$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57a645d8-9300-33a0-984a-43056a5f6a5b.roa File: 57a645d8-9300-33a0-984a-43056a5f6a5b.roa (raw, json) Hash identifier: Jj2B6tomWtLX5d3Q3MJrHh76vvmGwelC71Ax1vTed84= Subject key identifier: 8B:E4:70:09:74:C4:3A:D9:E3:F6:37:D9:FE:E2:B0:3E:22:62:3D:A2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5869CE9C9C79D14FD56980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57a645d8-9300-33a0-984a-43056a5f6a5b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.72.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:69:ce:9c:9c:79:d1:4f:d5:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e0b3558e-9ce2-4295-8def-7fcf0cf27cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:bf:95:33:95:2a:fe:82:58:ba:e9:ce:60: 4f:4c:71:bc:7b:90:21:3b:84:21:30:9f:b5:3d:8d: 71:b3:d6:cc:15:3b:d8:da:cf:66:1b:27:08:22:93: 33:4d:cf:54:1c:bc:20:b7:d2:10:67:d9:f9:c0:e4: e9:bb:96:57:cc:72:b2:a0:cb:37:46:97:ff:6d:6e: 42:e7:d2:2a:bb:be:25:40:f7:ec:8b:c5:2b:41:59: 7d:cb:88:0d:08:ab:1e:4e:43:e0:16:6e:e3:3d:2f: 4c:f8:35:4e:82:0e:77:32:b7:ab:1a:26:71:11:a6: d3:b1:f5:0f:1b:08:e5:d4:f6:6f:cb:07:0e:2a:98: ae:3c:45:a8:a2:14:ad:e9:83:4e:40:fa:38:45:d2: 7a:99:ba:a2:54:54:96:18:c3:cc:a4:17:dc:ac:23: 3f:ad:05:ff:7f:a8:a3:8c:c3:93:10:20:c7:08:1b: 31:38:2e:5c:f2:b9:83:9f:b9:7a:ba:77:fa:ef:b9: c6:a2:74:02:48:e7:45:6e:d5:b0:e1:ef:78:c4:b1: c7:6f:3b:2f:ae:38:d1:93:8a:73:3e:41:d6:07:9d: 63:b3:73:4e:ca:7c:ed:6c:b8:02:10:8d:5e:80:7f: 59:ce:ea:ed:be:ce:e0:0a:59:5c:27:2b:42:67:20: c4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E4:70:09:74:C4:3A:D9:E3:F6:37:D9:FE:E2:B0:3E:22:62:3D:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57a645d8-9300-33a0-984a-43056a5f6a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.72.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:93:59:23:19:15:8a:f9:56:80:40:42:b9:9d:a8:05:0a:90: 42:64:a3:84:c5:06:c5:6c:ac:05:3f:1e:78:3d:fc:6d:f3:05: 0a:87:2d:21:30:59:da:62:7b:97:63:34:b6:16:70:2b:30:07: 4c:3f:31:ba:ec:f4:96:95:f3:57:9e:32:6c:9e:16:c1:27:b5: d1:3a:77:67:46:27:da:23:d9:15:17:52:6e:fc:98:b6:64:4d: 74:e3:d5:f8:3a:1f:37:e1:c7:5d:6a:b3:f1:00:24:76:47:49: ba:86:89:da:8f:a3:d2:a0:dd:d0:d5:f8:fb:2e:07:4d:82:4d: 81:b8:ba:b7:82:cb:5f:04:a5:d3:09:39:70:3d:6b:fd:b1:4a: fc:42:f8:89:69:bb:8d:86:9c:06:91:74:16:a2:c2:a0:92:d6: 64:d6:13:2d:81:1f:0e:06:76:6d:7e:b8:c6:c6:4b:ad:5c:30: 7b:92:10:78:49:23:98:0a:4e:9a:30:a8:74:8e:89:f6:00:03: 26:94:ae:2d:0b:fa:e6:85:3c:01:dc:eb:63:28:aa:b8:c7:7a: 3d:f9:bb:f4:b1:9e:4a:29:07:1f:52:70:32:6a:1e:f8:21:bc: 0a:7c:42:a9:7e:25:58:82:8f:8f:7f:8d:bd:68:e9:c8:4e:54: 69:15:0b:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWGnOnJx50U/VaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTBiMzU1OGUtOWNlMi00Mjk1LThkZWYtN2ZjZjBjZjI3Y2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwG/lTOVKv6CWLrpzmBPTHG8e5AhO4QhMJ+1 PY1xs9bMFTvY2s9mGycIIpMzTc9UHLwgt9IQZ9n5wOTpu5ZXzHKyoMs3Rpf/bW5C 59Iqu74lQPfsi8UrQVl9y4gNCKseTkPgFm7jPS9M+DVOgg53MrerGiZxEabTsfUP Gwjl1PZvywcOKpiuPEWoohSt6YNOQPo4RdJ6mbqiVFSWGMPMpBfcrCM/rQX/f6ij jMOTECDHCBsxOC5c8rmDn7l6unf677nGonQCSOdFbtWw4e94xLHHbzsvrjjRk4pz PkHWB51js3NOynztbLgCEI1egH9Zzurtvs7gCllcJytCZyDEYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvkcAl0xDrZ4/Y32f7isD4iYj2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTdhNjQ1ZDgtOTMwMC0z M2EwLTk4NGEtNDMwNTZhNWY2YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSUh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKTWSMZFYr5VoBAQrmdqAUKkEJko4TFBsVsrAU/Hng9/G3zBQqHLSEw Wdpie5djNLYWcCswB0w/Mbrs9JaV81eeMmyeFsEntdE6d2dGJ9oj2RUXUm78mLZk TXTj1fg6Hzfhx11qs/EAJHZHSbqGidqPo9Kg3dDV+PsuB02CTYG4ureCy18EpdMJ OXA9a/2xSvxC+Ilpu42GnAaRdBaiwqCS1mTWEy2BHw4Gdm1+uMbGS61cMHuSEHhJ I5gKTpowqHSOifYAAyaUri0L+uaFPAHc62MoqrjHej35u/SxnkopBx9ScDJqHvgh vAp8Qql+JViCj49/jb1o6chOVGkVC04= -----END CERTIFICATE-----Generated at Sun Mar 1 19:11:11 2026 by rpki-client