$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c71c5529-89b7-3eec-862e-6b3a7356e423.roa File: c71c5529-89b7-3eec-862e-6b3a7356e423.roa (raw, json) Hash identifier: 9f99FIoukZRlobLzyQgCyEvCkle1PzY2U5ED+acP+OU= Subject key identifier: DE:1A:1A:82:E2:CD:A9:74:1D:0C:A3:1B:5E:E1:82:1E:ED:95:4E:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7A69E625D7E1EDFBDA340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c71c5529-89b7-3eec-862e-6b3a7356e423.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 73.120.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:a6:9e:62:5d:7e:1e:df:bd:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=6ed8922a-9273-48ec-a0cf-7299883397f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:17:10:2f:3a:d4:1a:14:2d:88:9b:98:c3:4e: 67:7e:d5:ba:ad:25:d1:7f:8e:64:9d:3a:f6:f6:50: 38:cb:0f:fa:01:75:05:9f:3e:6b:fc:da:6d:06:90: eb:20:19:34:06:c3:5c:83:2a:42:c7:09:91:17:f5: 45:25:99:96:df:1c:3b:e3:e6:cd:c2:51:d6:a7:c5: 6e:e5:d5:71:79:5d:ae:dc:77:c4:2b:3a:07:0f:54: bb:e7:a6:2a:60:af:73:bb:76:a9:62:93:5d:fd:b6: a1:d2:d2:e6:8f:15:ab:c8:4d:41:7b:5b:3b:d6:ab: 05:85:8d:54:b2:e7:7d:e4:2a:7f:51:83:11:f2:10: 14:0a:37:44:cb:dd:de:5f:5c:13:65:79:dd:60:e8: b9:7a:37:51:75:ac:11:35:ae:ef:ea:83:4f:14:f3: 21:8c:eb:32:b7:6e:7e:91:dc:59:3f:72:df:e3:81: a4:f2:f8:64:21:c3:bb:0e:85:78:02:c5:61:15:35: ef:40:3c:2d:01:4d:41:e5:e5:98:24:9c:c9:15:c4: 92:a1:be:c2:d8:75:61:11:5d:c6:0b:bc:81:60:f4: 7a:1d:c5:3e:fa:8d:34:75:0c:3a:0f:a1:1f:bb:31: 18:be:97:6b:25:53:04:75:a3:14:8c:a6:06:94:56: 76:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1A:1A:82:E2:CD:A9:74:1D:0C:A3:1B:5E:E1:82:1E:ED:95:4E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c71c5529-89b7-3eec-862e-6b3a7356e423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.120.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:b8:f7:cd:99:1d:ce:de:e7:73:a8:25:42:15:4c:3d:46:e1: 72:69:74:da:d3:d4:87:b1:fc:ad:86:66:eb:df:c1:45:64:1e: 10:dd:18:5f:ca:3f:a9:7c:ba:cc:a4:39:f1:2e:6f:51:d1:d2: 58:ee:6e:bc:ab:5f:5a:2a:38:56:39:c9:9d:17:23:9d:b5:c6: 0f:21:b7:0d:18:8a:e8:43:ca:99:2a:88:93:bf:ff:d6:fe:26: 09:c6:0f:c5:b8:7a:cc:1a:97:37:5f:1f:f4:69:31:4f:70:be: d1:4b:d5:fd:29:1a:b6:3f:93:cc:fc:b3:95:0b:7c:da:f2:c0: 7e:33:d5:51:6c:87:51:64:91:11:33:6d:a8:5a:cd:b7:b9:92: b0:da:60:64:68:01:a7:bd:0a:14:f5:04:b3:7b:3c:56:6f:81: c8:5a:24:80:d7:b0:3e:d9:9c:08:4f:ac:64:d2:b9:37:4a:6e: 37:77:71:05:b2:70:63:0d:f1:dc:52:68:f0:92:dc:c7:16:30: a1:1e:a1:94:bc:44:00:32:ad:a6:92:5d:f2:c2:5c:3d:d1:a4: de:d6:3d:ff:3c:e1:2d:4d:d6:6d:1e:87:7f:32:1e:37:13:61: 57:99:97:0f:87:34:39:6b:13:fe:45:ed:e0:11:fb:f8:f9:10: a0:59:e4:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O96aeYl1+Ht+9o0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NmVkODkyMmEtOTI3My00OGVjLWEwY2YtNzI5OTg4MzM5N2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RcQLzrUGhQtiJuYw05nftW6rSXRf45knTr2 9lA4yw/6AXUFnz5r/NptBpDrIBk0BsNcgypCxwmRF/VFJZmW3xw74+bNwlHWp8Vu 5dVxeV2u3HfEKzoHD1S756YqYK9zu3apYpNd/bah0tLmjxWryE1Be1s71qsFhY1U sud95Cp/UYMR8hAUCjdEy93eX1wTZXndYOi5ejdRdawRNa7v6oNPFPMhjOsyt25+ kdxZP3Lf44Gk8vhkIcO7DoV4AsVhFTXvQDwtAU1B5eWYJJzJFcSSob7C2HVhEV3G C7yBYPR6HcU++o00dQw6D6EfuzEYvpdrJVMEdaMUjKYGlFZ23QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4aGoLizal0HQyjG17hgh7tlU4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzcxYzU1MjktODliNy0z ZWVjLTg2MmUtNmIzYTczNTZlNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+4982ZHc7e53OoJUIVTD1G4XJpdNrT1Iex/K2GZuvfwUVkHhDdGF/K P6l8usykOfEub1HR0ljubryrX1oqOFY5yZ0XI521xg8htw0YiuhDypkqiJO//9b+ JgnGD8W4eswalzdfH/RpMU9wvtFL1f0pGrY/k8z8s5ULfNrywH4z1VFsh1FkkREz bahazbe5krDaYGRoAae9ChT1BLN7PFZvgchaJIDXsD7ZnAhPrGTSuTdKbjd3cQWy cGMN8dxSaPCS3McWMKEeoZS8RAAyraaSXfLCXD3RpN7WPf884S1N1m0eh38yHjcT YVeZlw+HNDlrE/5F7eAR+/j5EKBZ5Ec= -----END CERTIFICATE-----Generated at Tue Apr 21 20:35:29 2026 by rpki-client