$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5852b8f-0e3d-3aa1-9525-e19407c6d81b.roa File: c5852b8f-0e3d-3aa1-9525-e19407c6d81b.roa (raw, json) Hash identifier: qfzX6hHOvRrofiEQWHAWJphtz2BQ6T3uiY/apBg7Jr0= Subject key identifier: BD:B4:2B:68:DE:04:5D:47:B7:25:A6:25:A8:96:CC:88:E0:61:00:F0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF596C9B62F88010C0502C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5852b8f-0e3d-3aa1-9525-e19407c6d81b.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33660 IP address blocks: 73.65.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:96:c9:b6:2f:88:01:0c:05:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=43423f58-e48f-4250-a0aa-e80c15ec5c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:80:96:5b:ca:81:72:0a:b8:7e:a7:f7:a1:a3: f3:54:30:a3:ce:d3:fd:16:4d:20:23:0d:ac:04:7f: e4:42:3a:fe:e1:54:cc:f9:62:ab:00:a8:77:f9:d5: 91:31:ad:ff:65:26:4c:3c:11:4a:4e:20:fd:97:8c: 5c:01:64:f2:e5:b4:e3:da:0d:00:40:7b:ad:c0:f0: 2c:cc:e6:02:2e:8d:5b:0d:a5:0b:87:eb:a8:cf:7c: cb:29:bf:21:b9:88:b4:3e:70:80:60:b7:33:00:aa: 3d:6a:7f:18:e4:78:6b:c3:77:e4:e2:ce:37:2c:50: f5:5c:62:93:b2:43:9b:ab:01:ce:cb:7e:82:af:6d: 86:4b:54:7c:09:cf:14:29:08:01:3d:2c:ae:21:19: 4a:d5:63:ef:c6:d1:aa:8e:9f:26:de:1e:c4:fe:16: 7a:f9:ab:83:ae:bb:0c:a1:f3:ca:20:65:3c:af:c3: 52:7e:f0:38:6f:0b:d5:9a:fb:07:e0:ce:ba:16:15: 50:45:01:f9:df:cf:77:f3:d1:b2:1a:87:ee:ec:90: 07:32:e3:f9:f3:14:43:d6:40:81:01:70:8e:b9:18: ab:63:6a:90:c9:d3:48:0d:63:be:9c:cb:a2:c6:f7: ac:d5:27:4f:83:5f:25:b4:3b:3b:bb:07:93:86:cf: 57:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B4:2B:68:DE:04:5D:47:B7:25:A6:25:A8:96:CC:88:E0:61:00:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5852b8f-0e3d-3aa1-9525-e19407c6d81b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.65.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:3a:8d:bb:d4:5d:7b:ab:b7:aa:d5:7e:4d:77:d7:14:a2:30: 9f:b9:a9:87:8c:2d:f3:57:dc:e6:9c:5a:5c:7d:3f:40:3e:65: 4e:4a:71:d9:59:bb:3d:6e:bf:0d:8a:6c:ba:9b:1f:eb:dd:f1: cc:d1:6c:47:ac:63:81:55:e4:21:34:70:cb:78:ce:19:2e:e1: 35:cf:f4:6e:9c:1f:8d:75:bc:85:68:b0:02:62:b0:69:6e:a2: e6:5b:d7:dd:98:92:b9:bb:87:4f:2a:d9:c7:e4:b5:2e:f2:90: a3:45:e2:e5:94:b1:8c:ef:c7:e7:0f:b3:21:be:ce:83:79:01: ee:b8:fa:be:e1:d5:6c:9c:51:32:87:68:f3:10:8f:35:9f:56: b8:7c:49:92:b2:3b:9e:fe:6b:33:82:72:a6:c1:bd:36:aa:70: 05:a7:fb:50:33:fe:d7:9a:ba:eb:ac:fb:ec:5b:d9:94:ff:a4: 04:bc:12:04:f5:f4:d5:3c:e1:57:47:ff:a0:85:52:b7:5c:b3: 35:ed:6c:b0:e7:76:a9:93:e7:a0:00:7d:dc:d2:5e:3e:4c:b0: cd:1d:54:b9:33:9c:87:9e:e3:8b:d9:b7:ad:c0:b2:01:f1:d5: 01:bb:9a:59:4e:c2:58:4b:a9:ed:8c:3b:82:39:ea:58:fa:4a: 54:37:55:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9ZbJti+IAQwFAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NDM0MjNmNTgtZTQ4Zi00MjUwLWEwYWEtZTgwYzE1ZWM1YzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoCWW8qBcgq4fqf3oaPzVDCjztP9Fk0gIw2s BH/kQjr+4VTM+WKrAKh3+dWRMa3/ZSZMPBFKTiD9l4xcAWTy5bTj2g0AQHutwPAs zOYCLo1bDaULh+uoz3zLKb8huYi0PnCAYLczAKo9an8Y5Hhrw3fk4s43LFD1XGKT skObqwHOy36Cr22GS1R8Cc8UKQgBPSyuIRlK1WPvxtGqjp8m3h7E/hZ6+auDrrsM ofPKIGU8r8NSfvA4bwvVmvsH4M66FhVQRQH5389389GyGofu7JAHMuP58xRD1kCB AXCOuRirY2qQydNIDWO+nMuixves1SdPg18ltDs7uweThs9XowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL20K2jeBF1HtyWmJaiWzIjgYQDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzU4NTJiOGYtMGUzZC0z YWExLTk1MjUtZTE5NDA3YzZkODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQ6jbvUXXurt6rVfk131xSiMJ+5qYeMLfNX3OacWlx9P0A+ZU5KcdlZ uz1uvw2KbLqbH+vd8czRbEesY4FV5CE0cMt4zhku4TXP9G6cH411vIVosAJisGlu ouZb192Ykrm7h08q2cfktS7ykKNF4uWUsYzvx+cPsyG+zoN5Ae64+r7h1WycUTKH aPMQjzWfVrh8SZKyO57+azOCcqbBvTaqcAWn+1Az/teauuus++xb2ZT/pAS8EgT1 9NU84VdH/6CFUrdcszXtbLDndqmT56AAfdzSXj5MsM0dVLkznIee44vZt63AsgHx 1QG7mllOwlhLqe2MO4I56lj6SlQ3VdE= -----END CERTIFICATE-----Generated at Tue Apr 21 20:34:02 2026 by rpki-client