$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cece860-2432-3f49-a092-f0c40e8840e7.roa File: 3cece860-2432-3f49-a092-f0c40e8840e7.roa (raw, json) Hash identifier: 69x50rwxPr5nSF9iIM86PD/mpfPTkW1VT141N69M59M= Subject key identifier: 49:2D:96:B7:EB:8B:5B:DD:60:7D:B3:89:B2:BE:5D:18:EA:EE:16:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5A47B0BEAE89EA5C974880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cece860-2432-3f49-a092-f0c40e8840e7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.215.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:47:b0:be:ae:89:ea:5c:97:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=aec523a5-e220-4ed1-b675-7e414b1d159e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2a:42:39:b8:95:e0:ed:f1:94:81:91:4e:13: 81:bf:2f:90:e4:e9:dc:66:11:8f:30:3e:f5:f3:63: ac:de:7c:92:73:54:c9:c7:1c:43:93:52:18:32:70: f8:51:20:e0:36:ee:60:ee:f3:17:11:a3:7a:65:f1: b6:9a:66:fb:2e:7a:ae:6a:71:6e:58:b9:4f:b6:53: 52:96:f1:b9:cc:ad:21:c6:1f:ad:17:31:8f:c0:c4: 6b:bc:62:77:dd:9a:5a:a5:0e:b6:1e:8e:34:f6:fa: 14:a4:d9:4e:60:88:ca:66:27:e9:6b:a7:3f:cd:b8: 20:15:3b:99:9c:c2:5e:dd:85:8d:3d:cb:42:cf:f9: da:e3:83:a1:73:29:42:9c:06:ed:c3:d4:fa:b2:ae: 21:b7:45:2e:81:85:d8:de:49:34:a5:9d:05:25:56: 23:7b:83:14:ce:6a:20:72:d2:88:91:f1:8c:67:f0: 48:92:c9:d8:a6:ab:d0:72:06:6f:b6:09:16:ff:c8: b0:cf:85:7d:7b:11:75:f3:f8:ae:e3:ec:52:b4:a2: ec:0f:c8:a4:7a:be:98:9d:89:5b:63:c1:93:77:70: 37:30:96:45:7b:24:fc:6e:fe:4d:18:58:dc:57:9a: d4:0e:45:6d:52:28:07:b3:59:5e:82:84:80:21:10: 2b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2D:96:B7:EB:8B:5B:DD:60:7D:B3:89:B2:BE:5D:18:EA:EE:16:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cece860-2432-3f49-a092-f0c40e8840e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.215.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5d:2a:7d:c0:91:e4:e5:ea:b8:88:81:42:e3:23:16:cb:49: e3:e7:4f:79:aa:9c:23:6a:c7:96:56:52:2b:2a:f3:3c:c9:54: 91:6b:fb:c8:31:b6:39:c3:2a:b5:84:3d:e9:ba:03:9c:0b:99: ef:20:5d:1b:94:7f:96:30:1b:c0:b5:c4:7d:55:ba:05:32:59: b6:6b:bf:26:43:68:5b:0d:6d:1f:8b:6f:9d:f4:2a:e7:82:21: 6c:e1:56:44:92:9a:95:a4:12:d7:e4:6a:08:30:de:78:1a:5a: 8b:83:78:59:80:84:b9:01:af:e3:5e:cc:04:ed:dc:ea:fe:bb: 16:0a:d7:fa:41:80:79:41:9d:28:d4:b7:54:98:f8:03:48:18: bc:4b:0c:0c:48:5a:a7:85:2c:46:38:e4:ee:e6:26:d7:6e:6b: f6:00:af:7d:a0:d9:2d:79:71:d9:a2:83:e9:db:9b:e5:20:e9: a0:e5:94:f3:12:3e:99:16:10:89:ce:ca:d1:a8:b5:bd:2a:52: d5:82:47:11:f0:ad:0e:2f:95:7e:88:40:b3:0f:13:52:88:1b: 40:bb:eb:18:55:bb:34:c5:ef:d9:8b:6d:e9:17:b0:81:aa:8e: ff:28:9e:b0:be:e6:d0:73:0d:f8:1d:27:54:0c:bd:ed:5d:cd: 72:44:26:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWkewvq6J6lyXSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWVjNTIzYTUtZTIyMC00ZWQxLWI2NzUtN2U0MTRiMWQxNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCpCObiV4O3xlIGRThOBvy+Q5OncZhGPMD71 82Os3nySc1TJxxxDk1IYMnD4USDgNu5g7vMXEaN6ZfG2mmb7LnquanFuWLlPtlNS lvG5zK0hxh+tFzGPwMRrvGJ33ZpapQ62Ho409voUpNlOYIjKZifpa6c/zbggFTuZ nMJe3YWNPctCz/na44OhcylCnAbtw9T6sq4ht0UugYXY3kk0pZ0FJVYje4MUzmog ctKIkfGMZ/BIksnYpqvQcgZvtgkW/8iwz4V9exF18/iu4+xStKLsD8iker6YnYlb Y8GTd3A3MJZFeyT8bv5NGFjcV5rUDkVtUigHs1legoSAIRArpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEktlrfri1vdYH2zibK+XRjq7hYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NlY2U4NjAtMjQzMi0z ZjQ5LWEwOTItZjBjNDBlODg0MGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSdcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpdKn3AkeTl6riIgULjIxbLSePnT3mqnCNqx5ZWUisq8zzJVJFr+8gx tjnDKrWEPem6A5wLme8gXRuUf5YwG8C1xH1VugUyWbZrvyZDaFsNbR+Lb530KueC IWzhVkSSmpWkEtfkaggw3ngaWouDeFmAhLkBr+NezATt3Or+uxYK1/pBgHlBnSjU t1SY+ANIGLxLDAxIWqeFLEY45O7mJtdua/YAr32g2S15cdmig+nbm+Ug6aDllPMS PpkWEInOytGotb0qUtWCRxHwrQ4vlX6IQLMPE1KIG0C76xhVuzTF79mLbekXsIGq jv8onrC+5tBzDfgdJ1QMve1dzXJEJnc= -----END CERTIFICATE-----Generated at Sun Mar 1 21:00:24 2026 by rpki-client