$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5d06eae-a7de-374b-a545-d6045918c59a.roa File: e5d06eae-a7de-374b-a545-d6045918c59a.roa (raw, json) Hash identifier: JqjzDktJgoqcm18L6PZukeq2DlTW+TIUoMDZma5Ji0I= Subject key identifier: 08:32:58:43:54:CA:8B:92:B8:60:59:13:56:EA:AE:33:C4:91:B5:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF8B1A18E0D2BE81BC13B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5d06eae-a7de-374b-a545-d6045918c59a.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 73.189.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:b1:a1:8e:0d:2b:e8:1b:c1:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=dd7e8603-c8f2-4918-9995-2cef8783bbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:72:44:7e:b8:92:fc:ce:d8:88:36:85:e9:05: 5f:0b:7c:9f:92:39:39:30:51:f6:a0:d5:9f:40:9f: 14:61:9c:75:bd:57:d5:bd:5b:3c:fd:2b:6a:a5:7c: 4b:77:ae:77:42:0d:da:a5:f0:aa:ea:49:b1:6b:68: 9d:fe:d1:4f:d6:e4:c9:c2:a6:72:08:f0:1f:25:23: 97:ec:fa:5d:83:06:b1:0d:64:c4:c0:9b:f4:8c:9a: 25:c0:64:63:07:19:2a:c5:19:05:39:9e:fa:1c:7e: 67:1f:87:6e:cf:c6:32:d3:0e:3b:54:ed:9d:6a:59: 3b:e4:38:2b:86:eb:1a:23:c2:ff:87:a2:3c:89:38: a4:50:94:89:9a:fd:ae:14:7e:60:a4:85:a1:f9:47: c6:9d:21:a4:5c:4d:3a:f0:1d:99:8a:2e:34:5f:9f: 99:d4:03:6b:9b:e9:9e:5d:53:1e:7e:30:a2:e5:0e: 8d:d7:9d:11:26:5f:01:a3:28:fa:b9:41:35:cd:90: d0:f7:bf:10:ed:69:7b:3d:fc:93:a4:2b:f0:b6:dc: 5d:e5:74:d5:6d:e9:6a:54:d0:e4:ad:34:c1:39:a5: b5:4f:32:61:8d:f0:83:4f:b6:07:49:72:f0:01:9e: b1:fb:d2:a3:65:f9:f5:3f:3b:f5:45:b2:d7:b2:5b: 55:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:32:58:43:54:CA:8B:92:B8:60:59:13:56:EA:AE:33:C4:91:B5:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5d06eae-a7de-374b-a545-d6045918c59a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.189.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b3:c4:c6:2a:a0:8b:ec:40:cb:fa:3f:a4:10:9d:d5:b0:00: 59:e5:3c:4a:8a:45:85:51:7c:a7:38:74:51:0c:1b:d6:48:d1: 13:ee:0c:31:8a:af:af:19:69:05:5c:5b:1e:77:c3:14:07:ce: 88:47:f4:7f:2a:22:a4:1e:65:e2:1a:0d:e4:52:7c:56:10:32: 5c:ce:78:53:86:9e:4a:b7:d5:71:c8:d3:d8:ef:0d:14:25:bf: be:6f:4e:1c:0a:54:5f:8b:a5:de:67:ac:03:ad:7a:21:d8:e3: ad:57:85:77:5e:4e:a7:f3:80:48:e3:d7:1b:ce:67:89:b7:2c: d2:91:03:6b:97:ca:17:79:4c:01:f7:88:d6:b9:25:1f:5c:f0: 6b:64:29:35:f9:42:fa:91:14:96:4a:cd:04:1f:a2:ed:2f:61: 7c:48:c7:05:c4:cb:b1:25:d4:d8:7e:4d:f4:69:c9:7f:fc:ac: eb:bc:01:af:9d:7b:43:7c:bd:02:d4:57:60:3d:05:81:a4:63: fd:b0:25:8b:95:69:c2:5d:09:da:62:68:55:43:20:9b:b2:64: fc:f7:7f:7b:83:a4:e0:83:3b:9d:9c:a5:46:e3:f1:d8:af:a4: 3d:db:4c:95:29:88:f0:27:4e:50:51:81:ec:69:24:74:70:20: 36:ba:7d:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+LGhjg0r6BvBO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZGQ3ZTg2MDMtYzhmMi00OTE4LTk5OTUtMmNlZjg3ODNiYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynJEfriS/M7YiDaF6QVfC3yfkjk5MFH2oNWf QJ8UYZx1vVfVvVs8/StqpXxLd653Qg3apfCq6kmxa2id/tFP1uTJwqZyCPAfJSOX 7PpdgwaxDWTEwJv0jJolwGRjBxkqxRkFOZ76HH5nH4duz8Yy0w47VO2dalk75Dgr husaI8L/h6I8iTikUJSJmv2uFH5gpIWh+UfGnSGkXE068B2Zii40X5+Z1ANrm+me XVMefjCi5Q6N150RJl8Boyj6uUE1zZDQ978Q7Wl7PfyTpCvwttxd5XTVbelqVNDk rTTBOaW1TzJhjfCDT7YHSXLwAZ6x+9KjZfn1Pzv1RbLXsltV7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgyWENUyouSuGBZE1bqrjPEkbUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTVkMDZlYWUtYTdkZS0z NzRiLWE1NDUtZDYwNDU5MThjNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGzxMYqoIvsQMv6P6QQndWwAFnlPEqKRYVRfKc4dFEMG9ZI0RPuDDGK r68ZaQVcWx53wxQHzohH9H8qIqQeZeIaDeRSfFYQMlzOeFOGnkq31XHI09jvDRQl v75vThwKVF+Lpd5nrAOteiHY461XhXdeTqfzgEjj1xvOZ4m3LNKRA2uXyhd5TAH3 iNa5JR9c8GtkKTX5QvqRFJZKzQQfou0vYXxIxwXEy7El1Nh+TfRpyX/8rOu8Aa+d e0N8vQLUV2A9BYGkY/2wJYuVacJdCdpiaFVDIJuyZPz3f3uDpOCDO52cpUbj8div pD3bTJUpiPAnTlBRgexpJHRwIDa6fWM= -----END CERTIFICATE-----Generated at Tue Apr 21 21:39:10 2026 by rpki-client