$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/965bac38-c480-31dd-a163-2fa4f74b188a.roa File: 965bac38-c480-31dd-a163-2fa4f74b188a.roa (raw, json) Hash identifier: 36Xh/asAwvLAv4A4mg7r+zqLEbr6ryamZJevJUR0PLU= Subject key identifier: B7:FE:E8:34:09:25:1B:BE:F9:78:60:C2:94:C3:91:48:60:EC:D3:1F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF8DC6F08BB709F2BFF9BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/965bac38-c480-31dd-a163-2fa4f74b188a.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 73.231.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:dc:6f:08:bb:70:9f:2b:ff:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=0e261bdc-8a23-4196-9e3d-aa76578c2d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:50:ba:17:9d:8f:da:d9:a9:0b:81:a1:ef: 0c:f5:b0:13:77:5c:28:ba:3d:62:91:f5:3c:46:ae: 52:29:86:00:a3:3e:9a:51:01:15:9c:a9:34:ad:3e: d9:d3:0f:5e:54:8e:ab:cc:4b:0a:41:47:7b:01:22: f9:06:6c:83:e2:60:e1:58:28:75:07:ad:d4:1a:d7: da:ab:aa:d4:85:db:f0:bd:f9:89:f5:99:70:40:cb: 42:df:11:21:4b:c4:29:17:20:95:f7:34:ca:c5:d4: 94:49:dd:3c:1f:ce:5c:b5:e0:ad:31:2f:8f:29:74: 52:48:3c:37:d9:fa:84:b4:d2:34:c3:3b:4b:12:c7: e2:7e:a9:b9:93:f7:da:d7:78:5d:ea:e8:ad:71:9e: 2e:8d:e4:be:72:10:75:f1:c5:c0:da:06:11:a1:29: f2:32:89:ad:93:d4:40:e9:a1:1d:8e:3c:31:b5:45: 1e:65:02:93:8c:b6:41:5d:45:d4:78:50:e9:69:f8: 1d:7e:3a:2f:cc:8e:2b:05:7f:25:6e:81:6c:94:c2: 34:82:43:46:e7:3b:f4:e0:0b:3e:44:a6:3c:3d:e5: 80:3c:62:28:1b:1d:dc:66:b5:c6:52:c2:b3:e6:27: ac:bf:f3:c4:4a:81:26:77:13:0c:31:67:38:43:58: 7b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FE:E8:34:09:25:1B:BE:F9:78:60:C2:94:C3:91:48:60:EC:D3:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/965bac38-c480-31dd-a163-2fa4f74b188a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.231.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:97:e2:e6:f4:3e:7b:fa:62:7b:b7:aa:b7:13:60:8a:5e:5b: 52:3b:91:04:8b:c2:d6:13:d5:b6:e6:da:fe:11:2f:94:1e:a1: ae:d5:be:a5:bf:1d:a9:ed:23:8b:e0:67:6e:b4:84:75:3c:99: d1:19:0b:ec:69:9a:ee:61:e2:a0:f6:6f:87:c6:5d:64:65:d4: 8f:60:99:00:77:b9:35:1d:a7:4a:cf:7c:22:4f:ed:75:42:2c: 34:58:23:f3:f8:c4:47:ec:85:04:cb:46:0c:d6:da:17:5a:64: 7b:bd:76:d5:14:18:44:6f:dd:a8:df:c2:2d:ea:11:8a:ea:86: 1d:9c:42:b8:2e:03:fa:07:15:3d:78:ff:99:ce:dd:f1:e4:0e: 46:76:0e:3b:3c:db:b1:d7:b7:44:14:d1:dd:91:b2:6e:ea:f8: 88:c8:89:45:08:0d:38:81:1b:64:b3:6a:71:5a:4c:67:ae:17: c3:8d:b6:01:0b:9d:a6:46:82:d9:46:3c:17:e2:fd:53:30:0e: e5:45:6c:21:28:fc:79:74:63:54:ad:16:85:b6:e9:95:28:23: 11:40:f5:12:5d:18:97:65:8f:d9:0c:9d:48:8b:be:e6:d6:fb: 4d:e9:9b:c5:25:fa:18:c3:bc:45:69:ae:a2:4b:e6:f5:92:c8: c5:ca:33:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+NxvCLtwnyv/m8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MGUyNjFiZGMtOGEyMy00MTk2LTllM2QtYWE3NjU3OGMyZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraFQuhedj9rZqQuBoe8M9bATd1wouj1ikfU8 Rq5SKYYAoz6aUQEVnKk0rT7Z0w9eVI6rzEsKQUd7ASL5BmyD4mDhWCh1B63UGtfa q6rUhdvwvfmJ9ZlwQMtC3xEhS8QpFyCV9zTKxdSUSd08H85cteCtMS+PKXRSSDw3 2fqEtNI0wztLEsfifqm5k/fa13hd6uitcZ4ujeS+chB18cXA2gYRoSnyMomtk9RA 6aEdjjwxtUUeZQKTjLZBXUXUeFDpafgdfjovzI4rBX8lboFslMI0gkNG5zv04As+ RKY8PeWAPGIoGx3cZrXGUsKz5iesv/PESoEmdxMMMWc4Q1h7vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLf+6DQJJRu++XhgwpTDkUhg7NMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTY1YmFjMzgtYzQ4MC0z MWRkLWExNjMtMmZhNGY3NGIxODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGX4ub0Pnv6Ynu3qrcTYIpeW1I7kQSLwtYT1bbm2v4RL5Qeoa7VvqW/ HantI4vgZ260hHU8mdEZC+xpmu5h4qD2b4fGXWRl1I9gmQB3uTUdp0rPfCJP7XVC LDRYI/P4xEfshQTLRgzW2hdaZHu9dtUUGERv3ajfwi3qEYrqhh2cQrguA/oHFT14 /5nO3fHkDkZ2Djs827HXt0QU0d2Rsm7q+IjIiUUIDTiBG2SzanFaTGeuF8ONtgEL naZGgtlGPBfi/VMwDuVFbCEo/Hl0Y1StFoW26ZUoIxFA9RJdGJdlj9kMnUiLvubW +03pm8Ul+hjDvEVprqJL5vWSyMXKM2Y= -----END CERTIFICATE-----Generated at Tue Apr 21 19:28:35 2026 by rpki-client