$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c940cfaa-bf9d-3efe-9068-842cd5788a4e.roa File: c940cfaa-bf9d-3efe-9068-842cd5788a4e.roa (raw, json) Hash identifier: 8C4b0pPidvM438oEh0+n803rMGJNMD1gD8KKTbAI1Mc= Subject key identifier: 3A:16:23:E8:94:03:50:F6:DE:A1:3E:D5:6A:AD:D8:50:FB:0A:91:9A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF647D30609C529E2F1A300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c940cfaa-bf9d-3efe-9068-842cd5788a4e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 73.208.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:47:d3:06:09:c5:29:e2:f1:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=1aff4927-d60f-49f2-b908-c2e4d8c41daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:8b:5c:09:06:91:56:60:79:94:05:c9:cc: fa:da:8d:92:d8:34:de:1b:2a:66:ba:05:e5:7e:2e: 40:bf:fb:4f:9f:9d:60:71:2f:9f:06:b5:22:1a:c5: e8:a8:54:06:04:1e:db:6a:df:f9:4f:94:7a:d4:1a: 1f:4c:cb:88:f0:a2:d2:4e:8d:39:c6:15:5b:ce:91: 81:90:24:9a:ce:42:31:ee:36:42:5c:dd:66:d9:35: 40:c8:5d:81:1c:65:f1:6b:7f:2b:99:c3:18:04:2f: 2f:66:5a:62:e5:a0:15:ae:b7:1a:8f:ab:6f:63:f5: a6:46:e9:3e:c1:0d:c4:e8:dc:71:63:e2:df:4a:7e: 78:4e:e2:b9:0b:47:1e:66:30:fe:67:09:d9:18:66: d7:af:c0:76:bd:84:7a:bf:99:5f:87:17:64:78:9e: 62:05:cf:53:68:b6:d2:b5:4c:cc:97:64:1c:eb:8f: 40:ea:0c:13:68:af:0b:3c:b7:1b:94:57:ed:9d:0e: 30:e9:1c:fc:a0:71:67:68:8c:b0:eb:89:54:93:a1: 50:3f:a2:9f:24:c6:7a:47:35:eb:5c:f5:0e:1f:26: e5:94:da:b5:0e:40:e1:2a:af:58:2b:2a:98:82:99: ba:e4:ea:4f:f5:53:09:d6:ad:54:74:fa:34:29:a2: 44:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:16:23:E8:94:03:50:F6:DE:A1:3E:D5:6A:AD:D8:50:FB:0A:91:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c940cfaa-bf9d-3efe-9068-842cd5788a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.208.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:24:d9:66:f8:87:ea:35:da:8a:85:a5:86:71:28:ea:75:1f: bd:e2:d4:a0:2d:0b:cd:4c:36:2d:c7:38:0a:12:38:dd:d9:8b: 79:7f:8f:9a:83:39:b3:ff:eb:67:09:3d:c7:e3:8d:b4:c7:4a: fa:f7:a2:3e:b7:b4:ce:a8:4b:dc:f1:84:9a:c0:43:e9:20:eb: 3d:c9:43:85:95:c7:da:7f:88:95:e4:5b:17:d7:79:fc:df:6b: ec:89:cd:11:ea:26:1a:7c:45:c0:d9:17:89:52:91:cd:66:79: b5:11:f4:d5:55:21:5a:92:98:6d:42:bb:db:3a:58:06:dc:1a: 88:ea:ff:67:ff:3a:e1:e4:c8:0b:ef:ff:5f:4e:63:06:ce:ae: 7a:04:b0:e5:41:95:50:78:69:60:9c:0a:07:0e:bc:e7:45:e8: d1:1d:da:c6:1d:cc:35:28:6f:37:a7:25:ad:9e:61:69:26:a5: 43:a5:e9:a4:82:83:fb:8b:cd:a9:f9:50:c1:c5:fc:f3:0b:21: 17:2c:6c:28:ca:30:f9:fa:d5:26:98:67:c1:21:d0:be:d2:8a: 29:e1:f0:6f:11:cd:cf:c1:37:b7:3e:d5:bf:e5:b0:0e:e3:57: 4f:38:86:cf:9a:11:7a:4f:d0:4b:b3:bf:a8:e5:16:5f:65:41: da:91:95:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9kfTBgnFKeLxowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MWFmZjQ5MjctZDYwZi00OWYyLWI5MDgtYzJlNGQ4YzQxZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFSLXAkGkVZgeZQFycz62o2S2DTeGypmugXl fi5Av/tPn51gcS+fBrUiGsXoqFQGBB7bat/5T5R61BofTMuI8KLSTo05xhVbzpGB kCSazkIx7jZCXN1m2TVAyF2BHGXxa38rmcMYBC8vZlpi5aAVrrcaj6tvY/WmRuk+ wQ3E6NxxY+LfSn54TuK5C0ceZjD+ZwnZGGbXr8B2vYR6v5lfhxdkeJ5iBc9TaLbS tUzMl2Qc649A6gwTaK8LPLcblFftnQ4w6Rz8oHFnaIyw64lUk6FQP6KfJMZ6RzXr XPUOHybllNq1DkDhKq9YKyqYgpm65OpP9VMJ1q1UdPo0KaJEBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoWI+iUA1D23qE+1Wqt2FD7CpGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzk0MGNmYWEtYmY5ZC0z ZWZlLTkwNjgtODQyY2Q1Nzg4YTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwk2Wb4h+o12oqFpYZxKOp1H73i1KAtC81MNi3HOAoSON3Zi3l/j5qD ObP/62cJPcfjjbTHSvr3oj63tM6oS9zxhJrAQ+kg6z3JQ4WVx9p/iJXkWxfXefzf a+yJzRHqJhp8RcDZF4lSkc1mebUR9NVVIVqSmG1Cu9s6WAbcGojq/2f/OuHkyAvv /19OYwbOrnoEsOVBlVB4aWCcCgcOvOdF6NEd2sYdzDUobzenJa2eYWkmpUOl6aSC g/uLzan5UMHF/PMLIRcsbCjKMPn61SaYZ8Eh0L7Siinh8G8Rzc/BN7c+1b/lsA7j V084hs+aEXpP0Euzv6jlFl9lQdqRlbE= -----END CERTIFICATE-----Generated at Tue Apr 21 19:15:09 2026 by rpki-client