$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa231b13-7863-3e7a-a4bf-25de6fe7cef8.roa File: aa231b13-7863-3e7a-a4bf-25de6fe7cef8.roa (raw, json) Hash identifier: 1FgQTnQNGOhqnyD0uusAoCZqCAYALLz9Pjj3QTSNJ10= Subject key identifier: 40:CF:65:60:4A:30:8F:53:23:F8:A2:1C:60:B1:CA:AD:BF:5A:82:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF732EDCBCEC04A58A47200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa231b13-7863-3e7a-a4bf-25de6fe7cef8.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33659 IP address blocks: 73.248.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:32:ed:cb:ce:c0:4a:58:a4:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=4ac03ec7-2fd2-4ca4-a098-f0990b80a060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f0:11:f3:80:1e:fd:a3:9d:d0:e9:82:34:59: d8:85:e5:47:2d:ac:6d:01:f7:48:74:6a:cd:5e:96: f7:30:22:96:d4:0e:87:71:48:79:80:4e:bb:e2:1d: 4a:60:dd:a5:6f:ed:5e:fd:0a:37:60:81:df:fa:99: d5:c4:fe:1a:3e:ab:1c:cf:dc:6f:76:4d:23:b9:6e: 53:68:5b:0c:dc:68:52:8d:5f:22:76:95:aa:d8:0a: 93:3d:c3:bd:9b:4b:9f:b5:ad:86:1b:31:26:4e:58: 1e:ea:83:70:87:da:45:8c:d1:ca:5b:a7:89:73:95: 5e:68:1d:f7:4a:cc:98:6f:de:b4:d7:f4:70:cb:ca: 0a:91:a6:1d:11:69:c6:ba:06:62:40:31:c0:a1:2b: 82:da:22:9a:f0:72:ba:4a:56:57:c3:20:cc:80:a7: 66:76:e6:f8:a9:ef:30:e4:2b:43:a2:2c:ee:74:b5: d8:c6:4b:7b:39:4e:bb:92:68:59:0a:cf:47:8d:1f: c1:c3:e3:c8:a9:01:62:8d:a3:c5:f1:92:b4:88:c0: e6:e4:84:c3:f6:a4:9e:75:05:8e:44:92:63:8e:1b: 4f:ce:b5:01:c1:16:1e:ea:b2:c3:69:d0:4b:09:ef: cd:13:8a:0b:9b:9f:b0:00:bd:6f:5a:f1:a9:77:8f: 61:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CF:65:60:4A:30:8F:53:23:F8:A2:1C:60:B1:CA:AD:BF:5A:82:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa231b13-7863-3e7a-a4bf-25de6fe7cef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:11:61:a1:12:d4:59:df:1d:3b:2f:c4:73:61:4a:54:11:bf: 93:c2:fe:cb:c7:84:d5:44:6e:8b:f5:87:da:43:ad:8e:14:41: df:c1:ce:4f:43:aa:f0:b3:ac:cc:6f:19:36:2a:dc:c6:76:90: 25:9d:94:ba:bf:aa:f8:bb:a7:c6:eb:fe:cb:97:65:00:f5:ed: 24:62:c5:e5:d9:44:10:eb:d3:d7:00:41:d3:12:1a:96:6c:13: b4:5b:81:a6:f8:38:07:75:2e:28:d3:d1:a4:34:3b:6f:e1:c0: 23:7d:ed:97:7b:12:a5:62:44:f5:e4:6b:3a:d4:e7:a8:d7:ee: 63:9b:86:15:f3:4e:ef:b4:b2:a2:a3:48:9a:2f:fe:a4:fe:26: 84:c7:f6:ef:86:4a:32:8b:cc:d3:d5:58:9a:e9:18:9f:05:03: e4:69:3b:e9:72:3b:95:6d:83:b6:28:ff:c2:e1:ba:f7:d2:89: 76:68:72:d7:4d:3d:36:cb:b1:73:1d:9e:09:2f:6b:b6:0a:1e: 08:d1:d1:8b:77:49:7c:cd:d2:1c:3e:d7:5d:13:fe:c7:3f:72: af:9f:66:7d:64:88:73:52:c3:84:1f:7b:bb:38:68:ea:49:0e: 1c:5c:d6:13:a8:2c:a9:bb:b1:4a:4e:92:ff:0a:90:2c:c9:6f: 9f:5e:03:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9zLty87ASlikcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NGFjMDNlYzctMmZkMi00Y2E0LWEwOTgtZjA5OTBiODBhMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/AR84Ae/aOd0OmCNFnYheVHLaxtAfdIdGrN Xpb3MCKW1A6HcUh5gE674h1KYN2lb+1e/Qo3YIHf+pnVxP4aPqscz9xvdk0juW5T aFsM3GhSjV8idpWq2AqTPcO9m0ufta2GGzEmTlge6oNwh9pFjNHKW6eJc5VeaB33 SsyYb9601/Rwy8oKkaYdEWnGugZiQDHAoSuC2iKa8HK6SlZXwyDMgKdmdub4qe8w 5CtDoizudLXYxkt7OU67kmhZCs9HjR/Bw+PIqQFijaPF8ZK0iMDm5ITD9qSedQWO RJJjjhtPzrUBwRYe6rLDadBLCe/NE4oLm5+wAL1vWvGpd49hFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDPZWBKMI9TI/iiHGCxyq2/WoIJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEyMzFiMTMtNzg2My0z ZTdhLWE0YmYtMjVkZTZmZTdjZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoRYaES1FnfHTsvxHNhSlQRv5PC/svHhNVEbov1h9pDrY4UQd/Bzk9D qvCzrMxvGTYq3MZ2kCWdlLq/qvi7p8br/suXZQD17SRixeXZRBDr09cAQdMSGpZs E7Rbgab4OAd1LijT0aQ0O2/hwCN97Zd7EqViRPXkazrU56jX7mObhhXzTu+0sqKj SJov/qT+JoTH9u+GSjKLzNPVWJrpGJ8FA+RpO+lyO5Vtg7Yo/8LhuvfSiXZoctdN PTbLsXMdngkva7YKHgjR0Yt3SXzN0hw+110T/sc/cq+fZn1kiHNSw4Qfe7s4aOpJ Dhxc1hOoLKm7sUpOkv8KkCzJb59eA3s= -----END CERTIFICATE-----Generated at Tue Apr 21 20:23:33 2026 by rpki-client