$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baa12bcb-7bf0-3ca0-a75f-f3b5ab1efd43.roa File: baa12bcb-7bf0-3ca0-a75f-f3b5ab1efd43.roa (raw, json) Hash identifier: g5JthcyhYBGD1L4Jy2UC/Bg2JS2l5Vxq/JG5e6lC0Oc= Subject key identifier: 4A:78:44:5E:B0:57:D1:95:AD:37:E4:A0:94:1D:1E:D4:5C:FF:61:C7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6D51BF93BF61790103F20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baa12bcb-7bf0-3ca0-a75f-f3b5ab1efd43.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 73.92.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:d5:1b:f9:3b:f6:17:90:10:3f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b79c9a45-e839-4d4e-834f-c625a12edd80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:1f:95:e5:28:73:ac:2b:4b:39:e5:78:68: 52:09:18:29:7d:33:86:2e:bb:df:ba:8b:30:41:fb: b2:11:43:5e:f9:e3:7b:cc:a1:70:94:39:90:b8:bd: c8:ae:9d:8e:73:16:95:12:f8:be:25:97:36:3a:74: a2:2d:ae:c4:58:77:cb:dc:51:73:b0:68:71:e3:eb: 38:47:5a:a1:7d:10:3c:ba:56:8d:6d:54:d0:20:4b: 34:e4:49:36:36:10:d4:c4:95:7b:fd:86:4b:de:83: f0:1d:de:66:0e:7d:c6:f0:74:de:db:59:8c:78:fa: 6b:e9:8d:ec:62:e8:d6:88:18:68:7e:5a:d5:b0:56: b7:20:d7:ea:f2:28:74:27:0f:2b:98:73:0b:0e:a7: 07:cd:6e:ba:d4:14:41:f0:a5:bd:a4:98:3d:de:45: 38:4e:bd:cc:5d:48:16:7c:06:2f:ca:cb:aa:ab:9c: 1f:e0:a7:ca:a5:9c:1c:28:69:f8:a9:2e:30:df:17: a5:e6:71:f2:6e:ad:ff:a8:03:76:db:e2:e7:40:b5: 8e:7a:43:a9:b9:ac:55:24:d7:7b:d1:53:61:d8:5a: c2:75:9e:40:49:ca:bb:35:b4:46:bb:13:ec:fa:3a: 4c:ca:45:03:f2:e4:1c:f7:12:66:e4:ed:f3:c5:76: a9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:78:44:5E:B0:57:D1:95:AD:37:E4:A0:94:1D:1E:D4:5C:FF:61:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baa12bcb-7bf0-3ca0-a75f-f3b5ab1efd43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.92.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:27:f3:53:48:8c:69:58:ac:ce:06:b8:52:7b:0c:5e:97:51: 51:4c:9c:58:54:a0:97:1d:e7:20:16:ce:1e:fb:b4:26:d3:48: 0c:9c:aa:36:ef:c5:47:77:dd:ed:ad:14:ed:10:2d:7d:58:7e: 41:e4:8a:72:93:ea:f9:12:d7:7c:63:93:94:d6:60:6b:94:e7: ca:3e:c3:49:c0:e1:97:79:ee:77:48:30:ef:33:70:98:80:5f: 51:bb:08:74:fd:b2:29:8b:b3:b9:8f:0e:91:fd:ff:87:c1:72: 21:df:94:fc:f5:46:d4:c0:2e:f3:8e:9a:b6:b7:a3:bf:fc:e6: f7:3a:29:15:a2:46:71:31:41:39:d2:e4:80:54:ee:6e:8b:24: 66:8c:ea:4c:40:7e:42:ec:a1:96:98:f6:6e:b3:92:05:a4:3d: 2d:93:68:14:dc:20:e4:85:3b:35:91:5b:fb:79:7f:ea:f4:38: 54:7d:19:6d:93:00:57:6b:43:34:e9:2f:05:a7:0d:86:d5:93: 1d:17:f3:78:51:7b:cd:63:4c:c5:26:80:1e:4e:22:7f:3c:70: 91:46:0d:38:74:d5:69:61:7d:ea:36:93:62:d6:67:39:43:8a: ee:48:9c:43:f9:da:39:19:b4:42:aa:fc:ff:b5:32:ab:eb:9f: e2:07:91:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9tUb+Tv2F5AQPyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk Yjc5YzlhNDUtZTgzOS00ZDRlLTgzNGYtYzYyNWExMmVkZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyQfleUoc6wrSznleGhSCRgpfTOGLrvfuosw QfuyEUNe+eN7zKFwlDmQuL3Irp2OcxaVEvi+JZc2OnSiLa7EWHfL3FFzsGhx4+s4 R1qhfRA8ulaNbVTQIEs05Ek2NhDUxJV7/YZL3oPwHd5mDn3G8HTe21mMePpr6Y3s YujWiBhoflrVsFa3INfq8ih0Jw8rmHMLDqcHzW661BRB8KW9pJg93kU4Tr3MXUgW fAYvysuqq5wf4KfKpZwcKGn4qS4w3xel5nHybq3/qAN22+LnQLWOekOpuaxVJNd7 0VNh2FrCdZ5AScq7NbRGuxPs+jpMykUD8uQc9xJm5O3zxXapuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp4RF6wV9GVrTfkoJQdHtRc/2HHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFhMTJiY2ItN2JmMC0z Y2EwLWE3NWYtZjNiNWFiMWVmZDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSVzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMn81NIjGlYrM4GuFJ7DF6XUVFMnFhUoJcd5yAWzh77tCbTSAycqjbv xUd33e2tFO0QLX1YfkHkinKT6vkS13xjk5TWYGuU58o+w0nA4Zd57ndIMO8zcJiA X1G7CHT9simLs7mPDpH9/4fBciHflPz1RtTALvOOmra3o7/85vc6KRWiRnExQTnS 5IBU7m6LJGaM6kxAfkLsoZaY9m6zkgWkPS2TaBTcIOSFOzWRW/t5f+r0OFR9GW2T AFdrQzTpLwWnDYbVkx0X83hRe81jTMUmgB5OIn88cJFGDTh01Wlhfeo2k2LWZzlD iu5InEP52jkZtEKq/P+1Mqvrn+IHkYQ= -----END CERTIFICATE-----Generated at Tue Apr 21 20:40:25 2026 by rpki-client