$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c71c5529-89b7-3eec-862e-6b3a7356e423.roa File: c71c5529-89b7-3eec-862e-6b3a7356e423.roa (raw, json) Hash identifier: NcKN61Ej7XK0nbD+ZxWhbqWO3c94mNA/42XkoijtEOc= Subject key identifier: A4:5D:46:E3:56:23:93:13:0E:8C:E5:03:D8:8F:B3:18:E1:3C:F7:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BEA22A6AFC41A360E2E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c71c5529-89b7-3eec-862e-6b3a7356e423.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.120.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:ea:22:a6:af:c4:1a:36:0e:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=34d791c7-5b39-47b5-a16f-0e16f5282773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2e:f3:97:5a:19:f1:d1:b0:32:5e:b6:d9:45: 3d:9e:65:f5:a7:26:a4:91:4b:83:f3:ae:a6:2c:d4: 8c:ec:75:3a:e6:4f:27:ef:8f:59:e8:17:dd:30:08: 07:91:d5:b4:2f:26:85:1f:d2:44:46:45:b9:c3:28: 64:40:cb:12:29:cc:c3:d5:5f:2b:f3:c2:1a:6a:12: f0:dd:9e:a9:bd:76:62:3b:4c:2a:49:cc:38:b9:3e: 90:6d:1a:4e:92:f2:0c:4a:5a:21:df:1b:d1:74:15: d1:7f:60:0c:c3:3a:a1:94:8e:14:5e:c5:bc:d7:12: a3:9a:cd:00:bd:f9:66:b6:09:8c:fd:d5:f9:62:41: 3c:69:51:d9:01:6c:f1:59:23:e2:f7:3a:49:e6:75: f3:b7:39:5b:80:8b:6e:87:eb:32:b6:f1:75:8c:0d: c4:c3:2c:b3:b5:3f:20:e8:2e:b9:a5:60:8d:20:8e: 80:0f:27:1b:73:a7:61:2a:46:ce:74:b0:5f:df:e7: 7b:7b:3c:55:2a:fb:a0:10:ec:14:ae:59:1b:7b:7a: 3d:07:18:38:5b:37:90:ed:53:30:ed:32:53:d9:8c: 33:40:94:7d:b9:8d:43:8a:9f:e0:8f:e9:7e:7c:5f: c3:6e:02:98:6e:36:6c:a6:99:af:a0:ca:7a:3c:a7: 60:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5D:46:E3:56:23:93:13:0E:8C:E5:03:D8:8F:B3:18:E1:3C:F7:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c71c5529-89b7-3eec-862e-6b3a7356e423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.120.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:80:6e:74:a7:d1:3a:fd:f6:18:c3:79:55:cc:d6:34:1c:8a: 25:c6:bd:5c:9a:2d:88:0b:a0:41:f5:7b:a7:b7:53:b8:ac:a0: cd:63:30:61:14:77:1f:4d:89:ca:91:46:09:1d:86:6f:b6:9f: c4:47:c0:d0:44:21:d4:4c:29:39:d7:a1:51:25:69:16:df:07: 73:9e:ca:a9:32:a8:60:08:c0:4a:7a:ae:e1:04:28:fe:e5:2b: 75:93:a9:93:98:ba:77:3f:1c:33:d9:0b:c5:69:63:74:5f:63: 47:78:8f:bf:2f:4d:d4:4f:ac:69:30:61:87:07:7c:e2:40:32: 09:bf:b9:19:4d:ba:06:dd:09:42:11:aa:0f:df:e8:2d:a9:93: 31:49:46:6d:ee:6e:7c:36:78:cd:e0:f5:20:20:75:13:7b:34: 89:bd:da:4c:e6:12:ec:4b:ad:35:ad:56:d1:e2:f7:3c:3a:d8: 2a:b5:4f:83:aa:35:2f:d0:c4:bf:86:5a:62:d7:11:b4:40:60: 58:ad:8c:99:62:fd:ee:a9:b5:60:1a:6a:88:01:df:77:ed:48: 4a:12:8d:d8:9e:2b:4e:de:26:d9:ef:88:16:a8:08:3f:c3:fd: d2:77:7f:c9:a0:d7:f9:39:92:05:f4:83:05:f5:94:06:c7:00: 27:bc:f1:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW+oipq/EGjYOLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MzRkNzkxYzctNWIzOS00N2I1LWExNmYtMGUxNmY1MjgyNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy7zl1oZ8dGwMl622UU9nmX1pyakkUuD866m LNSM7HU65k8n749Z6BfdMAgHkdW0LyaFH9JERkW5wyhkQMsSKczD1V8r88IaahLw 3Z6pvXZiO0wqScw4uT6QbRpOkvIMSloh3xvRdBXRf2AMwzqhlI4UXsW81xKjms0A vflmtgmM/dX5YkE8aVHZAWzxWSPi9zpJ5nXztzlbgItuh+sytvF1jA3EwyyztT8g 6C65pWCNII6ADycbc6dhKkbOdLBf3+d7ezxVKvugEOwUrlkbe3o9Bxg4WzeQ7VMw 7TJT2YwzQJR9uY1Dip/gj+l+fF/DbgKYbjZsppmvoMp6PKdgPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRdRuNWI5MTDozlA9iPsxjhPPe5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzcxYzU1MjktODliNy0z ZWVjLTg2MmUtNmIzYTczNTZlNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCAbnSn0Tr99hjDeVXM1jQciiXGvVyaLYgLoEH1e6e3U7isoM1jMGEU dx9NicqRRgkdhm+2n8RHwNBEIdRMKTnXoVElaRbfB3OeyqkyqGAIwEp6ruEEKP7l K3WTqZOYunc/HDPZC8VpY3RfY0d4j78vTdRPrGkwYYcHfOJAMgm/uRlNugbdCUIR qg/f6C2pkzFJRm3ubnw2eM3g9SAgdRN7NIm92kzmEuxLrTWtVtHi9zw62Cq1T4Oq NS/QxL+GWmLXEbRAYFitjJli/e6ptWAaaogB33ftSEoSjdieK07eJtnviBaoCD/D /dJ3f8mg1/k5kgX0gwX1lAbHACe88co= -----END CERTIFICATE-----Generated at Sun Mar 1 18:39:55 2026 by rpki-client