$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/004d9a2c-37d1-3fe5-9da7-fe7be9537018.roa File: 004d9a2c-37d1-3fe5-9da7-fe7be9537018.roa (raw, json) Hash identifier: yn0jNEQ607iQNbMYdijBeV11BRfx7fhTbjAEjfSIkNs= Subject key identifier: 17:91:0C:37:E8:8D:FA:8F:BA:40:C1:82:B8:84:42:64:56:F3:D8:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5DCB149E71E7EF83C9B040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/004d9a2c-37d1-3fe5-9da7-fe7be9537018.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.71.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:cb:14:9e:71:e7:ef:83:c9:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5ec69f0f-d0e2-4707-8154-3c8c9cd756df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:5d:55:ad:9f:56:fe:20:dc:a1:c3:00:c8: 72:d0:a3:d7:eb:e3:75:15:76:dd:df:66:94:11:34: 0d:93:17:bc:9a:33:70:ca:a9:f3:42:a8:1e:12:55: 6c:9c:53:9e:dd:45:0c:11:43:3b:c0:9c:2e:98:04: 86:9a:a8:91:9e:22:2a:42:05:d4:21:9e:e2:af:6b: 7c:c5:47:4e:36:12:a4:b5:ae:db:fb:c1:57:c8:54: f5:cc:1b:bc:a6:7e:0f:b1:95:76:8b:a1:cf:45:20: 37:82:02:28:04:83:8a:c5:53:55:da:d3:89:03:b3: e9:e3:20:d8:9f:76:b9:40:56:b4:22:7a:95:84:40: d7:44:66:37:5b:20:43:c6:f3:c8:ed:77:96:55:2e: 4d:49:d0:64:d2:e8:84:37:7e:7e:ff:a6:2b:cf:43: 6c:eb:d1:bf:3d:ac:e5:0d:34:39:cb:ab:a5:74:48: cc:7a:1e:11:66:9f:a0:94:b5:43:00:5c:42:44:e6: 89:dd:fd:e3:a9:c4:94:ee:5c:1c:ab:c8:25:43:05: 15:32:0b:26:4e:91:d8:4a:ab:68:86:36:b1:09:e1: 8e:b2:ce:69:24:7f:28:ac:ec:7e:e2:53:0d:47:9c: 79:84:c8:39:65:bd:b5:17:be:18:a2:f7:86:ac:66: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:91:0C:37:E8:8D:FA:8F:BA:40:C1:82:B8:84:42:64:56:F3:D8:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/004d9a2c-37d1-3fe5-9da7-fe7be9537018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.71.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:9c:64:58:a0:0a:a6:49:86:49:5b:18:c9:f3:5f:2f:62:40: 9a:b5:18:b6:d0:59:57:17:08:24:13:f0:70:9b:97:57:55:64: 68:75:5b:6f:44:b2:a7:28:aa:17:53:a5:92:8b:26:8c:2b:fc: 23:4f:c6:f6:e0:11:04:be:e8:88:20:00:83:8d:ef:46:51:28: b9:21:33:05:b2:b5:8e:9d:1e:b0:33:bf:f9:4a:02:3f:62:62: ba:cd:49:f0:7c:9b:83:df:61:97:a9:4d:13:da:6b:e1:07:ef: fe:64:da:d5:bb:b1:d6:7c:08:08:01:11:c0:45:2e:67:c1:54: 5d:7e:32:5d:a4:13:68:48:2f:89:42:30:e2:c3:d9:77:d7:3e: 20:a5:12:cb:ce:9c:5d:2f:50:fd:4b:be:ab:c3:c9:5e:23:e5: 91:4f:aa:14:5c:5e:aa:18:fc:7b:0f:50:05:a7:4b:2a:48:3b: 92:46:52:3e:57:e4:4b:fb:a9:6f:b1:75:a2:34:79:91:25:b1: ea:fa:ae:26:89:8a:f7:ca:0e:56:ba:94:cf:87:d2:0a:3c:7a: 70:d9:44:16:ac:6d:65:72:65:15:67:d3:db:36:7f:6b:03:cf: 31:27:16:95:1c:0f:f6:8e:e6:c6:af:63:32:fc:20:5d:34:6f: 32:34:98:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXcsUnnHn74PJsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NWVjNjlmMGYtZDBlMi00NzA3LTgxNTQtM2M4YzljZDc1NmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte5dVa2fVv4g3KHDAMhy0KPX6+N1FXbd32aU ETQNkxe8mjNwyqnzQqgeElVsnFOe3UUMEUM7wJwumASGmqiRniIqQgXUIZ7ir2t8 xUdONhKkta7b+8FXyFT1zBu8pn4PsZV2i6HPRSA3ggIoBIOKxVNV2tOJA7Pp4yDY n3a5QFa0InqVhEDXRGY3WyBDxvPI7XeWVS5NSdBk0uiEN35+/6Yrz0Ns69G/Pazl DTQ5y6uldEjMeh4RZp+glLVDAFxCROaJ3f3jqcSU7lwcq8glQwUVMgsmTpHYSqto hjaxCeGOss5pJH8orOx+4lMNR5x5hMg5Zb21F74YoveGrGZKtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeRDDfojfqPukDBgriEQmRW89jFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDA0ZDlhMmMtMzdkMS0z ZmU1LTlkYTctZmU3YmU5NTM3MDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUeqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANqcZFigCqZJhklbGMnzXy9iQJq1GLbQWVcXCCQT8HCbl1dVZGh1W29E sqcoqhdTpZKLJowr/CNPxvbgEQS+6IggAION70ZRKLkhMwWytY6dHrAzv/lKAj9i YrrNSfB8m4PfYZepTRPaa+EH7/5k2tW7sdZ8CAgBEcBFLmfBVF1+Ml2kE2hIL4lC MOLD2XfXPiClEsvOnF0vUP1LvqvDyV4j5ZFPqhRcXqoY/HsPUAWnSypIO5JGUj5X 5Ev7qW+xdaI0eZElser6riaJivfKDla6lM+H0go8enDZRBasbWVyZRVn09s2f2sD zzEnFpUcD/aO5savYzL8IF00bzI0mBE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:54:32 2026 by rpki-client