$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af7d06f-0375-3c47-a39d-ed73cdb4b64d.roa File: 3af7d06f-0375-3c47-a39d-ed73cdb4b64d.roa (raw, json) Hash identifier: a3jVcbefQSQIy6wgTgaCUl8mpZTl2QB88VN4ZRProhU= Subject key identifier: 8B:78:B8:14:89:C8:57:F5:C1:56:CC:1A:51:F6:65:BA:FC:C9:74:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58D4FEB103BE16F8876640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af7d06f-0375-3c47-a39d-ed73cdb4b64d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.170.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:d4:fe:b1:03:be:16:f8:87:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ed5f8477-f141-4b5d-ac3b-64d7e4f2e256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3b:50:9a:3a:9b:61:38:43:2a:f2:29:ba:8c: 9e:80:e0:01:1a:e2:f0:62:16:be:44:82:41:83:aa: 61:46:5a:18:5b:33:0f:d4:8c:e3:16:c8:37:35:b9: f7:80:e2:17:0b:e1:3e:85:9b:23:6d:18:f6:3a:e3: 24:2b:df:6b:93:82:02:cb:57:af:59:f7:c2:cf:cb: 0e:5f:b7:a2:01:14:d1:9f:61:91:f0:0e:cc:44:97: de:48:20:fe:b0:79:f8:71:c6:0f:19:3e:2a:53:ac: 02:f2:f7:f9:4c:4e:7f:95:2e:0a:45:3e:1d:7d:27: 01:2f:06:6f:f4:9f:68:16:64:8d:ee:30:65:30:25: 10:7a:58:a6:2f:a9:1d:64:c6:79:46:52:9f:52:6f: e3:7d:7d:26:50:7a:b9:cd:38:ac:5f:0f:d1:2b:fb: 4c:ce:31:4c:b6:d2:ed:51:86:46:49:84:10:1f:39: e6:e7:75:91:fe:80:ca:db:a4:19:dc:c7:06:9f:9a: 54:76:83:85:4a:79:30:23:29:f5:35:1d:81:f4:f9: 79:bf:25:87:b4:51:6a:ed:8a:6d:03:f2:03:c0:d8: 2b:88:c8:be:d4:18:7c:8f:b0:49:10:ad:64:29:23: 44:ab:cc:85:ac:18:84:9b:d9:62:9a:4c:d6:29:00: 73:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:78:B8:14:89:C8:57:F5:C1:56:CC:1A:51:F6:65:BA:FC:C9:74:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af7d06f-0375-3c47-a39d-ed73cdb4b64d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.170.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1a:0c:a0:8c:14:f0:ff:8c:e9:c6:c0:7b:6c:0a:64:9a:e9: f6:a9:01:3e:08:3b:e0:02:5f:cf:55:5f:17:26:ea:6c:69:e4: f2:f0:0b:23:3c:15:0c:db:9f:09:2e:eb:fa:5e:51:0a:e7:eb: aa:9c:8e:c4:7e:6c:91:8b:54:9d:88:29:56:07:47:0e:14:19: 2f:7c:ae:f9:1d:d1:6c:20:5b:6d:9d:c8:49:63:78:ef:5f:7e: 96:2c:02:31:97:bd:8a:70:bc:4a:be:29:28:d7:0c:1c:e5:f9: da:b8:48:de:03:a9:64:b9:ac:a4:78:0a:db:d0:09:ca:9b:d2: 5a:4c:d0:0b:3f:9b:e2:32:d6:3e:90:ce:fc:da:92:26:d1:c5: 50:77:cf:02:3d:84:83:a4:f6:50:0b:77:32:13:a6:4a:5a:a2: c5:ec:c3:b5:53:96:fc:b5:1b:81:3c:16:32:80:89:07:39:d2: 9f:ec:5e:6e:15:e2:6b:af:4b:15:2a:bf:a6:ae:e6:12:01:7a: 58:a7:f0:68:eb:d1:af:8d:a8:b2:5f:dd:7c:11:f5:cb:9b:32: a1:72:f5:74:0c:08:29:ed:86:c1:98:9d:fa:9d:d9:64:56:f9: 8d:d3:b9:34:a4:d9:14:50:33:fc:b4:c7:d3:fc:2d:d5:2c:c4: 65:42:b7:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWNT+sQO+FviHZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWQ1Zjg0NzctZjE0MS00YjVkLWFjM2ItNjRkN2U0ZjJlMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjtQmjqbYThDKvIpuoyegOABGuLwYha+RIJB g6phRloYWzMP1IzjFsg3Nbn3gOIXC+E+hZsjbRj2OuMkK99rk4ICy1evWffCz8sO X7eiARTRn2GR8A7MRJfeSCD+sHn4ccYPGT4qU6wC8vf5TE5/lS4KRT4dfScBLwZv 9J9oFmSN7jBlMCUQelimL6kdZMZ5RlKfUm/jfX0mUHq5zTisXw/RK/tMzjFMttLt UYZGSYQQHznm53WR/oDK26QZ3McGn5pUdoOFSnkwIyn1NR2B9Pl5vyWHtFFq7Ypt A/IDwNgriMi+1Bh8j7BJEK1kKSNEq8yFrBiEm9limkzWKQBzIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIt4uBSJyFf1wVbMGlH2Zbr8yXSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FmN2QwNmYtMDM3NS0z YzQ3LWEzOWQtZWQ3M2NkYjRiNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSapmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8aDKCMFPD/jOnGwHtsCmSa6fapAT4IO+ACX89VXxcm6mxp5PLwCyM8 FQzbnwku6/peUQrn66qcjsR+bJGLVJ2IKVYHRw4UGS98rvkd0WwgW22dyEljeO9f fpYsAjGXvYpwvEq+KSjXDBzl+dq4SN4DqWS5rKR4CtvQCcqb0lpM0As/m+Iy1j6Q zvzakibRxVB3zwI9hIOk9lALdzITpkpaosXsw7VTlvy1G4E8FjKAiQc50p/sXm4V 4muvSxUqv6au5hIBelin8Gjr0a+NqLJf3XwR9cubMqFy9XQMCCnthsGYnfqd2WRW +Y3TuTSk2RRQM/y0x9P8LdUsxGVCt6w= -----END CERTIFICATE-----Generated at Sun Mar 1 22:56:18 2026 by rpki-client