$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd7811a-8989-3b72-b8af-4e63373e3aa3.roa File: bfd7811a-8989-3b72-b8af-4e63373e3aa3.roa (raw, json) Hash identifier: fHSyGs64C7fljhKenDSjGDvDgLmia7KChkzY1O9KmxE= Subject key identifier: A7:EF:5B:E7:16:3A:67:03:E3:A8:2C:AC:28:A7:98:83:47:55:4F:DB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BD5F127F136266F6D7E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd7811a-8989-3b72-b8af-4e63373e3aa3.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.102.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:d5:f1:27:f1:36:26:6f:6d:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=25140f1c-1b5a-4c19-97fd-c7c6c0f04809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:24:86:79:a3:ff:f7:93:0d:b3:89:8d:ba:8f: 95:ee:79:7d:1d:cb:72:c6:ff:08:22:67:b3:42:07: e1:e7:c5:bb:cc:7c:0d:f0:c0:7d:17:d7:c2:69:16: b1:b3:d0:e6:b0:8d:c5:c1:39:5a:93:65:06:10:10: 6b:2a:6b:91:ff:2d:b4:b7:5e:30:80:e7:0a:f1:ca: f0:32:59:e3:5e:36:9c:ec:51:cb:54:9f:32:ae:51: 8b:a3:53:fa:66:19:0d:62:d9:50:aa:52:52:a9:a4: 90:00:01:aa:e1:63:86:c9:a9:c4:a8:c7:57:92:8e: 21:80:96:24:29:cc:ed:30:f0:52:f4:1d:af:39:85: 4f:06:00:95:24:ec:27:2b:f6:e0:0a:9d:06:e6:e7: 03:0a:d0:5b:9f:cf:48:86:04:72:50:12:f0:8d:9f: c9:a0:03:ec:2e:2b:0b:76:c4:d9:67:0c:93:68:0d: a9:20:2e:25:e7:62:17:e9:ad:f2:b1:07:a8:82:ea: 75:21:00:53:d9:36:db:d3:00:a7:de:0c:36:2c:d1: 3c:5a:da:2c:07:b8:9e:0d:70:2a:44:ef:68:01:7c: 04:13:ab:35:f9:30:70:c5:67:1a:3c:25:09:4c:3e: 04:b0:f2:7c:9b:cf:4d:28:16:c2:a9:f6:76:40:f0: 14:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EF:5B:E7:16:3A:67:03:E3:A8:2C:AC:28:A7:98:83:47:55:4F:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd7811a-8989-3b72-b8af-4e63373e3aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.102.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:82:22:13:73:27:45:8e:0a:c7:98:3f:70:8a:2d:73:4e:9b: f4:d0:b6:d1:83:1c:b5:5f:bb:17:79:7a:b6:7f:e1:d9:29:7c: 40:89:7d:ba:f2:68:75:f4:c5:96:8b:bb:3e:7e:9a:08:b4:66: 00:7c:ad:e2:ab:62:d5:3d:e9:21:34:41:13:44:9a:38:19:2c: 0b:21:17:3f:aa:93:5f:ef:5e:c3:03:43:3e:ea:38:c2:20:ef: c4:4f:66:af:77:1e:9c:0e:c8:c6:b6:97:27:7e:78:9b:a6:f8: 54:d0:77:99:a3:75:f9:00:5e:04:58:2f:25:7d:86:01:7c:4b: 13:e2:2d:7e:76:d3:32:a3:ab:ef:54:aa:0b:88:d9:6b:05:23: 6b:30:0f:02:fc:fc:69:36:cb:82:c4:0a:84:b5:3f:45:59:2f: 76:dd:61:d3:5f:2f:61:4d:ed:e9:a7:a2:4d:b6:84:f2:55:25: a9:6a:df:f3:f8:6d:8f:3d:47:c5:69:65:80:82:0e:df:be:39: 96:7c:45:74:af:e4:1a:8f:21:31:ef:a4:e7:b3:ad:c0:35:7e: 99:06:7d:b4:c6:bd:21:35:39:b6:2f:93:c4:de:b3:67:84:ee: 55:2d:d2:82:43:2c:7e:67:5c:8a:00:d1:f2:a2:df:7f:e4:8f: c7:e3:df:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW9XxJ/E2Jm9tfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjUxNDBmMWMtMWI1YS00YzE5LTk3ZmQtYzdjNmMwZjA0ODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiSGeaP/95MNs4mNuo+V7nl9Hctyxv8IImez Qgfh58W7zHwN8MB9F9fCaRaxs9DmsI3FwTlak2UGEBBrKmuR/y20t14wgOcK8crw MlnjXjac7FHLVJ8yrlGLo1P6ZhkNYtlQqlJSqaSQAAGq4WOGyanEqMdXko4hgJYk KcztMPBS9B2vOYVPBgCVJOwnK/bgCp0G5ucDCtBbn89IhgRyUBLwjZ/JoAPsLisL dsTZZwyTaA2pIC4l52IX6a3ysQeogup1IQBT2Tbb0wCn3gw2LNE8WtosB7ieDXAq RO9oAXwEE6s1+TBwxWcaPCUJTD4EsPJ8m89NKBbCqfZ2QPAU0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfvW+cWOmcD46gsrCinmINHVU/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZkNzgxMWEtODk4OS0z YjcyLWI4YWYtNGU2MzM3M2UzYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSWaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOCIhNzJ0WOCseYP3CKLXNOm/TQttGDHLVfuxd5erZ/4dkpfECJfbry aHX0xZaLuz5+mgi0ZgB8reKrYtU96SE0QRNEmjgZLAshFz+qk1/vXsMDQz7qOMIg 78RPZq93HpwOyMa2lyd+eJum+FTQd5mjdfkAXgRYLyV9hgF8SxPiLX520zKjq+9U qguI2WsFI2swDwL8/Gk2y4LECoS1P0VZL3bdYdNfL2FN7emnok22hPJVJalq3/P4 bY89R8VpZYCCDt++OZZ8RXSv5BqPITHvpOezrcA1fpkGfbTGvSE1ObYvk8Tes2eE 7lUt0oJDLH5nXIoA0fKi33/kj8fj350= -----END CERTIFICATE-----Generated at Sun Mar 1 18:28:56 2026 by rpki-client