$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85efff2b-e384-353d-8ec2-996463fb13d4.roa File: 85efff2b-e384-353d-8ec2-996463fb13d4.roa (raw, json) Hash identifier: kkKuMR9jDiozM8k759fhcVi56+v5ELxC0EvGRQ5GCcE= Subject key identifier: 3F:8F:17:F7:C0:EB:D3:B9:F4:DA:B1:79:40:C1:F1:0F:27:0F:C4:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6FF9C81FF76A574610A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85efff2b-e384-353d-8ec2-996463fb13d4.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33660 IP address blocks: 73.131.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:ff:9c:81:ff:76:a5:74:61:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=c90ecf43-4cf9-4c6b-8a71-ce8f4d0cc57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ac:2a:36:d5:be:f3:65:6a:33:54:9f:fa:7d: 9d:d9:24:32:34:70:ea:cc:21:d7:3b:c1:8b:4f:fe: a9:ee:3a:6d:99:57:b8:68:9f:3d:d5:93:ad:07:d8: d2:e5:e3:ea:7e:24:d6:53:0a:69:cd:4e:7c:d3:7a: 98:1b:0d:77:24:e3:55:b2:5d:9f:13:0b:43:87:bd: 5a:af:fd:2e:a0:83:32:85:74:85:cd:a1:a7:2d:b1: 3e:85:6f:db:a0:bd:12:e0:45:b6:51:fc:da:b5:30: 55:3d:9c:0b:9b:e7:45:8a:f8:7a:7f:8f:52:cd:e0: 73:72:e8:05:40:8b:b0:7f:44:8c:3b:c2:c3:15:08: d2:dc:6e:e9:f7:a8:77:d3:b0:54:ae:1b:e3:80:3c: 26:7a:56:f4:c2:0a:36:f3:c7:da:65:dc:4a:5f:ae: e0:78:8e:45:01:56:da:23:7a:d4:d0:a8:04:ab:38: 48:6c:fb:bb:ab:09:54:4f:18:eb:31:d8:f1:9a:34: b5:68:c7:cd:22:3c:fc:e8:90:46:6a:1a:d3:f6:0a: cc:86:85:d2:eb:36:4c:ab:db:ce:16:a5:3a:25:99: 60:d5:9d:47:90:e5:53:b1:af:f0:c3:0c:40:95:50: ef:4e:78:3e:aa:be:23:a7:60:d8:e0:3e:a0:bb:f0: df:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8F:17:F7:C0:EB:D3:B9:F4:DA:B1:79:40:C1:F1:0F:27:0F:C4:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85efff2b-e384-353d-8ec2-996463fb13d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.131.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a1:38:db:84:c3:76:51:24:ed:3d:1a:54:02:9b:15:59:4c: 53:d0:45:71:4c:67:ae:87:c2:4d:94:09:d1:f4:56:90:87:87: 87:11:ad:65:a0:a5:1b:cc:ff:3d:f3:5e:49:6d:d9:ab:e6:12: 67:99:94:f1:07:10:7b:9f:e6:a3:9f:f9:35:ee:67:c2:e9:97: 5c:4c:a3:75:be:78:17:a8:7c:e1:53:8c:19:8b:7f:5c:3e:15: c8:fa:df:11:97:15:a1:41:c3:0d:7b:4d:51:ea:cb:02:09:5d: 24:70:d3:ad:b7:33:85:5b:94:0b:32:ba:97:c0:a0:a3:41:43: 5e:d7:03:41:5d:7a:1f:0f:04:51:87:e9:0d:18:ae:0e:73:b8: 0d:3b:9d:98:60:52:3b:be:ec:cf:f1:7a:5e:1e:52:da:23:4d: 8f:10:75:c6:49:e1:1a:b0:2a:1c:83:ec:14:01:f2:ce:5d:3a: 1c:ee:f5:4e:eb:9a:e9:77:83:c6:63:d5:6f:ce:66:13:92:67: 3f:88:f8:50:b6:cf:d4:01:7c:05:89:dd:be:4d:be:15:f1:08: 5b:d2:9d:1c:92:c0:80:0b:a0:de:2d:27:29:50:2b:15:e5:95: 1e:f3:84:37:2b:fd:b2:13:fa:03:2b:88:a7:7e:70:3b:2b:22: dc:a0:28:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9v+cgf92pXRhCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YzkwZWNmNDMtNGNmOS00YzZiLThhNzEtY2U4ZjRkMGNjNTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqwqNtW+82VqM1Sf+n2d2SQyNHDqzCHXO8GL T/6p7jptmVe4aJ891ZOtB9jS5ePqfiTWUwppzU5803qYGw13JONVsl2fEwtDh71a r/0uoIMyhXSFzaGnLbE+hW/boL0S4EW2UfzatTBVPZwLm+dFivh6f49SzeBzcugF QIuwf0SMO8LDFQjS3G7p96h307BUrhvjgDwmelb0wgo288faZdxKX67geI5FAVba I3rU0KgEqzhIbPu7qwlUTxjrMdjxmjS1aMfNIjz86JBGahrT9grMhoXS6zZMq9vO FqU6JZlg1Z1HkOVTsa/wwwxAlVDvTng+qr4jp2DY4D6gu/DfCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+PF/fA69O59NqxeUDB8Q8nD8TDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODVlZmZmMmItZTM4NC0z NTNkLThlYzItOTk2NDYzZmIxM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASYPJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6hONuEw3ZRJO09GlQCmxVZTFPQRXFMZ66Hwk2UCdH0VpCHh4cRrWWg pRvM/z3zXklt2avmEmeZlPEHEHuf5qOf+TXuZ8Lpl1xMo3W+eBeofOFTjBmLf1w+ Fcj63xGXFaFBww17TVHqywIJXSRw0623M4VblAsyupfAoKNBQ17XA0Fdeh8PBFGH 6Q0Yrg5zuA07nZhgUju+7M/xel4eUtojTY8QdcZJ4RqwKhyD7BQB8s5dOhzu9U7r mul3g8Zj1W/OZhOSZz+I+FC2z9QBfAWJ3b5NvhXxCFvSnRySwIALoN4tJylQKxXl lR7zhDcr/bIT+gMriKd+cDsrItygKPI= -----END CERTIFICATE-----Generated at Tue Apr 21 20:16:08 2026 by rpki-client