$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddf71046-ebe0-36d3-8665-60f4ac6765bb.roa File: ddf71046-ebe0-36d3-8665-60f4ac6765bb.roa (raw, json) Hash identifier: /zWOwF5VQfzufN+di+d0EwhEUZOLeo8QBIJAffLEt3E= Subject key identifier: 09:33:80:36:6C:E3:D2:22:59:74:7E:E3:FB:1F:A1:89:EC:A7:9C:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE59AFD73B426B87B06D6780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddf71046-ebe0-36d3-8665-60f4ac6765bb.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.29.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:af:d7:3b:42:6b:87:b0:6d:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=27c2c6fb-d4db-45c5-8164-cd0ff9c7cb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:aa:5f:f1:50:b6:e3:e2:3a:cb:5d:47:cd:d8: a8:6c:34:30:27:ba:64:40:dd:55:68:f0:af:a6:82: fe:09:be:ab:75:87:49:af:57:5f:36:b5:34:2e:58: 0a:ba:47:29:5a:4d:77:a6:97:af:d5:43:e7:f7:59: eb:a2:ae:74:d3:69:4f:e4:5c:cf:61:aa:14:6b:ab: 09:f3:28:db:4f:04:88:fe:27:a6:ab:56:f7:f0:c9: 30:fa:51:8b:80:12:15:0c:e6:3d:0d:ff:5d:4b:9a: 82:01:13:b7:4f:54:5e:50:ff:93:1d:3a:dc:34:ac: a9:c1:60:b3:03:66:ac:6e:5c:d9:ea:ee:02:02:64: 3c:e6:15:d3:0e:6c:cf:80:a7:b5:27:04:0f:20:bc: 49:82:60:81:e8:c6:6e:77:a1:b3:28:d9:aa:49:8e: b9:59:75:8b:3c:2a:7e:29:33:8b:36:59:1e:71:ee: 4f:ce:cb:f0:fb:62:56:d4:54:5d:98:59:06:d6:2c: 70:1b:c5:f9:fa:f8:f9:dd:b9:db:38:7b:1a:d4:60: d6:14:19:00:df:78:ba:02:c1:4a:d3:8b:ac:32:20: cb:21:ce:b6:33:56:49:55:91:dc:d9:30:b4:9b:28: f9:2f:a4:62:d1:b1:07:22:b0:ca:29:0b:33:f7:c3: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:33:80:36:6C:E3:D2:22:59:74:7E:E3:FB:1F:A1:89:EC:A7:9C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddf71046-ebe0-36d3-8665-60f4ac6765bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.29.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:39:4b:95:e8:9d:e5:13:f1:8c:ab:57:8c:d5:5c:8f:bc:9a: c8:ba:ee:24:7e:79:73:88:55:62:d6:b8:f0:88:58:b8:a1:91: c8:ba:0d:46:5b:96:2c:f3:f5:5b:e0:6d:d7:f7:02:cd:35:21: ae:3f:7d:e2:5c:db:53:07:71:52:4f:03:8b:4c:01:20:83:bf: 27:bf:e8:7e:16:59:a9:c3:5e:df:96:15:51:5c:81:08:ed:5f: c7:7f:14:01:66:f7:9e:3f:7a:cf:6b:24:a2:d6:ce:27:b3:6c: aa:f8:64:dc:93:53:a7:9b:27:c3:a5:e5:2c:ee:7f:8b:ab:df: 63:ab:39:34:e9:dd:1f:4e:e9:48:a8:96:99:f2:32:70:0e:a1: 8f:30:28:c8:dd:85:b1:d6:9b:f5:98:82:b9:d2:f5:5c:d9:2a: a2:6d:40:3e:56:13:78:72:8e:4a:e7:0b:84:f5:c7:12:f6:59: d1:c0:eb:61:81:e2:5e:4e:8e:d1:61:4b:1d:cf:22:9e:a1:71: c4:9b:70:b6:d8:9a:5b:d5:8e:b4:1a:c2:b4:e5:83:70:1f:85: 2b:63:45:96:d9:1c:fa:18:a5:af:66:a2:6f:20:5a:d6:5a:8e: b4:4d:20:2e:11:67:98:a8:26:13:a9:93:9a:51:5e:06:99:a7: 12:6c:bc:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWa/XO0Jrh7BtZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjdjMmM2ZmItZDRkYi00NWM1LTgxNjQtY2QwZmY5YzdjYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKpf8VC24+I6y11HzdiobDQwJ7pkQN1VaPCv poL+Cb6rdYdJr1dfNrU0LlgKukcpWk13ppev1UPn91nroq5002lP5FzPYaoUa6sJ 8yjbTwSI/iemq1b38Mkw+lGLgBIVDOY9Df9dS5qCARO3T1ReUP+THTrcNKypwWCz A2asblzZ6u4CAmQ85hXTDmzPgKe1JwQPILxJgmCB6MZud6GzKNmqSY65WXWLPCp+ KTOLNlkece5Pzsvw+2JW1FRdmFkG1ixwG8X5+vj53bnbOHsa1GDWFBkA33i6AsFK 04usMiDLIc62M1ZJVZHc2TC0myj5L6Ri0bEHIrDKKQsz98M9DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkzgDZs49IiWXR+4/sfoYnsp5woMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGRmNzEwNDYtZWJlMC0z NmQzLTg2NjUtNjBmNGFjNjc2NWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSR0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK05S5XoneUT8YyrV4zVXI+8msi67iR+eXOIVWLWuPCIWLihkci6DUZb lizz9Vvgbdf3As01Ia4/feJc21MHcVJPA4tMASCDvye/6H4WWanDXt+WFVFcgQjt X8d/FAFm954/es9rJKLWziezbKr4ZNyTU6ebJ8Ol5Szuf4ur32OrOTTp3R9O6Uio lpnyMnAOoY8wKMjdhbHWm/WYgrnS9VzZKqJtQD5WE3hyjkrnC4T1xxL2WdHA62GB 4l5OjtFhSx3PIp6hccSbcLbYmlvVjrQawrTlg3AfhStjRZbZHPoYpa9mom8gWtZa jrRNIC4RZ5ioJhOpk5pRXgaZpxJsvPc= -----END CERTIFICATE-----Generated at Sun Mar 1 18:28:41 2026 by rpki-client