$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfca3056-27ed-347b-8bac-9d13427a25a7.roa File: dfca3056-27ed-347b-8bac-9d13427a25a7.roa (raw, json) Hash identifier: VMVFeUA2eN4B55jCBXyyXido0KyvT/SqpKBhwEmxVkw= Subject key identifier: DA:CD:02:30:74:9D:1B:E0:31:3E:7B:3A:E7:E2:8E:84:CE:DB:6B:6B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5A4A19A789A383468B3340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfca3056-27ed-347b-8bac-9d13427a25a7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.215.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:4a:19:a7:89:a3:83:46:8b:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=9790f2e5-fdb4-4c8b-8917-e35a3385b10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:30:33:df:2f:c1:da:8a:77:87:c8:fe:4f:9d: 3a:0a:01:02:8a:c2:11:15:0b:3d:7e:fc:6a:51:51: 81:87:b6:f3:80:2b:68:41:48:00:c2:3d:9f:b7:e5: 50:8d:29:a8:9b:67:59:16:c3:79:57:66:7e:c1:3b: 65:e7:51:8e:f2:bc:d1:5c:37:3f:19:de:12:d0:5d: 6a:39:44:bf:e2:8e:12:b0:68:e3:3a:7b:8d:5c:51: 46:bc:fd:51:af:25:f8:48:d7:30:28:e6:6e:d0:39: ac:93:80:f3:1c:aa:3c:2c:76:9a:3a:25:cf:be:74: 5b:0d:5d:b2:66:94:3f:93:4b:d4:53:b3:a4:74:9f: ae:fa:90:91:49:ed:30:67:4e:de:8d:08:80:25:cb: fa:6a:ad:cd:d1:ce:0a:dd:6c:a6:98:36:83:25:7b: 86:03:b7:d6:1f:e0:15:59:9b:cf:26:b9:3a:01:23: 1d:f0:b0:71:91:40:a5:64:bb:7c:51:a6:32:70:c5: 37:c3:16:59:d4:0e:35:5d:67:91:0c:29:d7:f4:eb: 83:ad:57:9f:d8:ce:ae:fa:a4:db:49:3e:af:4a:fb: 5d:0c:86:6f:11:46:d8:41:9d:89:0a:9b:f9:8b:0c: fc:0a:e1:c9:2a:3a:89:7d:2a:d7:78:c2:51:96:05: be:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CD:02:30:74:9D:1B:E0:31:3E:7B:3A:E7:E2:8E:84:CE:DB:6B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfca3056-27ed-347b-8bac-9d13427a25a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.215.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:96:f9:7b:6d:20:de:1e:d4:38:20:48:0c:6d:71:00:34:04: ab:b5:4d:f2:05:86:2f:5c:69:30:8c:70:58:53:63:54:6b:ea: f1:86:16:19:84:95:25:f5:2f:d3:07:a3:02:0c:b2:88:ad:46: 85:1a:7e:3a:ae:b0:05:a4:e2:77:47:9f:7e:1a:63:46:ed:be: 56:76:3e:0a:68:36:4c:bc:b5:b7:ab:90:fd:20:d0:af:ca:d9: 76:6b:14:2b:38:0a:9d:71:e6:7a:07:f7:ec:3e:08:f7:5c:f4: 46:83:97:43:a2:d3:41:ca:dc:67:0f:f6:c9:16:ed:2a:87:50: 16:95:25:89:9e:8e:6b:e4:0e:a0:31:64:1d:eb:27:7a:0a:51: 00:4c:73:dd:33:19:c3:70:78:38:89:15:ef:b6:f8:9e:c2:65: 3b:af:7f:c7:63:bf:71:5e:37:c5:eb:ad:a0:70:01:1d:71:b2: 80:8b:d1:ac:fb:3f:61:cf:c1:93:2f:89:a2:87:cc:cd:0a:06: a0:01:33:67:a3:cc:24:bd:e5:1c:bc:aa:72:bb:2f:ab:7a:21: 77:50:a3:9e:63:85:22:b5:be:f3:63:c2:bb:00:70:10:22:07: b4:42:f1:e9:3b:a2:61:b5:0b:4a:47:91:98:da:3b:03:4b:28: 44:bd:e8:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWkoZp4mjg0aLM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTc5MGYyZTUtZmRiNC00YzhiLTg5MTctZTM1YTMzODViMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDAz3y/B2op3h8j+T506CgECisIRFQs9fvxq UVGBh7bzgCtoQUgAwj2ft+VQjSmom2dZFsN5V2Z+wTtl51GO8rzRXDc/Gd4S0F1q OUS/4o4SsGjjOnuNXFFGvP1RryX4SNcwKOZu0Dmsk4DzHKo8LHaaOiXPvnRbDV2y ZpQ/k0vUU7OkdJ+u+pCRSe0wZ07ejQiAJcv6aq3N0c4K3WymmDaDJXuGA7fWH+AV WZvPJrk6ASMd8LBxkUClZLt8UaYycMU3wxZZ1A41XWeRDCnX9OuDrVef2M6u+qTb ST6vSvtdDIZvEUbYQZ2JCpv5iwz8CuHJKjqJfSrXeMJRlgW+KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrNAjB0nRvgMT57OufijoTO22trMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZjYTMwNTYtMjdlZC0z NDdiLThiYWMtOWQxMzQyN2EyNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSddoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCW+XttIN4e1DggSAxtcQA0BKu1TfIFhi9caTCMcFhTY1Rr6vGGFhmE lSX1L9MHowIMsoitRoUafjqusAWk4ndHn34aY0btvlZ2PgpoNky8tberkP0g0K/K 2XZrFCs4Cp1x5noH9+w+CPdc9EaDl0Oi00HK3GcP9skW7SqHUBaVJYmejmvkDqAx ZB3rJ3oKUQBMc90zGcNweDiJFe+2+J7CZTuvf8djv3FeN8XrraBwAR1xsoCL0az7 P2HPwZMviaKHzM0KBqABM2ejzCS95Ry8qnK7L6t6IXdQo55jhSK1vvNjwrsAcBAi B7RC8ek7omG1C0pHkZjaOwNLKES96JA= -----END CERTIFICATE-----Generated at Mon Mar 2 11:59:46 2026 by rpki-client