:6a:5f: 86:a0:83:9a:77:ea:4c:ef:dd:4a:31:2b:5a:44:f6: 9e:13:f0:a9:51:ac:0e:45:2a:9d:73:12:f4:d3:ed: a6:fa:ed:83:17:20:34:8d:2b:b0:5d:d4:a7:12:0f: 30:26:21:e5:62:2b:bd:19:97:eb:1b:62:ea:5e:7e: c2:67:55:29:d7:96:db:b8:bf:86:9d:a0:ea:c0:5d: a2:c5:51:6a:28:41:13:0f:c9:db:63:33:d7:fd:68: 0b:06:38:ca:51:a9:33:16:39:04:d2:69:89:5b:b1: 9f:30:10:28:0f:17:f9:60:71:19:47:0b:11:f7:13: ba:32:dc:ea:6f:6a:fb:3c:10:d1:68:46:28:7f:9f: 28:f4:55:08:1f:0e:c8:f0:85:19:25:bc:4f:d0:b0: e1:b5:54:44:26:a4:7a:57:14:29:55:4a:40:01:59: d2:6f:e0:dd:93:dd:e8:ae:29:ae:c3:65:8d:94:45: f6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:21:43:74:EA:9B:65:FD:BB:30:80:8B:35:81:A6:27:5E:3E:B4:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ba38de0-db6a-38d1-9191-ee4c58fa3b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.150.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:33:5a:5b:69:da:b8:6d:eb:ea:d7:96:fe:50:13:37:a5:0d: 8c:97:76:99:ab:37:cc:29:59:16:f5:d2:d6:ef:5c:80:2e:a5: ae:69:5c:c6:0f:4e:b9:76:c4:00:0c:d6:f0:d4:e8:c7:c6:38: 1b:4a:c7:0c:9e:40:d4:28:5e:55:dc:4f:7f:29:2c:55:35:29: f3:a1:ca:f6:fa:f3:d2:17:fd:04:ef:1a:8c:ef:7a:a3:a1:23: cb:cf:41:65:74:b7:da:c1:ad:3a:c1:44:34:c4:b1:0d:0e:54: 89:e7:5a:21:ad:9b:39:a4:c7:e4:ab:df:b1:e1:24:54:3f:f8: 19:42:a5:4c:03:75:8b:d9:7c:03:71:d9:41:fb:b7:ed:7d:f7: 57:8f:3f:50:24:1c:6b:38:0d:76:85:91:3d:06:f2:6f:58:78: 55:5b:51:21:55:e3:d0:e5:f9:7d:48:5b:be:61:59:b9:50:b9: 45:1c:72:ef:0b:bc:5b:f0:87:9d:51:e8:17:fd:b7:af:46:a8: 10:b0:b2:93:54:a9:9a:92:47:24:58:76:34:07:2e:30:6e:9e: f5:5c:11:ed:ea:ca:f0:b8:10:c5:71:6f:80:9f:eb:d7:23:1a: 87:00:de:67:d4:b1:98:29:a2:2f:79:75:0a:f5:97:a5:9e:80: c9:06:09:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9xyLOHpvVa/XiyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWRlZWU1YTMtMTQxOS00MTNmLWE2YjYtZTkwMGFhYjE5MTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN1cdlYLq6sWs3HTdRryrR7FEK6CSruKR2ro 9NazuqAS43cnm7PhgVnRQ5AMvqDpOvCE8LHEia6E0Xa7oWAeDpEtC3SgLVTval+G oIOad+pM791KMStaRPaeE/CpUawORSqdcxL00+2m+u2DFyA0jSuwXdSnEg8wJiHl Yiu9GZfrG2LqXn7CZ1Up15bbuL+GnaDqwF2ixVFqKEETD8nbYzPX/WgLBjjKUakz FjkE0mmJW7GfMBAoDxf5YHEZRwsR9xO6Mtzqb2r7PBDRaEYof58o9FUIHw7I8IUZ JbxP0LDhtVREJqR6VxQpVUpAAVnSb+Ddk93orimuw2WNlEX2rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQhQ3Tqm2X9uzCAizWBpidePrSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2JhMzhkZTAtZGI2YS0z OGQxLTkxOTEtZWU0YzU4ZmEzYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSZZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4zWltp2rht6+rXlv5QEzelDYyXdpmrN8wpWRb10tbvXIAupa5pXMYP Trl2xAAM1vDU6MfGOBtKxwyeQNQoXlXcT38pLFU1KfOhyvb689IX/QTvGozveqOh I8vPQWV0t9rBrTrBRDTEsQ0OVInnWiGtmzmkx+Sr37HhJFQ/+BlCpUwDdYvZfANx 2UH7t+1991ePP1AkHGs4DXaFkT0G8m9YeFVbUSFV49Dl+X1IW75hWblQuUUccu8L vFvwh51R6Bf9t69GqBCwspNUqZqSRyRYdjQHLjBunvVcEe3qyvC4EMVxb4Cf69cj GocA3mfUsZgpoi95dQr1l6WegMkGCeg= -----END CERTIFICATE-----Generated at Tue Apr 21 20:24:19 2026 by rpki-client