$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea67b0b2-9670-39d8-87d9-fe24eea0e432.roa File: ea67b0b2-9670-39d8-87d9-fe24eea0e432.roa (raw, json) Hash identifier: XjOON/ksaaTLKYbfa15nT5G55Mq/PZ9Pqi9WT90MsCg= Subject key identifier: A0:49:5F:A6:BB:B3:92:40:EB:6F:48:DC:D1:92:C4:11:B5:27:84:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7342FD1DA3991FE09EC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea67b0b2-9670-39d8-87d9-fe24eea0e432.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33659 IP address blocks: 73.248.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:34:2f:d1:da:39:91:fe:09:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=1e8d9c2b-f3d4-41f8-be03-ff69cec5d3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:fe:40:fd:64:86:1b:62:d3:2d:70:24:c7: a5:23:73:ba:46:05:48:8f:2e:f5:ee:39:31:86:c3: 7d:28:c6:37:f5:30:da:05:47:2a:00:af:ed:4f:ed: 6b:bc:59:ac:1c:44:65:01:b8:73:4d:2a:1e:b9:71: b6:3d:b5:99:04:ba:78:d4:2a:3b:f8:b3:8c:33:da: 83:47:b4:ae:20:c3:c3:6e:81:cf:9d:d8:9a:ef:15: 3d:e1:c6:3a:11:73:ad:d3:3d:b6:b5:f9:e9:fb:5c: c7:31:84:69:95:93:82:6f:a5:24:24:b7:67:c0:9d: 0b:ee:c3:ed:60:52:7f:df:f8:7e:ec:2c:89:0d:a6: c3:f8:c9:8c:89:2f:da:06:5d:f4:ac:2a:af:af:0a: 70:7d:72:c6:53:ea:38:4d:95:6a:04:0b:bb:14:ed: a1:db:b2:eb:d3:4c:31:2e:9e:45:23:c4:ee:cf:51: cd:ac:6d:5f:38:54:80:8c:3d:e1:bf:9e:d6:92:cd: 0f:14:8d:cf:7a:ee:fc:91:07:50:65:80:50:4b:42: 02:51:a8:02:6f:fe:dc:cf:5e:9e:33:fb:2e:57:96: 52:b5:22:40:72:3e:e8:36:05:f0:be:24:65:b0:b2: e8:56:07:b5:9a:b5:d6:e3:9f:9f:eb:ff:ba:aa:c4: cd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:49:5F:A6:BB:B3:92:40:EB:6F:48:DC:D1:92:C4:11:B5:27:84:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea67b0b2-9670-39d8-87d9-fe24eea0e432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:3d:46:31:be:1c:02:33:67:ed:22:b4:c2:34:39:26:8a:ea: 13:39:bc:1a:41:ee:e3:ea:11:44:28:16:04:7e:7b:91:59:74: a8:f1:07:5d:05:1a:f8:29:26:ef:00:6c:15:b8:bd:37:fd:75: d3:a6:b1:2d:a2:9b:56:90:cd:d9:54:e5:72:e4:b9:d5:43:c1: 06:79:e7:d8:dc:85:77:8b:b2:89:44:34:95:7b:78:3e:6d:17: de:7d:28:9f:a7:c4:27:4d:88:4b:1d:3a:02:f3:f2:8e:d8:04: 48:23:ab:91:88:28:8e:0d:43:78:5d:d7:47:25:74:35:7b:ae: fa:40:12:8d:34:30:0b:36:78:81:ae:dc:cc:dc:0f:08:35:ee: 7f:eb:fc:3a:3c:79:4b:fe:6b:35:11:7c:23:2c:47:54:5b:6d: d8:c1:79:1b:67:f5:a3:fd:2c:df:26:20:68:21:b7:08:06:d3: dd:2a:5f:6a:76:73:e7:7a:aa:9c:b2:d0:11:c6:84:2a:93:2e: e2:63:4c:76:07:43:3a:f5:a0:9f:60:d2:f5:12:95:2c:8d:05: be:76:a7:de:66:5a:da:03:cf:a4:1b:5f:ae:1f:d7:81:bb:6f: 93:7c:be:42:35:58:74:e1:1b:f6:bf:0a:45:8a:19:8c:01:ef: 8b:94:6f:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9zQv0do5kf4J7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MWU4ZDljMmItZjNkNC00MWY4LWJlMDMtZmY2OWNlYzVkM2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5P+QP1khhti0y1wJMelI3O6RgVIjy717jkx hsN9KMY39TDaBUcqAK/tT+1rvFmsHERlAbhzTSoeuXG2PbWZBLp41Co7+LOMM9qD R7SuIMPDboHPndia7xU94cY6EXOt0z22tfnp+1zHMYRplZOCb6UkJLdnwJ0L7sPt YFJ/3/h+7CyJDabD+MmMiS/aBl30rCqvrwpwfXLGU+o4TZVqBAu7FO2h27Lr00wx Lp5FI8Tuz1HNrG1fOFSAjD3hv57Wks0PFI3Peu78kQdQZYBQS0ICUagCb/7cz16e M/suV5ZStSJAcj7oNgXwviRlsLLoVge1mrXW45+f6/+6qsTNiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBJX6a7s5JA629I3NGSxBG1J4TVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWE2N2IwYjItOTY3MC0z OWQ4LTg3ZDktZmUyNGVlYTBlNDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQ9RjG+HAIzZ+0itMI0OSaK6hM5vBpB7uPqEUQoFgR+e5FZdKjxB10F GvgpJu8AbBW4vTf9ddOmsS2im1aQzdlU5XLkudVDwQZ559jchXeLsolENJV7eD5t F959KJ+nxCdNiEsdOgLz8o7YBEgjq5GIKI4NQ3hd10cldDV7rvpAEo00MAs2eIGu 3MzcDwg17n/r/Do8eUv+azURfCMsR1RbbdjBeRtn9aP9LN8mIGghtwgG090qX2p2 c+d6qpyy0BHGhCqTLuJjTHYHQzr1oJ9g0vUSlSyNBb52p95mWtoDz6QbX64f14G7 b5N8vkI1WHThG/a/CkWKGYwB74uUb6A= -----END CERTIFICATE-----Generated at Wed Apr 22 00:12:44 2026 by rpki-client