$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae7291a-8cce-3db4-9be4-ec70b9200256.roa File: bae7291a-8cce-3db4-9be4-ec70b9200256.roa (raw, json) Hash identifier: 5z8BhXtuJrYhzZgLo7w9tOsyEf/T1FEzBT64g3c35Rs= Subject key identifier: BF:9C:DB:51:1D:43:5D:99:38:DF:1A:C5:60:40:F5:D8:48:DC:D8:EB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF66301F18AE0DAC3655CA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae7291a-8cce-3db4-9be4-ec70b9200256.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 73.72.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:63:01:f1:8a:e0:da:c3:65:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=c8f04441-d766-481b-a5fe-98ea0d2bdb86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4b:f9:4f:f8:19:4f:48:da:bf:32:9a:a0:9c: 55:f3:38:27:19:48:cb:45:5d:8a:68:c3:3b:93:07: b8:9f:89:74:01:23:17:5c:07:57:cd:76:c9:33:7b: 54:dd:90:eb:8b:7f:a9:61:a7:f6:d8:fa:7b:95:fe: a5:7a:3b:02:99:c5:2f:36:0a:ae:4a:f0:2e:d7:16: dc:ad:6d:93:70:c9:ca:f6:97:28:56:64:11:05:08: 36:be:64:9b:4a:d9:26:9a:8e:f2:06:59:c7:3b:26: 2d:54:22:b1:30:eb:48:e4:73:62:cd:f7:76:12:95: 8d:49:9f:98:c7:31:b9:fb:4e:13:f3:a6:5c:cc:c2: dd:c9:aa:7f:39:a6:35:01:9f:dd:0c:6c:28:47:bf: 3d:72:46:79:fa:9a:76:55:c3:76:bf:ea:25:39:3c: f9:5f:e3:30:3a:93:f1:9c:a8:32:56:eb:ad:e5:a1: b7:99:28:ec:6d:a8:7e:cd:af:1d:e9:2d:69:b0:65: b1:d8:eb:15:77:4a:91:60:35:83:a5:6c:34:a2:b7: 9d:22:23:74:62:f5:20:03:5e:7d:ce:8c:5d:ca:8e: bb:1c:b9:8f:b1:c5:72:52:9e:64:9f:44:b9:3b:0b: 88:9b:87:14:45:a1:7f:93:65:bd:78:23:97:74:8f: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9C:DB:51:1D:43:5D:99:38:DF:1A:C5:60:40:F5:D8:48:DC:D8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae7291a-8cce-3db4-9be4-ec70b9200256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.72.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:cd:1a:57:9a:b3:fb:57:9e:b0:eb:03:d3:ed:bf:fe:63:a9: 04:59:3a:a4:e6:fe:73:58:d5:6c:0c:bd:2f:a9:32:6e:69:60: 95:42:51:46:46:d5:77:19:7d:da:9b:21:4b:d7:e2:6d:27:5a: 5e:f9:e9:b0:30:4c:bf:06:c5:43:b2:2e:c8:cb:b3:40:47:a0: fc:b5:9f:d8:e9:75:8e:3f:10:d2:b3:a5:36:6b:a5:19:34:76: 53:52:72:20:1e:44:c3:f4:2a:1e:78:17:0d:8c:44:d1:a6:c5: 12:10:7f:7a:28:4e:3f:5f:94:e4:96:ac:31:c1:7c:36:aa:6a: 30:fc:c0:b1:2d:80:64:7d:1d:1d:cd:ec:f5:20:fb:9a:33:b0: 1c:5c:af:c0:c9:63:f8:ef:c2:ca:02:6a:1c:62:ad:12:fd:9e: e8:30:ce:ad:d2:6c:cb:96:56:10:ba:0e:d4:a1:20:c8:1a:a9: f4:ab:87:ba:14:36:4a:18:ec:44:9d:f9:75:5e:63:46:36:88: 96:d3:e8:b7:a9:81:e6:aa:af:40:c5:34:1b:e4:55:63:9f:b9: ca:8c:15:ec:bf:6f:a6:08:96:6d:e6:da:bf:11:13:6e:6c:38: c8:2a:56:43:50:1e:b2:22:a3:20:09:c2:ef:9d:7a:0a:19:3d: 1a:f8:21:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9mMB8Yrg2sNlXKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YzhmMDQ0NDEtZDc2Ni00ODFiLWE1ZmUtOThlYTBkMmJkYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkv5T/gZT0javzKaoJxV8zgnGUjLRV2KaMM7 kwe4n4l0ASMXXAdXzXbJM3tU3ZDri3+pYaf22Pp7lf6lejsCmcUvNgquSvAu1xbc rW2TcMnK9pcoVmQRBQg2vmSbStkmmo7yBlnHOyYtVCKxMOtI5HNizfd2EpWNSZ+Y xzG5+04T86ZczMLdyap/OaY1AZ/dDGwoR789ckZ5+pp2VcN2v+olOTz5X+MwOpPx nKgyVuut5aG3mSjsbah+za8d6S1psGWx2OsVd0qRYDWDpWw0oredIiN0YvUgA159 zoxdyo67HLmPscVyUp5kn0S5OwuIm4cURaF/k2W9eCOXdI/cGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+c21EdQ12ZON8axWBA9dhI3NjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFlNzI5MWEtOGNjZS0z ZGI0LTliZTQtZWM3MGI5MjAwMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSUggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbNGleas/tXnrDrA9Ptv/5jqQRZOqTm/nNY1WwMvS+pMm5pYJVCUUZG 1XcZfdqbIUvX4m0nWl756bAwTL8GxUOyLsjLs0BHoPy1n9jpdY4/ENKzpTZrpRk0 dlNSciAeRMP0Kh54Fw2MRNGmxRIQf3ooTj9flOSWrDHBfDaqajD8wLEtgGR9HR3N 7PUg+5ozsBxcr8DJY/jvwsoCahxirRL9nugwzq3SbMuWVhC6DtShIMgaqfSrh7oU NkoY7ESd+XVeY0Y2iJbT6Lepgeaqr0DFNBvkVWOfucqMFey/b6YIlm3m2r8RE25s OMgqVkNQHrIioyAJwu+degoZPRr4Ib0= -----END CERTIFICATE-----Generated at Tue Apr 21 21:45:18 2026 by rpki-client