$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbff49cf-b32f-39de-89ef-2baf5fb10c94.roa File: fbff49cf-b32f-39de-89ef-2baf5fb10c94.roa (raw, json) Hash identifier: G1HSodu1QScdQzEE+Eub97FWxxrmcCrME4bRWNrhJCg= Subject key identifier: A7:BE:CF:72:DE:04:06:22:15:24:6E:71:A2:DB:19:AC:31:00:43:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF8CF2789896E36E3E33700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbff49cf-b32f-39de-89ef-2baf5fb10c94.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 73.223.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:cf:27:89:89:6e:36:e3:e3:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=c643c63d-a965-44ff-a656-5445e23741d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:db:16:cd:3e:8b:67:a3:d5:96:d0:3b:de: 46:a1:48:4b:a3:f2:69:98:32:fc:59:9e:8b:40:ec: 54:c4:07:bd:bc:18:74:3c:56:ef:d4:12:f9:89:0b: c6:15:61:ab:1e:e5:e4:ca:d7:4d:13:97:aa:d4:f7: e2:98:b1:53:5e:62:01:21:ea:34:b5:b8:cb:c7:c5: a0:ec:d9:9d:1b:a2:8e:80:42:f3:20:f9:18:f7:19: 44:fc:39:03:16:1c:7a:df:88:7e:9c:b4:61:a7:1f: 43:0d:96:00:2c:b2:ae:30:ab:46:b9:79:fa:10:f6: fa:99:5e:0b:f4:b7:33:14:9b:00:8e:69:74:0d:b0: 8f:31:a1:22:06:a9:f4:65:bc:29:9a:fa:89:3a:c5: 90:4d:e1:a5:bc:bb:1e:00:57:1a:ba:b0:cb:fb:8e: 93:76:ce:d0:de:99:03:38:c3:24:34:b9:a5:7c:b0: 9b:54:6c:d6:02:27:cd:d1:81:c5:4f:66:1c:18:d1: 82:1e:b9:82:2b:23:47:80:22:a5:42:28:14:68:6e: 88:30:49:a1:b2:18:31:4e:db:3c:a8:c4:f1:a8:db: 3b:65:3f:e0:eb:e2:b7:f6:e7:cc:b5:49:e3:ff:0c: dc:2b:fb:4b:c7:c5:04:8a:d8:fe:b4:3f:0d:18:fb: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BE:CF:72:DE:04:06:22:15:24:6E:71:A2:DB:19:AC:31:00:43:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbff49cf-b32f-39de-89ef-2baf5fb10c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:2d:0e:5c:31:46:d2:ed:f9:d8:ab:61:13:1b:a9:6b:71:21: 75:a7:e6:a2:d1:3f:d6:fb:0a:db:4f:2c:dd:73:af:df:0d:c4: 08:35:8e:51:4b:c3:61:3a:6e:95:bc:d5:2c:57:a7:67:11:29: 4b:bf:42:fc:61:77:b6:23:b4:5f:c0:2f:e7:e0:d6:9b:39:b2: 45:ff:ee:76:fa:12:25:e3:a0:f3:da:63:2e:fb:64:2a:6d:38: a0:43:e8:e2:16:54:f4:d3:d0:c8:e5:be:14:4f:86:cf:45:84: 24:96:f2:55:21:c9:65:11:7f:e7:9e:fe:d2:6e:2e:07:d3:ce: 3b:87:57:7b:3f:15:e7:c2:91:0e:d9:d8:30:54:b4:ff:33:10: a2:3a:09:de:34:8c:70:1b:d3:3f:68:c8:43:bf:f1:fa:41:c8: 80:f0:9b:74:18:10:4d:5c:79:92:79:d3:c9:ce:17:73:c1:a7: 1b:d5:64:9c:13:d2:6d:7e:f5:f4:dd:a0:cc:78:c8:23:df:5a: 64:00:fd:20:04:77:fd:e3:38:72:94:8a:07:6a:2b:3c:1b:87: e1:41:21:4d:25:28:5b:1c:22:8b:8d:d5:82:fa:b2:55:e2:b0: e8:a7:40:c2:58:89:26:d9:34:7d:39:b8:9e:04:3c:fd:4b:af: 7a:c9:88:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+M8niYluNuPjNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YzY0M2M2M2QtYTk2NS00NGZmLWE2NTYtNTQ0NWUyMzc0MWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIXbFs0+i2ej1ZbQO95GoUhLo/JpmDL8WZ6L QOxUxAe9vBh0PFbv1BL5iQvGFWGrHuXkytdNE5eq1PfimLFTXmIBIeo0tbjLx8Wg 7NmdG6KOgELzIPkY9xlE/DkDFhx634h+nLRhpx9DDZYALLKuMKtGuXn6EPb6mV4L 9LczFJsAjml0DbCPMaEiBqn0ZbwpmvqJOsWQTeGlvLseAFcaurDL+46Tds7Q3pkD OMMkNLmlfLCbVGzWAifN0YHFT2YcGNGCHrmCKyNHgCKlQigUaG6IMEmhshgxTts8 qMTxqNs7ZT/g6+K39ufMtUnj/wzcK/tLx8UEitj+tD8NGPsUxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKe+z3LeBAYiFSRucaLbGawxAEPDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmJmZjQ5Y2YtYjMyZi0z OWRlLTg5ZWYtMmJhZjVmYjEwYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd/GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHctDlwxRtLt+dirYRMbqWtxIXWn5qLRP9b7CttPLN1zr98NxAg1jlFL w2E6bpW81SxXp2cRKUu/Qvxhd7YjtF/AL+fg1ps5skX/7nb6EiXjoPPaYy77ZCpt OKBD6OIWVPTT0MjlvhRPhs9FhCSW8lUhyWURf+ee/tJuLgfTzjuHV3s/FefCkQ7Z 2DBUtP8zEKI6Cd40jHAb0z9oyEO/8fpByIDwm3QYEE1ceZJ508nOF3PBpxvVZJwT 0m1+9fTdoMx4yCPfWmQA/SAEd/3jOHKUigdqKzwbh+FBIU0lKFscIouN1YL6slXi sOinQMJYiSbZNH05uJ4EPP1Lr3rJiHU= -----END CERTIFICATE-----Generated at Tue Apr 21 19:13:10 2026 by rpki-client