$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66af2ae6-e32b-3fa0-8397-5f2b2ce67b3e.roa File: 66af2ae6-e32b-3fa0-8397-5f2b2ce67b3e.roa (raw, json) Hash identifier: hXCu57Ovho02gZ534IYU85K5i00pAPnc2sl4vo3Oztc= Subject key identifier: 4C:21:96:CE:58:65:B8:D8:00:D3:95:9E:0F:71:E1:93:FD:18:F9:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58F39D731BDFCC86CC07EE Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66af2ae6-e32b-3fa0-8397-5f2b2ce67b3e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.71.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:f3:9d:73:1b:df:cc:86:cc:07:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=51a49321-a36a-466c-ad8a-56d44fbb7ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1c:e0:bd:4f:8f:e4:36:f6:2b:fc:32:5f:bb: ee:af:47:36:d8:66:e6:9f:65:9f:ef:23:7a:d8:e4: f9:dc:a9:93:24:73:ab:18:a9:57:8b:11:52:ba:bc: ec:ad:ef:7d:63:a0:29:b9:5f:4f:11:e0:55:e4:70: bf:8c:26:7c:c1:7d:65:22:04:be:65:d4:1a:ca:89: 69:e3:36:40:b8:a8:17:94:27:71:f7:ab:5e:6e:bf: fc:f0:24:7b:5d:68:d3:4e:50:a4:44:ca:9e:ba:ee: 09:da:85:29:55:6f:3d:22:ea:56:29:20:40:e1:35: 4a:66:30:99:e9:99:4d:8d:e1:be:b2:a7:07:ad:05: 40:d8:cb:b7:ff:98:ab:09:8d:a9:b2:dd:a7:b5:b9: 2e:8d:99:dc:87:40:24:71:7d:04:4d:04:2c:af:f5: 34:65:60:17:ef:b2:f1:16:4f:81:43:70:16:f2:f9: e6:9b:1f:19:ed:2f:f7:c3:6e:b7:ef:c5:8a:2c:4c: 34:fb:96:b6:85:1a:1f:ee:db:a2:9b:56:a1:58:42: b5:22:81:20:43:e1:88:38:79:8b:f0:eb:dc:a2:f7: 3e:b5:3d:40:e0:c9:6e:83:c2:82:42:af:2d:68:2d: 5c:48:cf:83:2a:03:e9:d0:9c:b7:b5:bb:2b:e6:f7: 9d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:21:96:CE:58:65:B8:D8:00:D3:95:9E:0F:71:E1:93:FD:18:F9:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66af2ae6-e32b-3fa0-8397-5f2b2ce67b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.71.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:aa:1b:10:20:79:09:bc:68:22:35:92:0e:5c:6a:a6:c9:a5: 21:f8:6d:4d:25:8b:61:24:75:a1:80:bf:65:e3:e4:39:00:14: 6f:c8:41:02:b1:f2:74:43:f6:b2:bb:17:e0:36:46:57:75:08: 77:9f:a4:dc:84:d2:f9:75:76:7b:53:16:01:d2:81:27:12:f5: 96:4d:26:93:7f:eb:1e:49:ee:58:2d:d6:15:94:82:b2:c4:cc: 69:81:e8:28:93:ef:e0:59:31:c5:3c:3a:0a:99:8c:aa:55:62: 3b:27:a0:38:38:b6:af:6d:30:83:0b:e9:39:ee:76:47:ce:50: e8:b9:7b:1d:bf:95:d6:c1:ef:16:b5:07:95:d4:d6:fb:a5:67: 5c:03:f1:82:0e:6c:d5:e5:57:8e:b1:d5:99:99:34:fc:2b:09: 48:a6:d6:34:3a:7f:b6:0e:d1:cb:4c:e9:d6:f6:4f:ae:ef:a8: 95:99:eb:68:87:45:62:ce:ea:ac:f8:1a:dd:07:8c:7d:7c:60: 17:54:a2:e9:92:e2:82:43:7d:b7:84:26:af:8e:e4:53:ad:5c: bc:c6:80:c8:5a:29:47:22:ed:0f:f6:3f:2d:25:15:d5:ad:3a: d2:91:b5:1b:1b:d7:a2:c7:64:e9:3e:3e:0f:d4:d0:81:bf:fb: e1:bc:cb:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWPOdcxvfzIbMB+4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTFhNDkzMjEtYTM2YS00NjZjLWFkOGEtNTZkNDRmYmI3Y2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBzgvU+P5Db2K/wyX7vur0c22Gbmn2Wf7yN6 2OT53KmTJHOrGKlXixFSurzsre99Y6ApuV9PEeBV5HC/jCZ8wX1lIgS+ZdQayolp 4zZAuKgXlCdx96tebr/88CR7XWjTTlCkRMqeuu4J2oUpVW89IupWKSBA4TVKZjCZ 6ZlNjeG+sqcHrQVA2Mu3/5irCY2pst2ntbkujZnch0AkcX0ETQQsr/U0ZWAX77Lx Fk+BQ3AW8vnmmx8Z7S/3w26378WKLEw0+5a2hRof7tuim1ahWEK1IoEgQ+GIOHmL 8Ovcovc+tT1A4Mlug8KCQq8taC1cSM+DKgPp0Jy3tbsr5ved9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwhls5YZbjYANOVng9x4ZP9GPkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjZhZjJhZTYtZTMyYi0z ZmEwLTgzOTctNWYyYjJjZTY3YjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUemMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6qGxAgeQm8aCI1kg5caqbJpSH4bU0li2EkdaGAv2Xj5DkAFG/IQQKx 8nRD9rK7F+A2Rld1CHefpNyE0vl1dntTFgHSgScS9ZZNJpN/6x5J7lgt1hWUgrLE zGmB6CiT7+BZMcU8OgqZjKpVYjsnoDg4tq9tMIML6TnudkfOUOi5ex2/ldbB7xa1 B5XU1vulZ1wD8YIObNXlV46x1ZmZNPwrCUim1jQ6f7YO0ctM6db2T67vqJWZ62iH RWLO6qz4Gt0HjH18YBdUoumS4oJDfbeEJq+O5FOtXLzGgMhaKUci7Q/2Py0lFdWt OtKRtRsb16LHZOk+Pg/U0IG/++G8y5A= -----END CERTIFICATE-----Generated at Sun Mar 1 23:44:41 2026 by rpki-client