$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb01cdd1-2558-3f99-b318-c78438a54d8e.roa File: fb01cdd1-2558-3f99-b318-c78438a54d8e.roa (raw, json) Hash identifier: QJ6IPvjMSc+XG03ssKHSGwYT2m85Q697w78DB0E53Rw= Subject key identifier: 99:83:71:A1:4D:71:7B:CD:1C:9A:25:8E:F5:16:FD:1C:EB:6A:5B:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7A466D67121E6EE702E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb01cdd1-2558-3f99-b318-c78438a54d8e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 73.110.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:a4:66:d6:71:21:e6:ee:70:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=bd93c1db-8062-4329-9a84-68f9838f5ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:ec:a8:35:49:0d:13:e1:74:fb:17:3c:bd: fa:23:51:93:46:31:5a:22:07:2f:fb:2b:c8:50:f6: 90:76:5d:eb:37:67:cc:bf:ce:65:98:2c:b3:7e:3a: 1b:6f:3e:5e:8f:23:da:87:3c:d1:45:b8:e3:ab:86: fc:e4:20:98:88:ca:58:50:b5:35:bb:aa:26:07:34: 31:68:a6:15:df:cf:c9:af:21:d5:60:37:05:7f:a6: 09:c7:10:54:68:98:16:ce:89:ec:4f:52:07:31:42: 67:a4:0f:b4:9e:7b:98:28:6e:2a:f6:b7:c6:3f:6e: ce:41:15:f7:ea:92:e9:52:5c:02:88:c6:52:a1:79: a6:21:a8:56:30:3d:75:f1:b3:6b:a6:7f:5a:dc:27: fb:66:b0:58:68:b6:ed:b2:1e:84:a1:4c:11:29:e4: c9:48:89:77:0b:94:b6:09:a5:5c:3d:47:27:67:f3: 3a:d7:d1:c6:01:91:8b:63:24:24:7d:58:9b:65:40: f0:56:0c:68:3f:d1:82:30:c6:2b:5a:f8:50:68:dc: 41:1f:03:82:f0:b8:43:26:d1:5d:47:3e:4d:c9:d3: 48:75:59:89:e5:8b:04:0f:f4:e7:e4:c3:49:e2:47: fd:02:49:20:82:b9:ed:10:eb:bf:cd:cc:cc:80:5f: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:83:71:A1:4D:71:7B:CD:1C:9A:25:8E:F5:16:FD:1C:EB:6A:5B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb01cdd1-2558-3f99-b318-c78438a54d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.110.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:5b:50:46:cd:85:a0:fc:f3:72:f0:b2:65:bb:18:85:5c:3a: 14:d7:8c:eb:83:ee:5f:80:ce:51:4f:3b:06:03:20:8a:03:be: b5:08:8c:a3:25:a8:ca:2f:2c:18:92:7f:d9:73:2f:ad:bb:5f: c7:97:ed:1a:20:ca:dc:94:ce:69:74:5d:aa:6a:8a:e9:5d:b2: d8:63:4c:7f:07:f4:58:64:61:ab:2b:24:b8:f6:c9:32:f0:f9: 4f:9b:9d:72:ff:0e:fa:ae:91:bb:b3:46:56:0d:a6:bd:79:ee: 57:79:1a:e7:29:b0:fd:5a:38:d2:23:75:96:5c:ca:bd:f2:09: 33:c3:c5:bb:bc:17:c8:29:4f:8f:ae:7c:f7:74:21:b3:40:53: ac:e5:21:4a:4e:50:8a:fe:06:47:21:67:af:03:b5:8d:13:eb: 04:d8:5a:b8:bb:dd:87:23:c6:26:44:0c:05:6f:bb:8c:b3:84: 9e:8c:1f:0a:cb:98:e8:7c:62:e2:5b:28:e7:59:c4:ee:4a:d5: c2:1f:a7:22:0c:ad:f4:c3:4e:bb:71:b9:3a:77:d1:5a:34:97: b1:ea:af:bc:63:4e:43:6e:1d:dd:fc:2d:ba:96:5d:cc:04:ba: 0f:11:02:76:f3:c5:3e:d0:6b:01:17:93:fc:78:43:50:81:35: cb:4d:20:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O96Rm1nEh5u5wLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YmQ5M2MxZGItODA2Mi00MzI5LTlhODQtNjhmOTgzOGY1ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOXsqDVJDRPhdPsXPL36I1GTRjFaIgcv+yvI UPaQdl3rN2fMv85lmCyzfjobbz5ejyPahzzRRbjjq4b85CCYiMpYULU1u6omBzQx aKYV38/JryHVYDcFf6YJxxBUaJgWzonsT1IHMUJnpA+0nnuYKG4q9rfGP27OQRX3 6pLpUlwCiMZSoXmmIahWMD118bNrpn9a3Cf7ZrBYaLbtsh6EoUwRKeTJSIl3C5S2 CaVcPUcnZ/M619HGAZGLYyQkfVibZUDwVgxoP9GCMMYrWvhQaNxBHwOC8LhDJtFd Rz5NydNIdVmJ5YsED/Tn5MNJ4kf9AkkggrntEOu/zczMgF+FRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmDcaFNcXvNHJoljvUW/Rzralu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmIwMWNkZDEtMjU1OC0z Zjk5LWIzMTgtYzc4NDM4YTU0ZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSW4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMtbUEbNhaD883LwsmW7GIVcOhTXjOuD7l+AzlFPOwYDIIoDvrUIjKMl qMovLBiSf9lzL627X8eX7RogytyUzml0XapqiuldsthjTH8H9FhkYasrJLj2yTLw +U+bnXL/DvqukbuzRlYNpr157ld5GucpsP1aONIjdZZcyr3yCTPDxbu8F8gpT4+u fPd0IbNAU6zlIUpOUIr+BkchZ68DtY0T6wTYWri73YcjxiZEDAVvu4yzhJ6MHwrL mOh8YuJbKOdZxO5K1cIfpyIMrfTDTrtxuTp30Vo0l7Hqr7xjTkNuHd38LbqWXcwE ug8RAnbzxT7QawEXk/x4Q1CBNctNID4= -----END CERTIFICATE-----Generated at Tue Apr 21 23:02:33 2026 by rpki-client