$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e40e45a5-26ed-31d4-b7b1-7a9a2e400e92.roa File: e40e45a5-26ed-31d4-b7b1-7a9a2e400e92.roa (raw, json) Hash identifier: tjb4td52zVgKXp1P/BDWmNXi7HKYLgztgTJhA1wHA7o= Subject key identifier: B3:FE:CC:1F:04:88:7C:F1:E0:8F:DA:3B:7B:8E:05:73:70:FC:B3:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE59C21D031FEE20F2933380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e40e45a5-26ed-31d4-b7b1-7a9a2e400e92.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.33.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:c2:1d:03:1f:ee:20:f2:93:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e1b6649f-93f1-40e5-b220-e5abde3e7346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:04:24:cc:26:64:9e:94:e5:0f:fb:3a:7d:1c: 5b:4f:72:07:ae:72:c1:e5:0c:d0:78:35:be:7f:f7: d8:81:ee:44:4b:76:30:96:80:e8:ef:50:d5:c9:e1: 17:c9:a6:05:32:78:67:39:82:6f:94:9b:7e:fb:42: 54:c5:9c:0d:e2:18:60:1a:c8:b5:c1:b4:9b:11:60: 4e:e8:33:31:c4:ee:6b:c5:01:9d:33:e3:55:33:ef: d9:cd:99:f3:41:78:f1:38:04:60:d3:37:7f:3a:41: 45:6e:a5:56:cd:97:8c:aa:91:5f:aa:e3:ef:fc:19: 14:7d:c8:76:5c:f8:ba:55:14:d4:d8:19:93:43:ed: 30:3e:72:4a:c1:71:52:bc:1d:59:e1:06:06:62:58: 7f:f7:89:c5:82:44:78:df:26:f9:aa:f7:87:c1:2c: 4f:e3:47:2b:42:ff:55:3e:b6:91:45:23:e1:29:e5: fe:45:94:c3:13:01:f9:0d:a3:1a:74:7c:aa:5b:cc: d8:61:a8:9a:37:7b:40:96:c8:40:f0:10:9e:a6:53: 05:ac:3f:a0:d8:0c:17:fb:38:17:fe:fa:40:e1:10: fe:50:9e:3b:73:28:94:cd:91:61:2e:8c:cc:e3:01: 85:49:3d:2f:71:61:80:66:1b:db:1b:24:5b:fd:41: c8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FE:CC:1F:04:88:7C:F1:E0:8F:DA:3B:7B:8E:05:73:70:FC:B3:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e40e45a5-26ed-31d4-b7b1-7a9a2e400e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.33.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b4:6e:76:ea:02:09:fb:27:e5:b1:4a:95:3a:0c:c4:0e:2e: b5:6e:f7:bf:1e:43:1e:eb:ed:58:52:fa:de:8a:38:6b:a0:79: b1:5e:c9:28:d1:e3:8d:16:fe:63:01:d0:d4:b1:50:0f:2c:41: e5:21:be:67:65:33:a3:18:c1:7e:86:5a:10:fe:90:07:dc:bc: a1:62:75:e5:88:bf:07:3e:2f:a7:89:34:2a:64:2d:ae:f6:98: ba:e0:04:13:99:aa:b2:a8:49:aa:1a:05:0c:39:71:37:02:80: c9:04:b1:f5:1e:2f:ba:ee:19:ee:64:05:27:bb:cf:cb:1b:03: bd:7f:78:d3:7c:b5:ee:6f:f3:cb:67:b6:f4:1d:03:82:6c:87: 17:fc:30:e9:b3:04:f2:5c:af:3c:19:e2:46:39:1d:43:e1:5a: 4b:d7:18:83:e9:6f:6f:4b:2b:d6:3c:db:47:09:1b:9d:31:3f: d1:60:62:00:0e:76:53:89:b9:e3:3e:0e:ae:68:16:dc:23:99: 6d:ab:ca:b9:a3:04:98:89:cb:06:3b:74:f7:df:aa:e5:09:b8: 78:23:04:f2:b2:eb:30:fe:31:93:37:a1:d9:dc:89:5d:54:60: 2b:ab:03:a0:02:be:be:de:b3:80:a2:e3:80:08:9f:cc:b5:80: 63:83:5e:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWcIdAx/uIPKTM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTFiNjY0OWYtOTNmMS00MGU1LWIyMjAtZTVhYmRlM2U3MzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwQkzCZknpTlD/s6fRxbT3IHrnLB5QzQeDW+ f/fYge5ES3YwloDo71DVyeEXyaYFMnhnOYJvlJt++0JUxZwN4hhgGsi1wbSbEWBO 6DMxxO5rxQGdM+NVM+/ZzZnzQXjxOARg0zd/OkFFbqVWzZeMqpFfquPv/BkUfch2 XPi6VRTU2BmTQ+0wPnJKwXFSvB1Z4QYGYlh/94nFgkR43yb5qveHwSxP40crQv9V PraRRSPhKeX+RZTDEwH5DaMadHyqW8zYYaiaN3tAlshA8BCeplMFrD+g2AwX+zgX /vpA4RD+UJ47cyiUzZFhLozM4wGFST0vcWGAZhvbGyRb/UHIfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLP+zB8EiHzx4I/aO3uOBXNw/LOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTQwZTQ1YTUtMjZlZC0z MWQ0LWI3YjEtN2E5YTJlNDAwZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSSEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC0bnbqAgn7J+WxSpU6DMQOLrVu978eQx7r7VhS+t6KOGugebFeySjR 440W/mMB0NSxUA8sQeUhvmdlM6MYwX6GWhD+kAfcvKFideWIvwc+L6eJNCpkLa72 mLrgBBOZqrKoSaoaBQw5cTcCgMkEsfUeL7ruGe5kBSe7z8sbA71/eNN8te5v88tn tvQdA4Jshxf8MOmzBPJcrzwZ4kY5HUPhWkvXGIPpb29LK9Y820cJG50xP9FgYgAO dlOJueM+Dq5oFtwjmW2ryrmjBJiJywY7dPffquUJuHgjBPKy6zD+MZM3odnciV1U YCurA6ACvr7es4Ci44AIn8y1gGODXlI= -----END CERTIFICATE-----Generated at Sun Mar 1 18:35:36 2026 by rpki-client