$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/871a902e-201e-3415-8ae0-fdcf8a1e80f0.roa File: 871a902e-201e-3415-8ae0-fdcf8a1e80f0.roa (raw, json) Hash identifier: kxrpRkrELxoKfTx9s8KUMhrk34U7sbxMfrnaav0gsAI= Subject key identifier: 57:D7:77:B9:7C:BD:C4:F3:E7:35:E0:A0:0C:86:8C:46:D1:5F:78:10 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5A3EBA00E6387DFC123128 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/871a902e-201e-3415-8ae0-fdcf8a1e80f0.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.199.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:3e:ba:00:e6:38:7d:fc:12:31:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=92ba68cd-9513-49be-a90c-1d088cd2dfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:87:88:40:af:9a:1c:d4:59:3f:1c:9d:eb:62: e9:ec:ea:5d:76:8c:cb:19:ab:11:2f:e7:5d:c3:ca: 35:74:77:ff:86:76:5c:97:23:0e:1e:80:ce:cd:16: b3:65:c9:c1:28:f7:98:a0:a7:66:1d:dd:f3:84:75: 8f:af:7b:24:08:a8:b3:b2:9d:b5:9e:8b:70:4a:30: 44:ed:e8:ff:0c:4d:cd:de:bc:71:4f:d0:d2:1d:07: e6:fc:1d:33:63:29:c3:fa:88:ca:df:39:60:9a:04: 1a:b7:97:cc:ef:0d:0f:ef:b2:9d:70:da:38:5c:69: 1e:d8:3c:f9:1e:97:c1:b0:30:c1:b6:21:74:00:fc: 8e:4a:ec:24:c7:63:f2:e7:f9:be:03:65:70:37:b4: f5:43:99:6d:21:38:11:f9:8b:08:a9:88:96:0d:02: 98:47:14:70:2c:d6:3d:b9:22:95:42:2f:23:ef:3f: 9d:9b:ba:88:4d:9a:56:7c:fb:2e:a1:fe:31:e5:6d: 4b:21:48:57:ab:db:1d:63:82:9a:a3:ae:0b:70:50: 18:fc:b4:ff:5e:23:cf:b9:93:4e:9e:0d:7b:65:41: 1c:ca:54:24:84:a3:4d:8b:02:30:78:98:63:c4:fd: de:51:80:2f:44:7e:d5:83:c7:7d:63:ec:ba:fd:11: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D7:77:B9:7C:BD:C4:F3:E7:35:E0:A0:0C:86:8C:46:D1:5F:78:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/871a902e-201e-3415-8ae0-fdcf8a1e80f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.199.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:77:92:e2:66:a6:96:d3:06:28:c8:73:5e:db:64:0f:a8:8f: 83:01:9c:03:80:ef:d9:66:35:34:5c:bc:13:e5:90:00:da:82: c7:e9:d1:35:73:1c:77:d8:2b:1e:c3:80:42:f5:d9:e4:2d:64: 95:69:2e:09:cd:de:71:86:68:90:32:72:d2:d8:9d:7c:7a:88: 79:89:0c:2b:2d:04:e1:74:63:0a:15:00:b7:cc:80:4c:30:2f: 32:6e:52:a8:86:1a:1e:19:42:37:8f:73:7b:76:02:6a:bc:34: 76:c4:91:0e:9a:f8:af:70:e6:20:a0:c5:2c:7b:c0:c0:b4:e2: e5:09:9e:6e:39:3b:2b:62:ba:04:51:78:76:90:e3:ab:b4:91: cc:33:4c:5a:c6:20:1a:c2:56:24:51:a6:c2:b9:3b:fc:05:47: 06:4e:e5:c2:03:f5:47:20:de:de:d9:58:84:ed:df:ce:53:5f: 68:fb:a9:c5:ed:92:c7:cd:38:60:77:df:54:24:61:de:dd:a3: 74:73:28:bb:30:a2:01:37:98:00:7b:70:d8:85:31:09:10:6e: da:8a:56:cb:c1:b4:b0:4d:a0:fb:fc:82:da:ca:c5:01:40:65: fc:2b:37:9a:55:ec:53:13:c9:da:66:eb:71:b8:1b:23:76:4d: 49:c7:cd:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWj66AOY4ffwSMSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTJiYTY4Y2QtOTUxMy00OWJlLWE5MGMtMWQwODhjZDJkZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIeIQK+aHNRZPxyd62Lp7OpddozLGasRL+dd w8o1dHf/hnZclyMOHoDOzRazZcnBKPeYoKdmHd3zhHWPr3skCKizsp21notwSjBE 7ej/DE3N3rxxT9DSHQfm/B0zYynD+ojK3zlgmgQat5fM7w0P77KdcNo4XGke2Dz5 HpfBsDDBtiF0APyOSuwkx2Py5/m+A2VwN7T1Q5ltITgR+YsIqYiWDQKYRxRwLNY9 uSKVQi8j7z+dm7qITZpWfPsuof4x5W1LIUhXq9sdY4Kao64LcFAY/LT/XiPPuZNO ng17ZUEcylQkhKNNiwIweJhjxP3eUYAvRH7Vg8d9Y+y6/RFaiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfXd7l8vcTz5zXgoAyGjEbRX3gQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODcxYTkwMmUtMjAxZS0z NDE1LThhZTAtZmRjZjhhMWU4MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDScdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ93kuJmppbTBijIc17bZA+oj4MBnAOA79lmNTRcvBPlkADagsfp0TVz HHfYKx7DgEL12eQtZJVpLgnN3nGGaJAyctLYnXx6iHmJDCstBOF0YwoVALfMgEww LzJuUqiGGh4ZQjePc3t2Amq8NHbEkQ6a+K9w5iCgxSx7wMC04uUJnm45OytiugRR eHaQ46u0kcwzTFrGIBrCViRRpsK5O/wFRwZO5cID9Ucg3t7ZWITt385TX2j7qcXt ksfNOGB331QkYd7do3RzKLswogE3mAB7cNiFMQkQbtqKVsvBtLBNoPv8gtrKxQFA ZfwrN5pV7FMTydpm63G4GyN2TUnHzQo= -----END CERTIFICATE-----Generated at Sun Mar 1 18:30:41 2026 by rpki-client