$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3356caf-53e4-3a5b-8252-42ec85826289.roa File: f3356caf-53e4-3a5b-8252-42ec85826289.roa (raw, json) Hash identifier: 80WJg+YahSArpQvT9Q7PD2h9+RnXiQCZLjfx993R34w= Subject key identifier: A4:C1:65:B5:EF:0C:B2:B1:17:BF:4C:6E:C0:8D:59:3E:3F:FB:0F:AD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7AB621BFE0BA22E2C67C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3356caf-53e4-3a5b-8252-42ec85826289.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 73.168.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:ab:62:1b:fe:0b:a2:2e:2c:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=fe1b6bf1-5ffe-42b0-a465-a884d0007d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:68:9f:61:80:43:52:91:4d:86:22:08:b5:a0: 3b:b8:8d:7e:16:61:38:bd:41:75:c9:a6:7d:a5:9e: ac:d3:bf:ce:0e:70:5e:ee:74:66:79:99:b2:3e:8d: 27:13:95:f0:43:ed:10:60:3b:dd:38:48:7e:c7:c3: 05:5d:38:b1:34:53:1d:38:ae:a9:b3:8b:cf:3a:ff: bd:b2:12:f2:40:3d:0e:36:c3:57:a1:c5:0e:ed:ce: 1a:6d:e0:d3:63:6b:7c:6c:6d:34:44:34:a1:cc:7e: f5:ab:84:c1:1b:75:84:3e:4c:12:3e:dc:fc:0f:07: cf:dd:ff:cc:89:51:02:6e:f4:de:16:06:0b:05:e4: 9f:3c:86:c9:80:2c:69:82:48:14:b9:a0:00:11:97: 05:ac:31:02:7f:0b:bd:d4:8e:9f:50:5e:ac:00:78: ae:1a:db:e8:3b:01:4e:81:c4:5e:17:df:65:f7:82: 5e:4c:97:ab:ae:f3:0a:cd:b5:56:d8:17:b4:21:de: 20:86:06:f0:99:6c:59:5d:33:c7:db:01:b1:75:1a: e7:9f:45:76:27:f6:f8:78:8c:75:4f:d7:df:19:93: ed:ac:b9:e9:24:72:be:8e:0f:97:09:a5:8d:12:4a: 10:19:ff:ea:96:41:af:fa:a2:21:0b:78:91:e6:fb: 7e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C1:65:B5:EF:0C:B2:B1:17:BF:4C:6E:C0:8D:59:3E:3F:FB:0F:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3356caf-53e4-3a5b-8252-42ec85826289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.168.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7b:c0:9e:1b:f7:2b:2d:d9:37:f3:75:c8:6e:86:f5:94:76: 28:16:3a:1f:16:33:90:ff:c5:08:35:25:3a:a4:58:21:33:75: 83:bd:e3:8e:25:29:bb:b6:95:25:e9:b9:85:09:ca:ba:91:3a: 27:81:ee:fe:51:59:a0:53:88:6e:80:c0:27:df:41:31:12:7a: 85:69:a2:cf:21:b7:29:b3:29:0a:45:b0:38:f8:36:fe:ad:f2: 7f:55:f1:79:2f:88:9b:13:b7:cf:74:48:ef:17:f1:42:6a:c4: 7b:0a:63:ea:3c:f0:89:e7:35:05:57:35:58:a9:2e:3d:21:0a: f4:b3:37:07:d6:59:68:0b:d2:43:cf:24:35:18:84:99:73:76: 01:d9:fe:fe:ab:5a:ff:97:6c:54:5b:f0:d9:b2:b4:1f:a2:e0: 24:d4:a4:70:8a:a1:83:13:54:d9:14:00:93:13:df:7f:37:3d: 2f:88:f1:89:45:89:f6:c0:e1:57:81:3a:29:69:e7:4e:18:51: bb:83:0f:88:d6:3e:9a:40:95:8a:d4:8d:66:a5:72:c9:4c:ac: 2d:15:f8:66:4e:b1:b4:36:91:53:59:87:a6:83:e8:13:ea:1c: 34:02:cb:40:4e:1f:94:93:57:67:88:27:bd:f5:9a:74:36:98: 25:ca:00:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O96tiG/4Loi4sZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZmUxYjZiZjEtNWZmZS00MmIwLWE0NjUtYTg4NGQwMDA3ZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWifYYBDUpFNhiIItaA7uI1+FmE4vUF1yaZ9 pZ6s07/ODnBe7nRmeZmyPo0nE5XwQ+0QYDvdOEh+x8MFXTixNFMdOK6ps4vPOv+9 shLyQD0ONsNXocUO7c4abeDTY2t8bG00RDShzH71q4TBG3WEPkwSPtz8DwfP3f/M iVECbvTeFgYLBeSfPIbJgCxpgkgUuaAAEZcFrDECfwu91I6fUF6sAHiuGtvoOwFO gcReF99l94JeTJerrvMKzbVW2Be0Id4ghgbwmWxZXTPH2wGxdRrnn0V2J/b4eIx1 T9ffGZPtrLnpJHK+jg+XCaWNEkoQGf/qlkGv+qIhC3iR5vt+8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTBZbXvDLKxF79MbsCNWT4/+w+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjMzNTZjYWYtNTNlNC0z YTViLTgyNTItNDJlYzg1ODI2Mjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASai/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC57wJ4b9yst2TfzdchuhvWUdigWOh8WM5D/xQg1JTqkWCEzdYO9444l Kbu2lSXpuYUJyrqROieB7v5RWaBTiG6AwCffQTESeoVpos8htymzKQpFsDj4Nv6t 8n9V8XkviJsTt890SO8X8UJqxHsKY+o88InnNQVXNVipLj0hCvSzNwfWWWgL0kPP JDUYhJlzdgHZ/v6rWv+XbFRb8NmytB+i4CTUpHCKoYMTVNkUAJMT3383PS+I8YlF ifbA4VeBOilp504YUbuDD4jWPppAlYrUjWalcslMrC0V+GZOsbQ2kVNZh6aD6BPq HDQCy0BOH5STV2eIJ731mnQ2mCXKADc= -----END CERTIFICATE-----Generated at Tue Apr 21 19:33:12 2026 by rpki-client