$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aae9f05d-de63-33ac-9d06-fb44c6a3a302.roa File: aae9f05d-de63-33ac-9d06-fb44c6a3a302.roa (raw, json) Hash identifier: gSYkmwZAF761C9LwvJ/eVcFqQDD9gh/iwQyEyMrdd4E= Subject key identifier: A4:2E:68:1F:F3:5D:CE:FE:CB:CF:3E:43:BD:DF:BB:25:F2:F9:67:D4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE59282109C53F078740FD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aae9f05d-de63-33ac-9d06-fb44c6a3a302.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 73.3.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:28:21:09:c5:3f:07:87:40:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b87c1aac-d554-40df-adc0-35d545e51b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:71:6d:cc:ca:23:65:a4:6b:2d:a3:6e:35: e1:c8:48:f2:63:27:f4:4f:77:80:68:ce:04:65:0a: 9a:d8:dd:6e:e1:58:16:ae:43:e7:0c:99:a9:f5:ac: 78:54:ac:8a:e8:a2:a3:5a:a4:bc:2e:ac:05:73:d4: c6:0f:07:9e:f3:36:47:5b:e7:0c:69:a1:b1:af:78: f1:ef:9f:12:94:85:af:6d:a4:b6:bc:33:05:5b:0f: 38:b4:7a:11:d4:a1:57:46:10:34:fc:e3:44:0b:e7: f9:84:9f:1a:03:f7:92:7e:2f:c4:0a:67:ff:d5:54: cd:b9:82:19:d1:d1:07:7e:53:d0:ad:cc:a2:9e:0a: f1:e9:df:43:f1:5c:7a:21:15:2a:e5:1d:58:85:ac: 36:ac:7d:81:53:2e:b2:76:5f:22:91:1e:de:ce:ec: 76:8b:b7:a2:37:58:7b:48:ff:97:01:de:95:85:66: ad:7f:2e:dd:33:d5:d4:19:c4:bc:ea:d9:7d:e5:27: 86:ef:01:82:7d:e3:e1:8e:84:28:d8:29:e2:1a:6e: 03:68:3b:a7:ee:da:db:1c:f0:8e:89:76:04:71:ad: 29:6f:8e:ae:88:63:5c:6b:0b:fd:1e:eb:08:1c:9e: 0a:33:a4:f0:75:62:ab:03:2c:04:31:a1:7a:18:da: 11:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2E:68:1F:F3:5D:CE:FE:CB:CF:3E:43:BD:DF:BB:25:F2:F9:67:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aae9f05d-de63-33ac-9d06-fb44c6a3a302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.3.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:57:df:70:12:2b:ba:47:e3:3a:09:dd:b6:4d:4f:d7:e9:36: 8c:9b:a0:fc:95:d1:7d:1f:ab:b5:b3:27:4e:a1:df:dd:a3:b7: aa:49:c1:0d:31:0f:cf:54:76:d7:5a:c3:55:78:a9:74:3f:1e: 97:f6:9c:bc:ec:55:f7:d6:57:a9:5f:3e:21:34:99:aa:62:5d: 52:3e:c2:e6:5e:a7:47:f5:d7:a3:2a:a2:aa:58:1d:b0:01:0e: ba:8b:ac:93:44:f0:3a:15:ce:0d:17:37:2b:91:d7:c3:d0:0e: d8:08:f3:2d:39:a4:a9:a8:97:22:b6:2e:48:13:6c:23:bc:11: 81:4d:43:56:68:28:c5:92:cc:9d:31:21:93:f1:ca:1d:6f:51: ac:c7:2e:f7:28:7f:f4:5f:ad:26:4f:49:3b:86:3c:57:16:ee: 1b:c5:23:4a:81:0d:ae:89:7f:ec:14:86:d5:9c:fc:99:08:cc: 6a:0f:57:ed:3c:1f:c5:32:3c:23:28:05:bf:e8:02:0e:0e:a6: 79:4b:d7:2b:67:94:43:ae:69:50:d6:a8:27:a2:00:19:cf:ef: 1a:3d:97:ae:da:be:dd:38:b6:34:4b:0d:df:5a:23:a4:b2:8a: c8:af:f0:f8:54:80:3a:bb:6e:59:b4:67:41:31:05:67:08:45: 71:c9:9b:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWSghCcU/B4dA/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Yjg3YzFhYWMtZDU1NC00MGRmLWFkYzAtMzVkNTQ1ZTUxYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR1xbczKI2Wkay2jbjXhyEjyYyf0T3eAaM4E ZQqa2N1u4VgWrkPnDJmp9ax4VKyK6KKjWqS8LqwFc9TGDwee8zZHW+cMaaGxr3jx 758SlIWvbaS2vDMFWw84tHoR1KFXRhA0/ONEC+f5hJ8aA/eSfi/ECmf/1VTNuYIZ 0dEHflPQrcyingrx6d9D8Vx6IRUq5R1Yhaw2rH2BUy6ydl8ikR7ezux2i7eiN1h7 SP+XAd6VhWatfy7dM9XUGcS86tl95SeG7wGCfePhjoQo2CniGm4DaDun7trbHPCO iXYEca0pb46uiGNcawv9HusIHJ4KM6TwdWKrAywEMaF6GNoRVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQuaB/zXc7+y88+Q73fuyXy+WfUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFlOWYwNWQtZGU2My0z M2FjLTlkMDYtZmI0NGM2YTNhMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQNKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBX33ASK7pH4zoJ3bZNT9fpNoyboPyV0X0fq7WzJ06h392jt6pJwQ0x D89Udtdaw1V4qXQ/Hpf2nLzsVffWV6lfPiE0mapiXVI+wuZep0f116MqoqpYHbAB DrqLrJNE8DoVzg0XNyuR18PQDtgI8y05pKmolyK2LkgTbCO8EYFNQ1ZoKMWSzJ0x IZPxyh1vUazHLvcof/RfrSZPSTuGPFcW7hvFI0qBDa6Jf+wUhtWc/JkIzGoPV+08 H8UyPCMoBb/oAg4OpnlL1ytnlEOuaVDWqCeiABnP7xo9l67avt04tjRLDd9aI6Sy isiv8PhUgDq7blm0Z0ExBWcIRXHJmzs= -----END CERTIFICATE-----Generated at Sun Mar 1 20:41:05 2026 by rpki-client