$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0d8e357-a32d-35ca-9bb6-f155de17e7d5.roa File: d0d8e357-a32d-35ca-9bb6-f155de17e7d5.roa (raw, json) Hash identifier: A1v4Nw5nLHQ63Tm5vW9HDC+uJR0Ln7sLrtbo45ZXv1E= Subject key identifier: 80:24:49:48:61:DF:97:25:EF:A8:4D:7F:06:19:D8:FC:86:2E:A4:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE574A90C7107D5CFCCB6E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0d8e357-a32d-35ca-9bb6-f155de17e7d5.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 73.20.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:4a:90:c7:10:7d:5c:fc:cb:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=8af4fd18-72a4-410d-89f2-c220c7ddb37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:29:76:32:70:62:9f:7d:a4:40:28:6f:ef: 6c:2f:f2:29:58:a0:5f:6b:8c:82:68:77:91:ff:1f: ee:0c:19:1f:3e:89:39:b1:af:a0:f1:ab:fb:e4:dc: ae:f2:ef:e3:cc:74:8c:83:70:d2:c1:f3:8c:b0:5d: 25:b4:43:f1:92:9a:61:45:07:63:53:91:07:04:43: 2d:58:26:a2:d5:24:8b:90:24:b1:12:cb:f5:ed:8c: 46:e3:f8:2c:09:fa:e9:3d:ba:00:a6:b2:ef:9d:1d: 4f:2d:53:ff:a4:a1:3a:58:84:30:54:53:45:2a:b6: c3:b7:ee:c2:4f:7a:d5:e4:93:5e:17:c9:df:cd:9f: f6:cd:4a:29:10:06:1f:52:eb:16:b4:c3:f7:62:6e: 82:9f:f4:64:2f:ae:3d:fb:24:70:52:8f:42:ed:38: d4:e9:33:1e:6d:10:86:a9:44:f4:77:6d:6f:72:e5: 67:8b:d7:f6:e2:e2:84:29:82:01:e5:c5:a2:f4:9c: f1:27:9a:e2:40:99:ae:83:56:b1:88:99:c7:a6:f7: 10:45:2d:39:c8:cf:ad:f5:c9:d5:bc:19:88:3b:e3: 22:90:5f:1e:ae:40:f4:a2:54:e9:cf:54:af:dc:dd: 75:d7:d3:9d:7e:c8:74:f7:bf:24:34:06:79:53:da: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:24:49:48:61:DF:97:25:EF:A8:4D:7F:06:19:D8:FC:86:2E:A4:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0d8e357-a32d-35ca-9bb6-f155de17e7d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.20.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a1:ca:e6:c3:90:f4:45:a6:4d:95:78:82:67:c1:08:4b:f9: 69:7b:9b:21:81:ad:ea:1c:48:cb:8d:6c:fd:68:6a:68:c6:5c: 5f:3a:35:82:99:34:84:26:67:26:1a:fc:72:68:71:67:23:6c: 10:07:dc:d0:f4:e3:5b:6a:c2:3e:6b:14:57:77:e4:c8:71:01: 56:fb:46:65:bd:6c:6d:53:19:e8:29:9f:af:26:2b:83:ae:ad: 0c:48:12:08:f9:08:07:de:49:d7:e5:0c:bd:20:76:ea:29:24: af:89:92:cc:2a:13:c2:ff:67:26:37:15:b3:12:e6:47:19:6b: 9d:e3:88:4a:8a:9c:2d:0a:69:26:6e:0f:d9:12:d9:30:67:e4: f5:8c:b9:0e:89:19:8b:bd:3b:02:ae:ee:23:d6:d3:10:85:da: ec:0f:e7:5c:99:44:9c:bb:75:cc:d8:2a:ec:4f:86:e3:dd:98: 27:ea:91:7d:e7:40:a1:ba:9f:05:5a:16:3c:3b:7b:48:cb:9a: 8d:67:88:27:6d:0c:f4:b0:d3:8f:e3:35:25:2f:d7:d4:40:48: 5a:95:a2:9b:1f:85:d4:46:4e:ea:1c:e1:6a:94:9d:c6:ca:5c: b7:6f:25:04:5a:dd:21:03:19:77:50:a7:a6:09:8c:c6:5c:02: c3:b4:41:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV0qQxxB9XPzLbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OGFmNGZkMTgtNzJhNC00MTBkLTg5ZjItYzIyMGM3ZGRiMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldUpdjJwYp99pEAob+9sL/IpWKBfa4yCaHeR /x/uDBkfPok5sa+g8av75Nyu8u/jzHSMg3DSwfOMsF0ltEPxkpphRQdjU5EHBEMt WCai1SSLkCSxEsv17YxG4/gsCfrpPboAprLvnR1PLVP/pKE6WIQwVFNFKrbDt+7C T3rV5JNeF8nfzZ/2zUopEAYfUusWtMP3Ym6Cn/RkL649+yRwUo9C7TjU6TMebRCG qUT0d21vcuVni9f24uKEKYIB5cWi9JzxJ5riQJmug1axiJnHpvcQRS05yM+t9cnV vBmIO+MikF8erkD0olTpz1Sv3N1119Odfsh0978kNAZ5U9oGaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAkSUhh35cl76hNfwYZ2PyGLqQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDBkOGUzNTctYTMyZC0z NWNhLTliYjYtZjE1NWRlMTdlN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRQWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqhyubDkPRFpk2VeIJnwQhL+Wl7myGBreocSMuNbP1oamjGXF86NYKZ NIQmZyYa/HJocWcjbBAH3ND041tqwj5rFFd35MhxAVb7RmW9bG1TGegpn68mK4Ou rQxIEgj5CAfeSdflDL0gduopJK+JkswqE8L/ZyY3FbMS5kcZa53jiEqKnC0KaSZu D9kS2TBn5PWMuQ6JGYu9OwKu7iPW0xCF2uwP51yZRJy7dczYKuxPhuPdmCfqkX3n QKG6nwVaFjw7e0jLmo1niCdtDPSw04/jNSUv19RASFqVopsfhdRGTuoc4WqUncbK XLdvJQRa3SEDGXdQp6YJjMZcAsO0QYI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:17:29 2026 by rpki-client