$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae86bd6-f8f5-343a-be69-92eb16f253f9.roa File: bae86bd6-f8f5-343a-be69-92eb16f253f9.roa (raw, json) Hash identifier: h4t99KU4lHbAdjhf4C1oVEC78f+hpYZrrl280jPs6uU= Subject key identifier: 71:34:E6:D6:68:CA:FD:F7:F9:AD:87:02:B1:9C:01:91:B7:48:A0:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB60E8E632AD353C0BE060 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae86bd6-f8f5-343a-be69-92eb16f253f9.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 73.77.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:60:e8:e6:32:ad:35:3c:0b:e0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b0e1c906-0d65-4f22-92fc-c428808d6915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:14:38:b8:6c:99:2a:0d:7d:20:7f:9b:da:00: 20:32:85:24:66:c7:2b:a0:51:b7:51:92:aa:7a:47: 43:40:e9:69:8e:bf:3a:52:f4:a2:b1:69:f0:af:32: b5:0a:24:49:99:16:9a:8e:ab:34:ae:dd:10:46:68: f2:fb:10:46:a7:47:57:7c:6a:2d:23:2d:86:c3:5d: c5:e6:6e:50:ca:fd:83:7a:0d:fa:f9:1b:2d:e9:51: 4b:a1:cc:01:52:88:6c:99:fa:9b:4d:57:8f:f5:5b: c7:03:3a:3c:a9:33:1a:a0:41:95:22:e8:b4:34:f1: 89:8f:d3:eb:df:c3:c0:a2:c8:b2:23:ec:34:61:dc: 08:ce:e1:21:a7:70:2c:89:5c:7f:f7:f7:b8:b3:95: fd:62:25:98:b1:41:ec:10:84:69:4f:bd:f4:a9:b5: 5b:b4:0b:ba:b1:c7:9e:0d:21:7a:27:87:1a:3f:e3: 23:0f:04:2b:b9:b8:ba:72:ac:63:7a:2e:ab:d2:3d: b5:10:5f:31:3c:8d:14:5f:fb:8c:2f:25:c9:90:9d: ef:84:c5:b3:25:08:63:ff:49:ba:4c:33:00:33:7a: 69:8d:67:05:78:67:b5:b9:a6:22:ad:94:f6:56:39: 3f:61:78:5d:bc:1a:15:f1:5e:bd:e6:a6:03:1f:e3: 96:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:34:E6:D6:68:CA:FD:F7:F9:AD:87:02:B1:9C:01:91:B7:48:A0:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae86bd6-f8f5-343a-be69-92eb16f253f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.77.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:71:64:43:d8:41:39:95:c6:35:d8:5a:9e:52:01:7a:39:53: 84:1d:6c:f9:0b:5e:38:2b:7b:d6:0e:24:6c:58:06:ed:a4:cc: 90:84:a3:a1:b7:de:2c:70:a6:c1:3d:b1:c3:c1:5b:14:46:b1: 35:bc:95:f3:62:d1:00:25:8a:bd:76:16:b5:c8:75:b5:aa:f4: 21:65:37:3f:da:d4:61:7c:cc:40:ef:e6:1b:10:85:f3:77:30: 4a:78:1e:02:14:9c:6a:66:79:fb:d0:8b:ba:c7:9a:b3:ac:15: e1:c5:4c:b6:77:95:e5:59:09:74:29:9b:6f:27:05:73:6b:dc: d4:e8:d7:9a:90:26:0a:88:3b:a5:17:a1:ba:8d:3c:da:4d:50: 0b:4c:c7:16:1c:5b:67:ac:25:31:a7:02:3a:ee:96:3a:22:e4: 08:59:9f:06:b4:3f:2c:ef:25:92:38:8c:75:f5:0b:b4:d8:04: 5c:28:c1:99:6a:99:d7:f9:55:3e:99:43:dc:4b:a7:09:04:4f: 6a:65:f4:3d:df:49:43:83:69:c8:c4:70:bd:78:59:17:56:8d: f8:ac:23:65:a9:3c:51:6b:e2:fc:98:1a:86:83:6b:59:0a:c5: 33:ea:a3:23:a6:54:e6:d6:25:0b:d6:25:23:14:b7:84:e5:7d: 34:e5:fc:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu2Do5jKtNTwL4GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjBlMWM5MDYtMGQ2NS00ZjIyLTkyZmMtYzQyODgwOGQ2OTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBQ4uGyZKg19IH+b2gAgMoUkZscroFG3UZKq ekdDQOlpjr86UvSisWnwrzK1CiRJmRaajqs0rt0QRmjy+xBGp0dXfGotIy2Gw13F 5m5Qyv2Deg36+Rst6VFLocwBUohsmfqbTVeP9VvHAzo8qTMaoEGVIui0NPGJj9Pr 38PAosiyI+w0YdwIzuEhp3AsiVx/9/e4s5X9YiWYsUHsEIRpT730qbVbtAu6scee DSF6J4caP+MjDwQrubi6cqxjei6r0j21EF8xPI0UX/uMLyXJkJ3vhMWzJQhj/0m6 TDMAM3ppjWcFeGe1uaYirZT2Vjk/YXhdvBoV8V695qYDH+OW9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE05tZoyv33+a2HArGcAZG3SKB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFlODZiZDYtZjhmNS0z NDNhLWJlNjktOTJlYjE2ZjI1M2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSU2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZxZEPYQTmVxjXYWp5SAXo5U4QdbPkLXjgre9YOJGxYBu2kzJCEo6G3 3ixwpsE9scPBWxRGsTW8lfNi0QAlir12FrXIdbWq9CFlNz/a1GF8zEDv5hsQhfN3 MEp4HgIUnGpmefvQi7rHmrOsFeHFTLZ3leVZCXQpm28nBXNr3NTo15qQJgqIO6UX obqNPNpNUAtMxxYcW2esJTGnAjruljoi5AhZnwa0PyzvJZI4jHX1C7TYBFwowZlq mdf5VT6ZQ9xLpwkET2pl9D3fSUODacjEcL14WRdWjfisI2WpPFFr4vyYGoaDa1kK xTPqoyOmVObWJQvWJSMUt4TlfTTl/MQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:00:17 2026 by rpki-client