$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa4c7565-958d-3e75-9d3b-48a2a45d2da5.roa File: fa4c7565-958d-3e75-9d3b-48a2a45d2da5.roa (raw, json) Hash identifier: 856Jl/6Y2ebpzFJSUS1brHwzsqlV6opob60m03/3GE0= Subject key identifier: AF:84:E7:C8:51:F8:EA:CB:2A:C0:B7:FC:B9:0D:02:3F:04:2E:4D:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF593F71971D2B4C7EB3D20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa4c7565-958d-3e75-9d3b-48a2a45d2da5.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33660 IP address blocks: 73.20.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:93:f7:19:71:d2:b4:c7:eb:3d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f71b2bf1-43d1-4343-a191-d92ae51b4252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5d:db:88:14:d7:5b:b6:04:a6:d1:77:12:ed: c3:86:85:e8:05:de:19:25:e5:1e:e7:84:c4:3b:a7: bb:38:da:92:cc:c6:f0:f4:17:0e:cb:ca:60:b6:09: 54:34:12:f4:78:16:ea:3b:75:2e:72:ae:64:5e:39: e8:76:7d:fe:c1:26:af:69:96:9b:22:f5:91:41:b5: 99:9d:ed:e8:61:ca:f0:de:1d:41:ff:91:86:63:41: 83:7d:75:62:5c:d7:a6:d1:27:ee:ac:15:0d:e5:d1: ef:9b:c0:23:6a:2d:32:eb:87:e3:9f:9d:aa:1a:66: ce:2f:7a:0a:85:e6:e5:1e:40:b1:50:c8:44:df:26: 8d:2c:c7:ab:2f:c9:51:17:0b:52:82:54:b3:83:86: f5:a8:6b:b6:86:ee:1f:c4:60:0d:30:ed:42:0b:42: a0:38:1d:77:26:25:fe:09:b8:74:56:b5:ac:40:70: 3b:bf:ea:48:80:8c:1b:54:5c:1f:3a:31:51:67:84: 40:8f:82:32:93:29:85:bd:66:7c:bc:f0:fb:91:3d: 74:6f:a4:6d:c0:f5:4a:5f:f3:07:a4:74:dd:a2:5b: 27:09:c8:bb:17:9e:5f:86:c8:f5:f1:87:6c:fd:e2: 4f:14:73:5c:32:15:92:cf:76:30:33:70:d9:38:f7: 4b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:84:E7:C8:51:F8:EA:CB:2A:C0:B7:FC:B9:0D:02:3F:04:2E:4D:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa4c7565-958d-3e75-9d3b-48a2a45d2da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.20.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:84:ff:d8:fa:ec:e7:e1:ef:bd:d4:97:c9:21:3d:0e:1f:1a: b3:6a:2c:35:f1:ee:3d:2c:f0:2e:de:e7:15:2e:55:2d:9b:82: 58:ef:6a:7a:60:f7:b6:7e:b9:0f:5d:ec:dc:a5:60:9d:32:7f: 4e:c6:83:bd:7b:eb:0a:a8:1b:b7:08:bb:d4:15:28:e8:c6:f4: 19:0e:d8:dc:ca:5b:d6:b6:1f:de:d0:ec:1c:fd:bc:53:76:81: a3:fc:8d:24:11:cf:cb:db:11:a3:6d:0a:84:cb:25:0a:fc:1c: c0:c4:40:95:1e:6f:0e:39:6d:29:94:43:90:54:63:93:f0:d7: 0c:9b:1c:b0:57:44:5d:7d:ba:3c:d1:e4:f0:98:bc:25:18:91: b5:4f:e0:da:54:aa:53:db:69:9d:91:67:e5:36:61:38:b8:9e: 58:8d:d5:70:cd:38:76:dd:8b:50:28:63:13:11:cf:52:a8:99: 8c:09:bf:80:bc:b7:c4:4d:51:00:58:15:74:ea:af:d4:f9:6b: 1e:12:a8:a2:f0:01:41:5c:cd:aa:02:c8:c7:bc:99:f9:a9:bd: 4a:00:58:0c:dc:5f:d7:7d:fb:ad:ca:89:39:cc:88:5e:28:61: 32:1a:80:3c:8e:97:24:56:5f:99:89:ae:91:9a:21:5a:f6:dc: 3c:17:78:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9ZP3GXHStMfrPSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjcxYjJiZjEtNDNkMS00MzQzLWExOTEtZDkyYWU1MWI0MjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F3biBTXW7YEptF3Eu3DhoXoBd4ZJeUe54TE O6e7ONqSzMbw9BcOy8pgtglUNBL0eBbqO3Uucq5kXjnodn3+wSavaZabIvWRQbWZ ne3oYcrw3h1B/5GGY0GDfXViXNem0SfurBUN5dHvm8Ajai0y64fjn52qGmbOL3oK heblHkCxUMhE3yaNLMerL8lRFwtSglSzg4b1qGu2hu4fxGANMO1CC0KgOB13JiX+ Cbh0VrWsQHA7v+pIgIwbVFwfOjFRZ4RAj4IykymFvWZ8vPD7kT10b6RtwPVKX/MH pHTdolsnCci7F55fhsj18Yds/eJPFHNcMhWSz3YwM3DZOPdLnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+E58hR+OrLKsC3/LkNAj8ELk3KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmE0Yzc1NjUtOTU4ZC0z ZTc1LTlkM2ItNDhhMmE0NWQyZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6E/9j67Ofh773Ul8khPQ4fGrNqLDXx7j0s8C7e5xUuVS2bgljvanpg 97Z+uQ9d7NylYJ0yf07Gg7176wqoG7cIu9QVKOjG9BkO2NzKW9a2H97Q7Bz9vFN2 gaP8jSQRz8vbEaNtCoTLJQr8HMDEQJUebw45bSmUQ5BUY5Pw1wybHLBXRF19ujzR 5PCYvCUYkbVP4NpUqlPbaZ2RZ+U2YTi4nliN1XDNOHbdi1AoYxMRz1KomYwJv4C8 t8RNUQBYFXTqr9T5ax4SqKLwAUFczaoCyMe8mfmpvUoAWAzcX9d9+63KiTnMiF4o YTIagDyOlyRWX5mJrpGaIVr23DwXeI8= -----END CERTIFICATE-----Generated at Tue Apr 21 20:16:09 2026 by rpki-client