$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcac324c-a43a-34c6-a7e9-cf2290f1a578.roa File: dcac324c-a43a-34c6-a7e9-cf2290f1a578.roa (raw, json) Hash identifier: lLztJJjOjOfcWp3oYzyDI7GzUfH8xTHwJ1tQRf/50T4= Subject key identifier: BF:F0:1A:24:A2:4E:E5:E8:EB:93:58:BD:98:50:C2:4E:89:3C:F1:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF5F1570E40D63DD864A340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcac324c-a43a-34c6-a7e9-cf2290f1a578.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33287 IP address blocks: 73.81.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:f1:57:0e:40:d6:3d:d8:64:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=11ee008f-d7a7-440f-b010-7e1c6272a599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:07:26:90:97:5c:2c:53:77:5d:9c:6a:35: 74:e8:2b:77:0d:fd:82:8d:e7:7c:5b:30:1f:53:6b: 39:f6:ef:c7:5c:9d:0f:85:c9:bd:82:de:d0:9a:cb: 5e:32:51:dc:6b:34:e7:5b:ae:21:f0:c6:f8:01:dd: fb:f1:57:eb:96:b2:63:91:98:1b:de:e7:ee:96:6e: 3c:da:80:00:40:14:84:6d:8e:2e:21:01:1e:d8:5a: b5:8b:fd:87:63:f4:c9:28:d9:5f:5f:43:df:f8:f1: 09:47:17:c1:04:64:fc:72:0a:18:76:69:48:c8:25: f5:92:43:e6:10:b2:f5:8b:b6:39:ee:dc:5a:4f:0c: 51:bd:98:d8:96:a6:03:fb:cf:b7:e0:54:a7:ec:12: 8f:81:93:df:b0:a6:d4:e6:f9:dd:1e:06:aa:e1:a6: f5:b7:3e:cf:dc:59:17:04:c7:80:63:cd:72:19:ac: 13:d9:29:6a:39:79:1b:32:59:51:c9:57:ba:e8:cd: 33:61:49:8c:57:a2:4a:6e:87:98:9f:43:55:15:34: ed:f3:20:0b:64:fd:b7:a8:7f:de:61:22:71:53:e5: 63:d2:5f:5f:94:80:76:c8:71:3f:af:fc:d5:67:60: f5:44:3d:1e:e6:c0:93:4d:3e:72:cd:ed:2d:da:6b: 4a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F0:1A:24:A2:4E:E5:E8:EB:93:58:BD:98:50:C2:4E:89:3C:F1:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcac324c-a43a-34c6-a7e9-cf2290f1a578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.81.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:44:56:44:c1:1a:fc:b8:e1:f4:ec:51:2b:62:e1:5b:54:86: 6e:18:68:af:c9:be:7f:ae:03:75:34:6b:36:9a:59:61:8c:37: b1:9f:fe:c6:65:5e:0b:d2:d1:ee:9b:8d:1e:f0:e7:18:f6:0d: d7:34:24:af:25:47:66:4d:2a:b5:c5:76:95:c7:ff:6f:b8:6b: b4:54:06:b1:dc:9c:fb:40:d7:15:e5:72:5b:cf:1a:29:bc:67: 0c:25:de:35:1c:28:33:82:e4:23:a9:94:d6:67:7b:9a:b7:d1: 45:9b:96:fb:52:3c:d9:f2:e7:da:16:4a:99:bc:45:9b:ab:6a: 4f:b3:3e:fb:a4:47:02:02:b7:74:7a:ac:de:8e:7f:ab:8d:8b: 64:77:21:38:08:60:fa:84:5d:80:04:d9:3c:f8:f1:45:1a:45: 31:67:cc:6c:dd:4c:a1:72:6e:f8:c4:f4:d4:c2:4e:96:b3:4d: f9:ee:15:59:00:4b:9b:f8:27:50:b8:02:0d:ae:1f:94:38:17: 32:c3:e0:38:35:39:dd:63:03:49:42:3f:b0:23:44:2c:da:57: 5b:c4:d4:4b:a7:8c:f5:69:d5:41:c9:8d:65:26:ed:20:17:e7: 8b:a1:94:fe:e3:ad:fc:d2:00:1a:e5:12:a4:45:fa:49:ed:f2: 97:1e:fe:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9fFXDkDWPdhko0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MTFlZTAwOGYtZDdhNy00NDBmLWIwMTAtN2UxYzYyNzJhNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAAHJpCXXCxTd12cajV06Ct3Df2Cjed8WzAf U2s59u/HXJ0Phcm9gt7QmsteMlHcazTnW64h8Mb4Ad378VfrlrJjkZgb3ufulm48 2oAAQBSEbY4uIQEe2Fq1i/2HY/TJKNlfX0Pf+PEJRxfBBGT8cgoYdmlIyCX1kkPm ELL1i7Y57txaTwxRvZjYlqYD+8+34FSn7BKPgZPfsKbU5vndHgaq4ab1tz7P3FkX BMeAY81yGawT2SlqOXkbMllRyVe66M0zYUmMV6JKboeYn0NVFTTt8yALZP23qH/e YSJxU+Vj0l9flIB2yHE/r/zVZ2D1RD0e5sCTTT5yze0t2mtK9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/wGiSiTuXo65NYvZhQwk6JPPGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGNhYzMyNGMtYTQzYS0z NGM2LWE3ZTktY2YyMjkwZjFhNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSVHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNEVkTBGvy44fTsUSti4VtUhm4YaK/Jvn+uA3U0azaaWWGMN7Gf/sZl XgvS0e6bjR7w5xj2Ddc0JK8lR2ZNKrXFdpXH/2+4a7RUBrHcnPtA1xXlclvPGim8 Zwwl3jUcKDOC5COplNZne5q30UWblvtSPNny59oWSpm8RZurak+zPvukRwICt3R6 rN6Of6uNi2R3ITgIYPqEXYAE2Tz48UUaRTFnzGzdTKFybvjE9NTCTpazTfnuFVkA S5v4J1C4Ag2uH5Q4FzLD4Dg1Od1jA0lCP7AjRCzaV1vE1EunjPVp1UHJjWUm7SAX 54uhlP7jrfzSABrlEqRF+knt8pce/oQ= -----END CERTIFICATE-----Generated at Wed May 13 13:13:46 2026 by rpki-client