$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fea8696-1c21-3871-8df7-063a7dbbaa20.roa File: 9fea8696-1c21-3871-8df7-063a7dbbaa20.roa (raw, json) Hash identifier: tE4ZT+MLimabFxzn4RqORvovetYllm4VMi0ceYxRsrI= Subject key identifier: A1:1E:2C:CA:4C:16:4B:DD:D4:AD:E8:30:F3:77:AC:6C:1B:4E:75:6B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF64A581C2E42D647C09E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fea8696-1c21-3871-8df7-063a7dbbaa20.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 73.209.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:4a:58:1c:2e:42:d6:47:c0:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=920874b8-e9ee-470f-8f1e-111e526f59b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b6:01:a3:e2:d4:d2:c9:da:34:07:92:a4:5b: 58:a6:fc:6b:f6:72:f5:5d:77:29:3e:f6:c9:84:69: 46:e0:fd:4b:e4:75:49:fd:66:b5:23:5a:d8:f4:29: 4d:68:74:a0:76:d3:ca:55:26:ba:d7:c6:7f:6b:ab: 22:36:68:98:29:23:2f:07:dc:65:df:46:72:12:f4: 6f:6c:b7:fc:92:88:94:ce:eb:e7:db:f3:3c:f8:2c: a2:ff:f3:aa:06:4b:96:20:c4:00:19:2c:d6:f2:31: 2d:62:be:4a:23:b1:ac:25:7f:74:1b:02:9e:49:27: e4:58:88:99:a8:9f:0b:f2:6c:3e:6b:3d:53:7d:50: 54:9e:74:b8:f1:0f:dd:2a:16:ff:18:c7:9c:78:96: 3b:14:82:19:1e:c9:c5:78:52:b1:f1:91:97:01:5d: 46:25:33:c9:fa:4e:ec:23:0a:ac:fd:84:79:e6:fb: 15:7c:00:5e:c8:c4:2c:d8:83:ae:fc:93:f8:c2:2c: de:64:1d:20:fd:6e:f7:13:ca:74:7e:21:51:0b:09: 7f:6f:30:05:1b:33:0c:9b:25:a9:ac:63:e2:91:09: 6e:9f:52:bd:6c:0a:41:5c:16:17:f2:20:41:cc:05: 23:c0:ef:cc:d6:ef:e4:ac:ef:85:b6:8f:13:31:75: f1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1E:2C:CA:4C:16:4B:DD:D4:AD:E8:30:F3:77:AC:6C:1B:4E:75:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fea8696-1c21-3871-8df7-063a7dbbaa20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c6:e4:15:71:3e:78:28:22:a4:57:a5:bb:42:48:b5:01:66: 41:94:77:72:20:13:6d:72:aa:e1:b9:55:04:40:bf:70:33:12: b8:3d:26:d2:e2:ec:6e:6e:7c:66:e9:0b:cf:6a:2f:f2:a8:91: 33:bc:5d:18:e8:e3:84:31:03:de:d8:38:89:29:a1:7a:49:5d: 4d:78:06:0a:fc:84:48:12:e4:f2:e3:ef:b5:6a:40:7f:e9:bf: 5d:e6:52:3c:8c:d8:43:9b:9b:5e:b6:66:90:33:10:a5:60:b9: 9f:e7:7b:35:a1:2a:da:b7:31:a4:7f:75:fb:b9:c2:5e:e2:c3: cc:ec:fb:e2:c7:97:dc:d2:51:1e:f7:5b:49:f3:01:b9:85:99: b9:af:23:59:71:dd:b5:e0:ce:19:09:73:ea:59:4d:be:e3:b7: 64:23:98:9e:93:85:b8:18:8c:47:0a:90:98:92:f8:81:10:26: 4b:c8:95:5c:12:02:54:8b:8e:e8:50:5b:b1:11:52:7f:d1:16: d6:5d:82:e5:b1:57:86:68:2e:9d:77:6d:a0:56:ac:92:f6:ca: b9:d3:e9:23:50:41:8e:cf:10:9b:27:4f:72:9a:37:ca:ab:af: ca:c2:ca:71:45:e5:e3:e7:61:eb:23:83:51:72:d0:c7:63:40: 0b:b3:de:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9kpYHC5C1kfAnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTIwODc0YjgtZTllZS00NzBmLThmMWUtMTExZTUyNmY1OWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLYBo+LU0snaNAeSpFtYpvxr9nL1XXcpPvbJ hGlG4P1L5HVJ/Wa1I1rY9ClNaHSgdtPKVSa618Z/a6siNmiYKSMvB9xl30ZyEvRv bLf8koiUzuvn2/M8+Cyi//OqBkuWIMQAGSzW8jEtYr5KI7GsJX90GwKeSSfkWIiZ qJ8L8mw+az1TfVBUnnS48Q/dKhb/GMeceJY7FIIZHsnFeFKx8ZGXAV1GJTPJ+k7s Iwqs/YR55vsVfABeyMQs2IOu/JP4wizeZB0g/W73E8p0fiFRCwl/bzAFGzMMmyWp rGPikQlun1K9bApBXBYX8iBBzAUjwO/M1u/krO+Fto8TMXXxNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEeLMpMFkvd1K3oMPN3rGwbTnVrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWZlYTg2OTYtMWMyMS0z ODcxLThkZjctMDYzYTdkYmJhYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSdEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfG5BVxPngoIqRXpbtCSLUBZkGUd3IgE21yquG5VQRAv3AzErg9JtLi 7G5ufGbpC89qL/KokTO8XRjo44QxA97YOIkpoXpJXU14Bgr8hEgS5PLj77VqQH/p v13mUjyM2EObm162ZpAzEKVguZ/nezWhKtq3MaR/dfu5wl7iw8zs++LHl9zSUR73 W0nzAbmFmbmvI1lx3bXgzhkJc+pZTb7jt2QjmJ6ThbgYjEcKkJiS+IEQJkvIlVwS AlSLjuhQW7ERUn/RFtZdguWxV4ZoLp13baBWrJL2yrnT6SNQQY7PEJsnT3KaN8qr r8rCynFF5ePnYesjg1Fy0MdjQAuz3iY= -----END CERTIFICATE-----Generated at Tue Apr 21 19:25:17 2026 by rpki-client