$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9510bf3-8900-3d4f-b8a3-56f648f72603.roa File: d9510bf3-8900-3d4f-b8a3-56f648f72603.roa (raw, json) Hash identifier: rE7gmTKg7bkM1NVdZnwc2lrkAPZ5eGrwHDHgDv2KHBE= Subject key identifier: C9:AE:B9:92:E4:E6:A3:AC:44:98:3C:39:85:FB:5D:1F:CB:9C:CF:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF72AB9AF3A36C9050F7F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9510bf3-8900-3d4f-b8a3-56f648f72603.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33659 IP address blocks: 73.198.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:2a:b9:af:3a:36:c9:05:0f:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=bbfd5e2f-fe54-449c-891b-5b72eca57096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:29:23:ef:6d:d8:5a:62:06:9e:e9:12:90: 84:0e:94:7e:9b:90:ab:af:27:4c:ac:37:72:d9:0f: 37:15:34:6f:b5:1d:fa:4e:70:fb:b6:7d:9a:68:ff: 3e:60:ce:a9:49:42:51:7a:c6:b7:32:2f:bb:33:7a: 24:c2:74:86:c5:20:92:fa:75:a3:8f:51:84:d2:89: 8b:5e:cf:1f:74:02:f2:53:56:b9:1d:74:6f:84:51: be:2b:a7:3c:af:d4:32:5c:7a:1b:27:fc:aa:1d:01: 90:d3:fe:59:ad:bb:08:43:04:d4:d9:a7:de:cc:91: a6:7b:3a:77:74:7b:f0:9c:f7:48:e5:bb:6a:48:e6: c1:55:55:ee:2b:6e:31:9c:fd:4a:1d:53:5c:ee:da: 96:ea:58:6d:cd:08:49:5b:b9:13:03:da:7f:db:8d: 41:b5:76:fb:fd:bd:58:c7:94:66:df:9c:44:08:24: 72:3a:95:90:69:26:38:40:ab:c2:99:76:4c:52:3f: be:3f:0f:2a:c3:aa:f2:2e:48:28:8d:9f:9d:46:9c: e8:d6:e5:77:27:2e:e8:a0:1c:55:55:47:15:d3:c7: 51:47:a1:ab:19:08:e7:24:c9:18:dc:10:6b:ae:f7: 58:5a:e4:7e:bb:f9:12:8d:32:63:b2:ee:a0:8e:ee: ac:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AE:B9:92:E4:E6:A3:AC:44:98:3C:39:85:FB:5D:1F:CB:9C:CF:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9510bf3-8900-3d4f-b8a3-56f648f72603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.198.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:db:ca:67:c2:e9:76:f2:a9:93:b2:da:89:28:68:28:2a:11: 45:62:10:b4:b0:d3:01:cf:7c:30:e9:25:10:25:d1:a7:70:36: 91:78:bf:24:2c:04:9c:c3:f2:b4:9f:d9:a4:f5:fb:1a:6c:38: 97:ea:89:15:91:27:82:4e:a6:66:2e:f8:e5:22:8e:1e:15:4b: c4:f2:42:d8:97:88:c6:82:0f:02:91:6c:09:35:cd:33:b8:0d: f1:a0:7b:17:8b:85:41:01:5f:91:66:c1:b3:07:41:e2:74:a2: 19:47:5d:f7:fc:7b:92:57:73:a7:54:35:95:73:55:9a:da:10: 47:5c:50:56:13:06:9f:9a:25:69:75:a2:17:c0:39:e4:6a:8a: 0a:0b:5b:55:c0:c0:1c:d9:76:a4:0a:a1:39:fa:ae:c3:4c:03: c2:be:83:76:34:31:dd:2e:62:6a:1d:35:9e:18:25:69:b2:cb: a7:db:51:ad:fd:86:96:f5:e8:1a:79:1c:83:62:9a:8f:3a:6b: 8c:08:09:0b:4d:20:2b:45:1f:09:50:1e:f6:54:46:35:7d:3f: ca:0e:bf:b4:95:2e:2b:35:b8:64:26:5b:a6:15:59:79:df:56: b0:3b:07:df:03:e0:33:10:b4:a2:4e:91:d8:78:c1:32:aa:6f: e3:d7:3e:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9yq5rzo2yQUPf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YmJmZDVlMmYtZmU1NC00NDljLTg5MWItNWI3MmVjYTU3MDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjwpI+9t2FpiBp7pEpCEDpR+m5CrrydMrDdy 2Q83FTRvtR36TnD7tn2aaP8+YM6pSUJResa3Mi+7M3okwnSGxSCS+nWjj1GE0omL Xs8fdALyU1a5HXRvhFG+K6c8r9QyXHobJ/yqHQGQ0/5ZrbsIQwTU2afezJGmezp3 dHvwnPdI5btqSObBVVXuK24xnP1KHVNc7tqW6lhtzQhJW7kTA9p/241BtXb7/b1Y x5Rm35xECCRyOpWQaSY4QKvCmXZMUj++Pw8qw6ryLkgojZ+dRpzo1uV3Jy7ooBxV VUcV08dRR6GrGQjnJMkY3BBrrvdYWuR+u/kSjTJjsu6gju6sywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmuuZLk5qOsRJg8OYX7XR/LnM8PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDk1MTBiZjMtODkwMC0z ZDRmLWI4YTMtNTZmNjQ4ZjcyNjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPbymfC6XbyqZOy2okoaCgqEUViELSw0wHPfDDpJRAl0adwNpF4vyQs BJzD8rSf2aT1+xpsOJfqiRWRJ4JOpmYu+OUijh4VS8TyQtiXiMaCDwKRbAk1zTO4 DfGgexeLhUEBX5FmwbMHQeJ0ohlHXff8e5JXc6dUNZVzVZraEEdcUFYTBp+aJWl1 ohfAOeRqigoLW1XAwBzZdqQKoTn6rsNMA8K+g3Y0Md0uYmodNZ4YJWmyy6fbUa39 hpb16Bp5HINimo86a4wICQtNICtFHwlQHvZURjV9P8oOv7SVLis1uGQmW6YVWXnf VrA7B98D4DMQtKJOkdh4wTKqb+PXPk4= -----END CERTIFICATE-----Generated at Tue Apr 21 23:22:23 2026 by rpki-client