$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e6e538-7ce1-3819-a615-ebc772700748.roa File: 87e6e538-7ce1-3819-a615-ebc772700748.roa (raw, json) Hash identifier: G+3ZXaNiE/UZj/Wmo0KaH7LkQuprSrCMWB4xa1AMz5I= Subject key identifier: 9D:85:88:11:88:76:98:FF:68:F9:CE:9D:C4:CA:B2:BF:B1:F7:11:1B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF5C5574C96D171BFF2D400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e6e538-7ce1-3819-a615-ebc772700748.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33659 IP address blocks: 73.196.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:c5:57:4c:96:d1:71:bf:f2:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=e7558632-ae5c-430b-81a3-b1bea904c9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f3:14:73:79:95:45:a5:9d:02:bb:8f:86:be: 23:33:ac:95:f2:af:91:77:d8:d3:69:10:16:33:b2: 9a:de:ec:37:ae:d9:b2:84:10:0e:1e:f7:30:1f:de: 4d:42:17:6a:50:3f:a8:01:87:83:8f:c6:85:98:e8: 44:be:e8:bb:63:98:b5:7d:1c:e2:1b:89:92:3b:8f: 90:fb:b4:32:97:44:5b:08:a2:61:ad:ae:0a:e9:1d: 2f:dd:67:6c:0f:2d:42:c1:fd:5e:09:33:e6:28:b5: 9c:ec:33:64:ae:f7:82:ca:f2:91:93:9c:17:f5:55: a3:b9:f7:96:4b:b7:76:50:c8:26:fc:7f:1c:5d:31: 79:2b:e4:53:41:f5:2a:c9:1f:75:32:7f:6f:5e:a1: 86:23:92:cb:dc:ae:9c:63:00:8b:f9:08:f7:d2:6f: 82:c8:b9:2a:a8:be:3e:01:56:13:fe:fa:d0:c3:c4: 9a:24:0d:b4:21:e5:85:9b:6a:8c:a9:89:89:91:87: 3e:ba:76:e0:13:fa:e4:c4:ba:6c:6d:8a:b0:38:53: 94:16:84:bc:99:8f:16:a8:83:ab:40:2a:9b:1e:7c: 80:89:7e:07:49:d7:67:c3:3c:cb:43:e9:ea:6c:26: b2:75:50:77:c8:fd:1b:e8:7b:37:19:27:f4:69:e6: 25:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:85:88:11:88:76:98:FF:68:F9:CE:9D:C4:CA:B2:BF:B1:F7:11:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e6e538-7ce1-3819-a615-ebc772700748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.196.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5a:ee:5b:81:7d:8f:ae:20:7e:a9:55:12:8f:99:75:05:e6: d8:55:dd:bc:40:fb:32:4e:d1:29:8a:79:c7:e3:9d:cc:55:fe: ef:8b:cb:16:54:9b:91:cd:d7:1c:3b:bb:6e:4e:19:40:9e:f3: 9c:8a:f5:81:45:17:c1:d3:71:49:8d:fe:7d:60:eb:59:84:36: 66:f0:ed:86:6e:65:41:17:c5:e9:08:04:e1:b0:47:31:8b:1c: ba:4c:12:7f:fe:0f:c1:7a:b5:f1:3c:7d:ca:f8:67:e8:3b:0e: 91:6a:ba:81:14:59:d8:97:68:88:30:70:b5:b0:1c:b2:c1:08: 23:45:eb:c5:10:4c:5a:d3:5b:1c:cf:f2:87:82:60:36:92:93: b0:d4:92:eb:a7:22:3c:09:2f:82:77:82:04:3d:89:2c:2b:6b: 38:58:00:5e:12:c1:0b:1b:9b:5e:97:40:55:f6:07:dd:bb:e8: f6:fa:f5:04:d2:e9:29:7d:82:92:98:ac:c5:ac:ae:75:53:e4: dd:d6:ee:c1:1c:f0:57:79:47:55:bf:aa:ae:e6:f2:9e:e8:66: fd:37:2f:fe:29:32:aa:e4:dd:ac:d9:44:f0:bf:05:c1:0b:6a: 89:58:b1:89:a4:01:2c:90:71:72:f3:b2:7b:51:92:50:3a:dc: c2:81:ac:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9cVXTJbRcb/y1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZTc1NTg2MzItYWU1Yy00MzBiLTgxYTMtYjFiZWE5MDRjOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfMUc3mVRaWdAruPhr4jM6yV8q+Rd9jTaRAW M7Ka3uw3rtmyhBAOHvcwH95NQhdqUD+oAYeDj8aFmOhEvui7Y5i1fRziG4mSO4+Q +7Qyl0RbCKJhra4K6R0v3WdsDy1Cwf1eCTPmKLWc7DNkrveCyvKRk5wX9VWjufeW S7d2UMgm/H8cXTF5K+RTQfUqyR91Mn9vXqGGI5LL3K6cYwCL+Qj30m+CyLkqqL4+ AVYT/vrQw8SaJA20IeWFm2qMqYmJkYc+unbgE/rkxLpsbYqwOFOUFoS8mY8WqIOr QCqbHnyAiX4HSddnwzzLQ+nqbCaydVB3yP0b6Hs3GSf0aeYlOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2FiBGIdpj/aPnOncTKsr+x9xEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdlNmU1MzgtN2NlMS0z ODE5LWE2MTUtZWJjNzcyNzAwNzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCScTsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACta7luBfY+uIH6pVRKPmXUF5thV3bxA+zJO0SmKecfjncxV/u+LyxZU m5HN1xw7u25OGUCe85yK9YFFF8HTcUmN/n1g61mENmbw7YZuZUEXxekIBOGwRzGL HLpMEn/+D8F6tfE8fcr4Z+g7DpFquoEUWdiXaIgwcLWwHLLBCCNF68UQTFrTWxzP 8oeCYDaSk7DUkuunIjwJL4J3ggQ9iSwrazhYAF4SwQsbm16XQFX2B9276Pb69QTS 6Sl9gpKYrMWsrnVT5N3W7sEc8Fd5R1W/qq7m8p7oZv03L/4pMqrk3azZRPC/BcEL aolYsYmkASyQcXLzsntRklA63MKBrNg= -----END CERTIFICATE-----Generated at Tue Apr 21 23:04:03 2026 by rpki-client