$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7dce3aa-fe49-3a74-b18f-768dc8128c93.roa File: b7dce3aa-fe49-3a74-b18f-768dc8128c93.roa (raw, json) Hash identifier: LUyUCR/nVAiH1XzbpkYt4S6nhlFoxjRZshob3fnlyLg= Subject key identifier: DF:EB:10:33:EB:2B:C0:63:E9:80:81:5F:C7:C8:89:9E:35:0D:73:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58F125F1E2B3CE923ECD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7dce3aa-fe49-3a74-b18f-768dc8128c93.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.70.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:f1:25:f1:e2:b3:ce:92:3e:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3bdcc13f-1d4a-413b-97ac-5f3a293594d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:59:41:b7:b5:0f:e2:cf:20:70:53:72:ee: 0e:8f:4a:88:56:9a:e1:e4:22:b3:0a:f1:00:b0:e8: 4c:1a:64:14:dc:a4:f9:3e:17:34:bd:0c:ae:5d:d4: 89:fc:33:56:45:90:66:2a:b4:11:6e:7d:a1:fb:20: 14:40:22:8a:90:17:ec:da:5c:84:f6:ee:f9:37:a4: 7e:66:19:82:ec:ca:df:44:cb:c7:7f:37:33:53:6f: e7:88:ce:57:cd:f7:7d:99:31:ed:2f:c2:7b:1a:e1: 8b:bd:3b:e5:ae:68:d5:68:e6:88:6b:5a:43:9a:82: f8:45:25:62:be:03:1e:4a:7f:a1:d3:86:cc:c4:0a: ff:8d:58:66:71:ec:fc:f6:16:1e:da:df:6f:e3:fd: 38:44:80:35:1c:9c:46:24:5e:fe:d1:32:7b:45:b7: 52:17:ab:de:97:de:ed:6f:f9:74:5d:d1:5e:81:6c: 6b:79:60:2c:38:13:a0:7f:d2:74:54:ee:dd:d5:28: ed:b9:bc:9c:ca:aa:13:82:da:bd:1c:6f:7d:3e:d8: 8f:cb:9d:e6:8b:ee:9a:ba:1c:b2:dd:93:5b:d0:35: 26:4b:4d:dc:8a:55:40:db:95:b3:6b:01:ee:ea:b3: 16:b8:0e:47:0b:53:e0:82:5f:0a:85:03:d9:16:ce: 66:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EB:10:33:EB:2B:C0:63:E9:80:81:5F:C7:C8:89:9E:35:0D:73:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7dce3aa-fe49-3a74-b18f-768dc8128c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.70.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:09:1c:82:e9:90:d2:bd:43:33:8a:ea:c1:de:bc:b8:d5:b2: 21:42:cf:9d:1b:a2:cc:41:07:c4:f4:0e:66:18:39:e3:a8:47: 1b:56:1a:b5:4a:a3:f0:0c:18:ea:45:13:04:57:6c:21:24:3c: 90:11:4a:06:75:d1:dd:07:b2:7f:29:29:2c:1f:0c:0c:7f:20: be:84:29:7d:8a:84:9a:be:bd:22:ec:f6:30:cf:cd:b9:b9:bd: f6:2f:02:fd:63:77:e7:79:b4:df:3f:7a:fc:14:07:44:66:fc: 51:42:c6:84:18:c0:27:2d:c1:85:26:c9:90:85:f0:33:6e:c7: 35:b6:f9:7b:73:7d:02:6a:3b:26:57:87:0b:bb:72:56:2a:d2: de:b9:ec:f8:93:ce:6b:83:00:9d:6c:87:a7:74:ed:46:e7:a0: fd:f9:80:74:c2:1d:5b:35:85:0b:64:19:3b:5d:2e:37:3c:4e: 30:27:df:cd:eb:cd:37:ed:bf:08:27:ea:e4:de:5d:3b:7f:ec: 82:22:8f:a6:b6:36:77:da:88:e9:35:ac:72:66:38:37:94:cd: ef:65:28:92:a7:6c:cf:70:89:bd:4d:3d:63:d0:ea:a8:9a:81: 1f:78:2d:d6:4e:d3:e0:0d:35:99:a3:7e:e5:35:bd:4a:34:3c: 8a:6e:14:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWPEl8eKzzpI+zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2JkY2MxM2YtMWQ0YS00MTNiLTk3YWMtNWYzYTI5MzU5NGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW1ZQbe1D+LPIHBTcu4Oj0qIVprh5CKzCvEA sOhMGmQU3KT5Phc0vQyuXdSJ/DNWRZBmKrQRbn2h+yAUQCKKkBfs2lyE9u75N6R+ ZhmC7MrfRMvHfzczU2/niM5Xzfd9mTHtL8J7GuGLvTvlrmjVaOaIa1pDmoL4RSVi vgMeSn+h04bMxAr/jVhmcez89hYe2t9v4/04RIA1HJxGJF7+0TJ7RbdSF6vel97t b/l0XdFegWxreWAsOBOgf9J0VO7d1SjtubycyqoTgtq9HG99PtiPy53mi+6auhyy 3ZNb0DUmS03cilVA25WzawHu6rMWuA5HC1Pggl8KhQPZFs5mnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/rEDPrK8Bj6YCBX8fIiZ41DXPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjdkY2UzYWEtZmU0OS0z YTc0LWIxOGYtNzY4ZGM4MTI4YzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIJHILpkNK9QzOK6sHevLjVsiFCz50bosxBB8T0DmYYOeOoRxtWGrVK o/AMGOpFEwRXbCEkPJARSgZ10d0Hsn8pKSwfDAx/IL6EKX2KhJq+vSLs9jDPzbm5 vfYvAv1jd+d5tN8/evwUB0Rm/FFCxoQYwCctwYUmyZCF8DNuxzW2+XtzfQJqOyZX hwu7clYq0t657PiTzmuDAJ1sh6d07UbnoP35gHTCHVs1hQtkGTtdLjc8TjAn383r zTftvwgn6uTeXTt/7IIij6a2NnfaiOk1rHJmODeUze9lKJKnbM9wib1NPWPQ6qia gR94LdZO0+ANNZmjfuU1vUo0PIpuFAA= -----END CERTIFICATE-----Generated at Sun Mar 1 20:39:25 2026 by rpki-client