$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cba08a5d-abe4-3244-97e8-ab057661eb26.roa File: cba08a5d-abe4-3244-97e8-ab057661eb26.roa (raw, json) Hash identifier: tWqXwzZDMRW/uVQ9W/NLrWZQvFu4kDvGXW6edeWawz8= Subject key identifier: 4B:AE:6E:22:4E:D6:27:27:20:06:F8:9E:FE:5E:C2:AB:50:01:9D:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5852DF263B3A57DBA94D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cba08a5d-abe4-3244-97e8-ab057661eb26.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.22.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:52:df:26:3b:3a:57:db:a9:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b9a2e1de-7969-412c-aea0-feb0a1c500ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:24:4c:ec:48:bd:d0:69:e8:32:4e:17:5c: 51:cb:7e:4a:d3:90:c2:0b:ac:de:82:e5:d5:37:52: 46:97:13:6c:66:b7:0d:80:ad:c6:02:81:fb:a5:23: fa:22:14:4e:1d:33:81:db:60:21:70:05:c6:bc:27: 97:57:77:dd:b0:0c:3d:fa:fc:33:15:45:f2:a6:62: d7:ba:eb:0e:22:79:9a:ea:68:d0:15:a7:44:6c:5e: 4c:1a:e5:d3:19:57:2f:47:45:12:69:7b:2a:dd:43: 2c:02:10:8e:59:80:2b:1b:1e:7e:27:e4:e2:69:92: 56:dd:93:dd:be:f6:b0:ab:8f:e2:ab:8f:cd:05:d0: 55:17:da:5c:09:c8:2b:8a:84:da:ca:58:ea:52:cc: 62:89:da:31:0e:61:d5:56:9b:6d:d6:16:be:6f:4e: 18:bb:12:d1:d8:12:9a:44:27:4b:a4:b1:97:d5:23: 58:8c:3b:fc:75:19:24:dd:39:2a:df:25:75:76:aa: c4:92:90:64:27:ed:66:99:84:a2:85:bf:cb:b2:a6: f3:37:9d:4b:65:80:b0:0b:ba:91:ef:25:08:89:6c: 8a:20:19:c3:f7:f8:37:22:a4:1e:93:a7:23:bc:6b: 01:fd:64:97:9b:72:a0:93:9d:4b:16:04:8b:06:ec: 58:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AE:6E:22:4E:D6:27:27:20:06:F8:9E:FE:5E:C2:AB:50:01:9D:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cba08a5d-abe4-3244-97e8-ab057661eb26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.22.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b7:8c:34:a2:b8:ba:15:6d:1e:eb:b7:98:6f:6b:e8:86:70: 7c:12:7e:95:42:8a:53:ef:b1:e8:c5:76:e5:0d:fd:0b:17:84: 4f:c5:33:04:72:5f:06:e7:30:5e:4a:b8:25:41:bf:95:17:97: 6d:28:79:8f:6f:6a:af:a7:a5:61:c0:bd:1d:55:1d:25:47:38: b6:38:f2:53:36:33:15:ae:ea:cd:b8:a7:16:13:4d:36:6c:b6: 75:81:c2:01:9b:91:59:42:f7:16:ad:90:dd:be:01:5b:63:17: c2:1f:71:39:dc:83:bc:5d:51:89:b1:e3:58:e6:23:1d:be:c1: 4b:af:6a:43:1d:ce:d1:14:55:49:01:31:7a:c5:5a:ac:10:18: 9d:3d:ea:39:d4:9d:e7:9f:0a:b3:76:56:c2:ce:a3:94:40:19: 55:4f:3a:bd:e3:59:62:6e:3c:5e:47:4f:f9:dd:ee:ed:a0:41: 1c:1e:39:ce:6f:d4:c9:dd:20:3c:d3:dd:b1:44:7d:26:8c:e2: 5e:60:94:09:75:3e:85:c8:71:6b:d8:ff:98:7f:7f:d6:5c:be: e3:78:79:28:20:e4:51:cb:7c:af:bd:42:69:17:0b:92:9f:bb: 41:10:0b:6a:a0:6d:41:35:cc:e1:86:7e:cf:81:72:d3:21:04: 2b:66:e2:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWFLfJjs6V9upTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjlhMmUxZGUtNzk2OS00MTJjLWFlYTAtZmViMGExYzUwMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmwkTOxIvdBp6DJOF1xRy35K05DCC6zeguXV N1JGlxNsZrcNgK3GAoH7pSP6IhROHTOB22AhcAXGvCeXV3fdsAw9+vwzFUXypmLX uusOInma6mjQFadEbF5MGuXTGVcvR0USaXsq3UMsAhCOWYArGx5+J+TiaZJW3ZPd vvawq4/iq4/NBdBVF9pcCcgrioTayljqUsxiidoxDmHVVptt1ha+b04YuxLR2BKa RCdLpLGX1SNYjDv8dRkk3Tkq3yV1dqrEkpBkJ+1mmYSihb/LsqbzN51LZYCwC7qR 7yUIiWyKIBnD9/g3IqQek6cjvGsB/WSXm3Kgk51LFgSLBuxY/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuubiJO1icnIAb4nv5ewqtQAZ3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2JhMDhhNWQtYWJlNC0z MjQ0LTk3ZTgtYWIwNTc2NjFlYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSRYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJe3jDSiuLoVbR7rt5hva+iGcHwSfpVCilPvsejFduUN/QsXhE/FMwRy XwbnMF5KuCVBv5UXl20oeY9vaq+npWHAvR1VHSVHOLY48lM2MxWu6s24pxYTTTZs tnWBwgGbkVlC9xatkN2+AVtjF8IfcTncg7xdUYmx41jmIx2+wUuvakMdztEUVUkB MXrFWqwQGJ096jnUneefCrN2VsLOo5RAGVVPOr3jWWJuPF5HT/nd7u2gQRweOc5v 1MndIDzT3bFEfSaM4l5glAl1PoXIcWvY/5h/f9ZcvuN4eSgg5FHLfK+9QmkXC5Kf u0EQC2qgbUE1zOGGfs+BctMhBCtm4lA= -----END CERTIFICATE-----Generated at Sun Mar 1 18:57:39 2026 by rpki-client