$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3b81dda-dc6d-3895-8f7b-983db6c8841c.roa File: d3b81dda-dc6d-3895-8f7b-983db6c8841c.roa (raw, json) Hash identifier: 9B7MYkyTBUqt982Fd5+nqt9P4OjGKkUyIgWesEQhm0M= Subject key identifier: D3:4A:D7:E1:0B:8A:91:54:3F:2A:32:89:07:1E:A7:09:5C:0F:A8:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7A5C47765443A7C1A68C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3b81dda-dc6d-3895-8f7b-983db6c8841c.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 73.111.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:a5:c4:77:65:44:3a:7c:1a:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=2b754b17-433e-42ae-a212-75fc2a9d0c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6a:42:f1:59:d8:e0:a6:f6:83:62:6a:81:4d: e9:67:02:29:63:9d:4c:12:1d:f4:bd:c5:49:d6:a8: fb:a0:2a:d6:47:a3:f5:1a:e5:80:9b:d7:72:bb:1c: f8:d7:06:70:6f:10:21:59:c2:e8:72:98:c4:45:da: fc:f0:e6:c2:36:2d:fe:4b:64:6f:af:64:f8:cf:c0: 11:89:7c:ba:87:1a:1c:47:4e:7e:19:25:52:74:7e: d7:6a:c5:41:77:45:c2:af:75:69:80:30:e7:12:e0: f3:82:ec:09:8f:d6:49:0a:d4:fb:84:3c:cc:9d:8d: 18:49:a0:25:0e:6d:b9:23:3b:68:37:50:76:a1:f0: f1:1d:49:39:4b:2c:ce:0b:cd:72:70:5c:a7:e9:de: aa:39:b8:2e:32:01:0a:04:f6:c2:0e:b4:63:9d:9f: 02:9d:aa:13:f1:56:b2:f0:ec:5c:fe:c3:d5:af:34: ae:80:25:a2:52:73:03:90:28:0e:23:e9:e7:b1:bd: ca:83:37:09:b8:3e:9c:40:fd:93:37:d8:74:12:33: 1a:22:34:b9:e7:69:63:f2:f3:20:61:30:29:c6:30: 89:97:04:2a:3f:be:74:7a:ee:19:62:82:11:30:4a: 92:d4:62:b4:22:c9:0b:c5:81:0d:93:79:2f:41:3c: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4A:D7:E1:0B:8A:91:54:3F:2A:32:89:07:1E:A7:09:5C:0F:A8:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3b81dda-dc6d-3895-8f7b-983db6c8841c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.111.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:49:44:d4:53:64:bd:83:9b:c8:e7:5c:c7:b8:bb:6d:b1:b6: ef:cb:67:f3:65:b7:cd:c6:df:7f:0c:ce:06:86:ca:10:b8:63: 9d:7d:89:0c:b6:e2:c5:28:de:f3:02:2e:13:4f:b3:af:c4:ff: bc:7b:be:94:8d:26:88:5c:d2:44:df:0b:ba:8c:30:f7:76:28: d7:28:55:78:cc:80:a7:cb:7c:e2:67:e4:a6:35:cb:32:e9:de: b7:e3:a6:3e:6a:56:53:f3:0e:e2:b7:9a:45:dc:fb:58:a1:29: 20:bd:21:5e:b6:ac:9d:0c:e2:57:32:83:de:3f:6a:32:78:dd: 73:7e:4b:21:57:09:ce:ec:4e:bf:40:2f:ca:ab:19:73:c6:ef: 29:f9:54:d0:02:41:79:66:f1:44:60:27:32:31:44:36:02:ad: 0c:f8:ab:82:cf:1b:31:ba:30:3f:5a:52:d7:70:1f:a4:f6:d3: 67:2a:aa:fa:1b:61:16:68:ea:0f:5e:32:14:61:2a:4b:4e:1d: c8:b5:54:1b:ea:bb:6a:23:1f:1d:6d:10:31:00:23:80:e3:d6: a4:b9:9c:d3:0d:e2:b3:00:b7:93:0d:39:60:5e:c5:59:7d:c5: 6a:0b:45:60:0d:77:23:28:91:93:14:7a:f5:f4:53:5e:ec:04: 26:e7:a6:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O96XEd2VEOnwaaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MmI3NTRiMTctNDMzZS00MmFlLWEyMTItNzVmYzJhOWQwYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mpC8VnY4Kb2g2JqgU3pZwIpY51MEh30vcVJ 1qj7oCrWR6P1GuWAm9dyuxz41wZwbxAhWcLocpjERdr88ObCNi3+S2Rvr2T4z8AR iXy6hxocR05+GSVSdH7XasVBd0XCr3VpgDDnEuDzguwJj9ZJCtT7hDzMnY0YSaAl Dm25IztoN1B2ofDxHUk5SyzOC81ycFyn6d6qObguMgEKBPbCDrRjnZ8CnaoT8Vay 8Oxc/sPVrzSugCWiUnMDkCgOI+nnsb3KgzcJuD6cQP2TN9h0EjMaIjS552lj8vMg YTApxjCJlwQqP750eu4ZYoIRMEqS1GK0IskLxYENk3kvQTxdcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNK1+ELipFUPyoyiQcepwlcD6i3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNiODFkZGEtZGM2ZC0z ODk1LThmN2ItOTgzZGI2Yzg4NDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSW98MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtJRNRTZL2Dm8jnXMe4u22xtu/LZ/Nlt83G338MzgaGyhC4Y519iQy2 4sUo3vMCLhNPs6/E/7x7vpSNJohc0kTfC7qMMPd2KNcoVXjMgKfLfOJn5KY1yzLp 3rfjpj5qVlPzDuK3mkXc+1ihKSC9IV62rJ0M4lcyg94/ajJ43XN+SyFXCc7sTr9A L8qrGXPG7yn5VNACQXlm8URgJzIxRDYCrQz4q4LPGzG6MD9aUtdwH6T202cqqvob YRZo6g9eMhRhKktOHci1VBvqu2ojHx1tEDEAI4Dj1qS5nNMN4rMAt5MNOWBexVl9 xWoLRWANdyMokZMUevX0U17sBCbnpg8= -----END CERTIFICATE-----Generated at Tue Apr 21 20:39:41 2026 by rpki-client