$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdd5fb1c-d808-3172-a775-90100670844c.roa File: bdd5fb1c-d808-3172-a775-90100670844c.roa (raw, json) Hash identifier: ubGJARlA92H5z4FrKeN7TtyZQ4HjtUi+YI+apM0LB2o= Subject key identifier: 01:6C:88:DE:C2:9A:D4:47:17:4F:A6:D3:0F:CE:00:EC:7E:F1:B2:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF897ECF85A2F57482D6800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdd5fb1c-d808-3172-a775-90100670844c.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 73.158.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:97:ec:f8:5a:2f:57:48:2d:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=da90df70-520d-462d-86b8-b9ba6ff3051d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:9d:13:7b:14:f3:44:de:d2:da:29:f9:8f: 77:7d:b8:e8:c6:d3:4c:d6:55:d6:54:19:20:4f:a3: bf:b6:38:a3:23:b5:fa:0b:f4:46:6c:de:93:b8:53: 2e:ed:0d:7b:71:8e:f5:ea:88:f3:66:55:35:f3:80: f0:01:19:dc:1e:ec:9b:75:1c:77:f4:f0:5b:51:e0: 13:03:14:fe:04:fb:da:fe:49:56:72:26:51:13:c4: 94:42:57:b6:de:5f:48:0d:c6:be:02:79:62:9c:fa: b7:d2:93:7a:33:b0:df:2b:2a:49:5d:76:24:c3:d6: 63:af:46:26:a1:9c:3f:f0:bc:49:19:cc:8e:22:35: 54:b7:25:2b:69:95:c5:0a:0b:22:c0:61:d1:06:35: f5:fa:10:0a:9a:7c:50:78:d7:8d:c0:e4:01:23:cc: 1b:d6:58:fa:41:86:17:e0:07:e9:dc:40:57:00:29: 68:eb:87:f1:fe:ae:35:7c:90:5f:0b:ec:38:a9:f2: 77:f8:62:b8:0f:7a:c1:2f:47:69:9a:8a:b9:8f:98: 8e:2e:ed:39:1c:40:07:6d:37:97:2a:f6:42:1a:19: 13:2e:3a:50:32:ab:3a:36:dc:a7:ae:8e:97:ba:06: 69:fd:c6:eb:d6:f6:68:db:b0:6e:62:84:82:2c:e8: d0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6C:88:DE:C2:9A:D4:47:17:4F:A6:D3:0F:CE:00:EC:7E:F1:B2:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdd5fb1c-d808-3172-a775-90100670844c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.158.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ce:64:95:62:5f:9a:c4:93:3c:be:10:a4:ac:e6:3f:b5:de: 4e:e2:b4:75:7a:93:4d:91:34:ad:10:4c:53:1e:24:2b:d8:c9: a9:26:69:bf:6e:91:0a:80:ee:5a:1c:2e:ad:a9:d2:c4:39:0a: e0:26:04:6d:49:b5:02:51:e6:ab:00:f8:e1:82:e4:ce:16:a9: ef:39:ab:09:67:0e:f7:d1:09:e3:68:71:88:32:93:fe:ec:02: 0d:6c:96:76:4e:9f:4e:49:19:28:f5:7c:5c:1a:e5:8b:5e:33: fb:2d:1e:57:8f:49:fb:a3:9a:ab:12:21:ff:8c:79:e5:2f:59: 35:67:2e:32:04:be:74:87:6c:1b:25:e3:7b:89:c7:b6:bb:08: d1:d1:49:a3:80:f9:2f:4a:7b:91:cf:18:8c:2d:f5:09:a3:4e: f9:ab:c5:ac:1e:fe:2c:1b:4c:6e:98:bc:8e:89:4c:f7:0f:66: 91:f7:99:46:ba:f1:43:db:3a:c8:46:ce:db:91:ea:32:4f:e4: 97:10:af:43:b4:83:7e:25:29:95:9d:95:28:58:92:be:ca:4a: b9:d7:b8:e7:52:04:fc:99:03:80:1b:36:36:a8:9f:97:64:de: ae:2f:d5:63:20:ca:8d:ae:4e:95:85:66:1c:b6:d0:a0:ce:8a: 2d:ae:49:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+Jfs+FovV0gtaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZGE5MGRmNzAtNTIwZC00NjJkLTg2YjgtYjliYTZmZjMwNTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg2dE3sU80Te0top+Y93fbjoxtNM1lXWVBkg T6O/tjijI7X6C/RGbN6TuFMu7Q17cY716ojzZlU184DwARncHuybdRx39PBbUeAT AxT+BPva/klWciZRE8SUQle23l9IDca+AnlinPq30pN6M7DfKypJXXYkw9Zjr0Ym oZw/8LxJGcyOIjVUtyUraZXFCgsiwGHRBjX1+hAKmnxQeNeNwOQBI8wb1lj6QYYX 4Afp3EBXAClo64fx/q41fJBfC+w4qfJ3+GK4D3rBL0dpmoq5j5iOLu05HEAHbTeX KvZCGhkTLjpQMqs6Ntynro6XugZp/cbr1vZo27BuYoSCLOjQrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFsiN7CmtRHF0+m0w/OAOx+8bK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmRkNWZiMWMtZDgwOC0z MTcyLWE3NzUtOTAxMDA2NzA4NDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLOZJViX5rEkzy+EKSs5j+13k7itHV6k02RNK0QTFMeJCvYyakmab9u kQqA7locLq2p0sQ5CuAmBG1JtQJR5qsA+OGC5M4Wqe85qwlnDvfRCeNocYgyk/7s Ag1slnZOn05JGSj1fFwa5YteM/stHlePSfujmqsSIf+MeeUvWTVnLjIEvnSHbBsl 43uJx7a7CNHRSaOA+S9Ke5HPGIwt9QmjTvmrxawe/iwbTG6YvI6JTPcPZpH3mUa6 8UPbOshGztuR6jJP5JcQr0O0g34lKZWdlShYkr7KSrnXuOdSBPyZA4AbNjaon5dk 3q4v1WMgyo2uTpWFZhy20KDOii2uSe8= -----END CERTIFICATE-----Generated at Tue Apr 21 20:50:34 2026 by rpki-client