$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/703c8b87-205b-3236-aa05-5e8d6092477a.roa File: 703c8b87-205b-3236-aa05-5e8d6092477a.roa (raw, json) Hash identifier: Gec/kBKcIk72RjY+ZR3t3YKcmPRJw5ajDh0WqGXrBxA= Subject key identifier: EC:7A:92:F2:C1:8C:0E:6E:88:E3:3D:C7:0F:F4:7F:0B:95:2D:B8:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58E2637EE091EB2FEA1400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/703c8b87-205b-3236-aa05-5e8d6092477a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.223.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:e2:63:7e:e0:91:eb:2f:ea:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=9d623cfe-aeea-4eb2-87b1-6008a93cb79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f8:6f:4a:7f:c1:24:3d:28:f1:b7:c4:be:10: 46:29:c1:17:53:39:ca:89:62:30:1f:7f:a6:16:43: cc:d6:ef:33:d8:f3:23:e1:ca:60:a3:86:5c:fe:0f: e0:a9:37:30:6c:db:13:1e:67:6c:e5:c6:3c:e7:3c: e8:91:ea:14:ae:b8:fc:b0:26:72:1e:6a:14:4d:ca: 54:f0:2e:a1:e6:bf:a9:e1:8b:ee:65:0d:0e:1c:26: d3:80:e9:d3:c7:e7:44:b2:c2:32:0d:c8:80:bf:e4: 13:fa:0a:96:70:5a:17:65:9b:1f:67:16:e1:44:fd: 63:ff:10:2a:f9:d7:5c:af:a3:e5:df:ed:a3:ca:73: 1b:ee:1a:27:09:53:09:be:c8:a7:0f:45:15:e5:48: 79:57:79:65:4c:70:1c:39:9e:cb:ee:c9:48:73:67: 38:c3:db:07:7f:a9:a8:8c:73:47:e0:f3:02:44:bd: 17:c5:56:76:3d:74:ae:c3:39:cb:4d:ca:36:72:d0: af:e8:b7:31:c9:9b:8d:8b:be:c6:9d:d9:18:de:c3: b7:8f:54:5f:4f:32:06:b4:8e:b7:19:90:9c:9f:1f: f8:fa:77:b1:50:57:97:b8:00:3a:a2:6e:a5:61:a0: 2f:16:90:51:8a:7e:70:fc:9b:46:f6:77:da:6b:3c: 66:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7A:92:F2:C1:8C:0E:6E:88:E3:3D:C7:0F:F4:7F:0B:95:2D:B8:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/703c8b87-205b-3236-aa05-5e8d6092477a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:13:93:fd:5b:80:67:da:71:a3:6f:06:53:f3:b5:c8:34:37: 78:ee:ef:56:3c:0c:bd:03:df:5a:ae:1b:e3:99:af:bb:e7:64: 61:cb:45:a9:66:8e:94:c0:db:8a:49:19:55:b2:bd:8e:08:62: 22:d2:1b:b7:d1:5a:2e:61:77:2b:a2:15:3a:83:d3:1d:cf:f1: f6:cc:cc:da:0a:5a:db:f2:57:1b:99:fd:f4:2f:f9:59:67:31: 35:77:29:e5:6a:ba:ea:ba:a5:51:66:64:3d:48:a8:fc:62:ec: 94:45:e2:c6:06:b2:64:c3:8f:3d:37:f1:a0:43:5e:ab:a7:d9: 4b:5d:26:dd:63:b2:bb:df:19:24:7d:e8:2b:58:93:43:4e:d0: 3c:e3:48:d9:99:b9:1b:fa:9a:fd:f8:66:8e:83:0c:12:63:1b: b4:60:21:5e:11:97:79:09:c5:0e:b6:01:e9:6e:85:c1:a4:3c: a9:bb:d4:58:82:29:84:f1:d6:f1:30:52:ae:e5:e1:b2:92:df: 3b:76:19:40:63:19:b2:ad:ee:c3:f0:6f:ec:15:26:e4:ad:8a: c0:ea:05:ab:b6:58:12:7a:01:55:27:f6:c1:57:9c:5d:60:01: c4:af:91:05:2b:f4:ac:87:82:66:b0:d9:d1:95:e9:b9:c9:4c: 4e:17:95:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWOJjfuCR6y/qFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWQ2MjNjZmUtYWVlYS00ZWIyLTg3YjEtNjAwOGE5M2NiNzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vhvSn/BJD0o8bfEvhBGKcEXUznKiWIwH3+m FkPM1u8z2PMj4cpgo4Zc/g/gqTcwbNsTHmds5cY85zzokeoUrrj8sCZyHmoUTcpU 8C6h5r+p4YvuZQ0OHCbTgOnTx+dEssIyDciAv+QT+gqWcFoXZZsfZxbhRP1j/xAq +ddcr6Pl3+2jynMb7honCVMJvsinD0UV5Uh5V3llTHAcOZ7L7slIc2c4w9sHf6mo jHNH4PMCRL0XxVZ2PXSuwznLTco2ctCv6LcxyZuNi77GndkY3sO3j1RfTzIGtI63 GZCcnx/4+nexUFeXuAA6om6lYaAvFpBRin5w/JtG9nfaazxmxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOx6kvLBjA5uiOM9xw/0fwuVLbgxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzAzYzhiODctMjA1Yi0z MjM2LWFhMDUtNWU4ZDYwOTI0NzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSd+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgTk/1bgGfacaNvBlPztcg0N3ju71Y8DL0D31quG+OZr7vnZGHLRalm jpTA24pJGVWyvY4IYiLSG7fRWi5hdyuiFTqD0x3P8fbMzNoKWtvyVxuZ/fQv+Vln MTV3KeVquuq6pVFmZD1IqPxi7JRF4sYGsmTDjz038aBDXqun2UtdJt1jsrvfGSR9 6CtYk0NO0DzjSNmZuRv6mv34Zo6DDBJjG7RgIV4Rl3kJxQ62AeluhcGkPKm71FiC KYTx1vEwUq7l4bKS3zt2GUBjGbKt7sPwb+wVJuStisDqBau2WBJ6AVUn9sFXnF1g AcSvkQUr9KyHgmaw2dGV6bnJTE4XlY8= -----END CERTIFICATE-----Generated at Sun Mar 1 18:54:11 2026 by rpki-client