$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7e153e-bfc9-33dd-bdc2-7ec27612e98b.roa File: be7e153e-bfc9-33dd-bdc2-7ec27612e98b.roa (raw, json) Hash identifier: hcxJuJjkXvtid8C7ouOuYjRpexBoxQJvV28mFwcZx9U= Subject key identifier: 88:04:8E:5E:AD:C3:91:14:96:C9:F0:35:C7:80:46:CB:C4:50:9A:8C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7B3CBE2691B717921CA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7e153e-bfc9-33dd-bdc2-7ec27612e98b.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 73.209.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:b3:cb:e2:69:1b:71:79:21:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=38bd3185-5c15-411f-a1e2-f67b312a2f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:07:be:51:c8:e7:07:86:ab:a6:c9:e3:c8: 07:ab:1f:fe:d9:74:c4:fc:94:40:d2:71:51:dd:eb: f8:4b:40:6c:b5:53:80:68:02:6b:e8:0b:76:d3:e2: 50:73:70:fe:27:cf:8f:f5:38:d9:2f:eb:54:9c:30: 84:f0:e7:81:bf:02:a8:69:49:19:97:0e:7c:68:78: d4:5d:08:07:dc:3d:19:a2:53:fb:d2:65:d8:bd:5d: e2:36:2d:84:3e:9c:03:43:09:fc:77:ca:5e:3f:4d: b8:61:41:27:d4:15:02:75:0d:98:80:2b:66:9d:ca: d4:3b:5a:ac:29:20:ec:23:d1:80:12:ad:00:fc:db: ab:92:6e:89:e5:eb:b3:8f:95:89:3d:dd:06:21:b0: ab:50:3b:26:73:75:c5:ef:a2:8c:76:75:ea:1e:4a: fd:cc:62:17:81:b3:a0:59:cd:76:55:d0:59:8a:16: 25:cd:9d:94:df:f5:dc:20:b5:ce:b3:03:1f:a3:ff: 58:e8:b9:d8:63:b9:0c:53:db:cb:8b:a9:3f:a5:df: a4:83:bf:c4:7a:a6:7b:c7:94:a7:0a:e2:4a:91:8f: 41:04:4e:0f:f3:f4:21:0e:c1:5e:ff:18:44:0c:c5: 6d:08:63:92:fe:44:1b:9d:7e:53:96:68:1b:91:da: 32:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:04:8E:5E:AD:C3:91:14:96:C9:F0:35:C7:80:46:CB:C4:50:9A:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7e153e-bfc9-33dd-bdc2-7ec27612e98b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:51:b0:2e:bd:9d:43:1d:6b:27:ae:a0:f7:60:e0:94:1c:52: 01:60:8f:32:23:d3:14:f7:eb:9c:b9:35:ff:68:2c:06:fe:43: b0:c6:09:93:42:1e:4a:5a:32:7b:ec:6c:63:b2:3a:4b:e8:61: 6a:74:f0:2f:16:7c:2a:6e:56:1f:1f:e8:08:3a:87:27:c8:50: 78:8c:e4:94:df:ba:a5:07:1c:6b:eb:89:1d:e0:22:54:2d:af: 1d:f6:bf:e0:57:de:3d:08:aa:01:43:50:e1:86:b7:06:1d:b7: 2c:95:a3:f8:94:bb:f1:ea:57:c7:6f:f4:87:70:ae:e8:7f:6e: 17:7d:cb:0a:b4:6a:90:3a:20:54:00:cf:c2:29:2a:e3:d9:5d: 19:db:4d:2a:5a:1a:fc:db:39:7e:bf:93:f2:bd:21:6b:e0:7f: 5c:58:b9:29:37:ec:7f:d3:fd:6e:0d:3a:ad:f7:53:33:68:6f: fa:0f:77:ac:66:dc:73:20:a3:67:f2:17:de:1e:0b:45:80:bf: 97:45:a6:55:8f:f0:26:46:43:c6:71:00:c3:1f:4f:f6:27:2d: 1f:16:b4:66:77:35:da:58:7f:f2:26:c8:82:7e:cb:65:57:07: da:24:c1:d2:43:dc:2d:ce:f2:15:d9:3a:ec:54:23:4a:1e:b7: 97:5a:43:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O97PL4mkbcXkhygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MzhiZDMxODUtNWMxNS00MTFmLWExZTItZjY3YjMxMmEyZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmQHvlHI5weGq6bJ48gHqx/+2XTE/JRA0nFR 3ev4S0BstVOAaAJr6At20+JQc3D+J8+P9TjZL+tUnDCE8OeBvwKoaUkZlw58aHjU XQgH3D0ZolP70mXYvV3iNi2EPpwDQwn8d8peP024YUEn1BUCdQ2YgCtmncrUO1qs KSDsI9GAEq0A/Nurkm6J5euzj5WJPd0GIbCrUDsmc3XF76KMdnXqHkr9zGIXgbOg Wc12VdBZihYlzZ2U3/XcILXOswMfo/9Y6LnYY7kMU9vLi6k/pd+kg7/EeqZ7x5Sn CuJKkY9BBE4P8/QhDsFe/xhEDMVtCGOS/kQbnX5TlmgbkdoyYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgEjl6tw5EUlsnwNceARsvEUJqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmU3ZTE1M2UtYmZjOS0z M2RkLWJkYzItN2VjMjc2MTJlOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhRsC69nUMdayeuoPdg4JQcUgFgjzIj0xT365y5Nf9oLAb+Q7DGCZNC HkpaMnvsbGOyOkvoYWp08C8WfCpuVh8f6Ag6hyfIUHiM5JTfuqUHHGvriR3gIlQt rx32v+BX3j0IqgFDUOGGtwYdtyyVo/iUu/HqV8dv9Idwruh/bhd9ywq0apA6IFQA z8IpKuPZXRnbTSpaGvzbOX6/k/K9IWvgf1xYuSk37H/T/W4NOq33UzNob/oPd6xm 3HMgo2fyF94eC0WAv5dFplWP8CZGQ8ZxAMMfT/YnLR8WtGZ3NdpYf/ImyIJ+y2VX B9okwdJD3C3O8hXZOuxUI0oet5daQ/g= -----END CERTIFICATE-----Generated at Wed Apr 22 00:08:52 2026 by rpki-client