$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6f3bfa2-d83d-327a-b938-611bd2c77389.roa File: f6f3bfa2-d83d-327a-b938-611bd2c77389.roa (raw, json) Hash identifier: QHQZIiSFwe279JeQrwhpx1nkadnGz1GfQVIbfDzPnS8= Subject key identifier: 56:4E:5A:92:84:3C:99:34:99:9B:A1:A0:0E:43:E0:D9:EC:43:A6:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5DC6D7E8794D7F134CC800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6f3bfa2-d83d-327a-b938-611bd2c77389.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.70.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:c6:d7:e8:79:4d:7f:13:4c:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ba9ffd55-5a64-44ae-add2-3ed0f1c332f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:fe:b0:e8:48:6f:e4:87:3e:80:53:70:dd: 03:bb:1d:1f:7f:be:a7:58:6e:36:36:ba:4c:ee:94: c8:ab:07:84:11:4a:53:8b:cc:16:fd:b4:23:48:d7: f7:ab:5f:4f:c9:9e:55:1b:75:a9:cb:8a:a2:1b:9f: 80:81:75:30:f5:bd:04:66:87:18:a1:2a:2d:db:09: 64:69:43:b5:90:3e:40:2c:49:a4:c9:4d:8b:f3:14: 27:62:ff:a5:4f:cd:90:93:be:f0:3b:b4:54:8b:4d: 81:37:43:15:e3:a8:60:75:6c:62:ef:29:c2:58:66: e9:a6:c2:ad:20:68:a0:39:aa:73:90:79:79:47:ca: 24:d1:2b:d6:70:2a:21:ef:d4:8a:bf:3b:58:8e:14: 65:e6:75:42:e4:cb:5a:b8:17:12:34:45:a6:5f:3a: 66:eb:17:75:9d:47:99:d8:fa:a0:65:05:c9:b6:33: 3b:b7:f4:dc:8a:b3:e4:d9:9e:5c:80:4b:3f:85:78: f7:96:72:e4:83:8e:81:6e:4c:24:26:cc:aa:b8:4b: 2a:39:5f:3b:6a:5d:96:d1:5d:1b:cc:4f:8a:f9:3b: 82:58:f3:3a:df:2f:11:a4:5e:d6:38:20:44:29:ad: 6b:8e:72:8b:71:a9:4b:13:76:08:db:1d:00:c6:ea: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4E:5A:92:84:3C:99:34:99:9B:A1:A0:0E:43:E0:D9:EC:43:A6:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f6f3bfa2-d83d-327a-b938-611bd2c77389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.70.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:47:82:5a:10:86:d2:73:a1:bd:b9:7c:2b:1f:e9:30:47:68: fc:4a:74:e6:88:1d:54:3a:84:b2:d9:ee:78:45:45:06:8a:51: a8:53:ff:b8:ce:be:8b:12:53:3c:06:92:07:de:c7:bc:ec:43: 9a:d4:e1:e6:50:01:49:e7:36:7c:f5:e3:c2:e7:f0:78:34:ce: 76:de:f3:43:b5:b0:a3:73:c6:25:a9:f5:cd:37:29:40:c2:07: 63:db:58:99:e4:ee:3e:84:74:f0:ce:6d:51:95:64:e2:f7:4d: 7e:b1:d6:a1:ab:20:e6:32:c4:4d:3a:b0:bf:ae:7c:a5:6a:19: 18:7a:d9:83:45:88:85:07:92:08:cd:c8:f6:b8:d4:22:2c:67: 47:80:42:2e:9f:88:96:c1:37:4d:7b:3c:5f:5a:7f:8e:d3:8c: 0d:fe:be:78:e2:05:0b:0a:75:cc:a3:e8:58:55:6a:36:05:c6: f2:9b:8b:dd:8e:ae:eb:c8:fa:b3:ae:48:c0:3d:e1:44:53:b3: b8:1f:6f:73:b0:b6:4d:69:24:46:a7:5f:a8:84:55:e6:8b:ec: 78:a2:13:43:bc:00:8e:fb:94:ca:b3:29:f5:a7:33:c1:bc:bc: 55:1d:ea:d9:98:6e:13:21:cf:50:c3:ae:42:44:97:a4:3a:7f: 12:63:42:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXcbX6HlNfxNMyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmE5ZmZkNTUtNWE2NC00NGFlLWFkZDItM2VkMGYxYzMzMmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY7+sOhIb+SHPoBTcN0Dux0ff76nWG42NrpM 7pTIqweEEUpTi8wW/bQjSNf3q19PyZ5VG3Wpy4qiG5+AgXUw9b0EZocYoSot2wlk aUO1kD5ALEmkyU2L8xQnYv+lT82Qk77wO7RUi02BN0MV46hgdWxi7ynCWGbppsKt IGigOapzkHl5R8ok0SvWcCoh79SKvztYjhRl5nVC5MtauBcSNEWmXzpm6xd1nUeZ 2PqgZQXJtjM7t/TcirPk2Z5cgEs/hXj3lnLkg46BbkwkJsyquEsqOV87al2W0V0b zE+K+TuCWPM63y8RpF7WOCBEKa1rjnKLcalLE3YI2x0Axup90wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZOWpKEPJk0mZuhoA5D4NnsQ6ZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjZmM2JmYTItZDgzZC0z MjdhLWI5MzgtNjExYmQyYzc3Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVHgloQhtJzob25fCsf6TBHaPxKdOaIHVQ6hLLZ7nhFRQaKUahT/7jO vosSUzwGkgfex7zsQ5rU4eZQAUnnNnz148Ln8Hg0znbe80O1sKNzxiWp9c03KUDC B2PbWJnk7j6EdPDObVGVZOL3TX6x1qGrIOYyxE06sL+ufKVqGRh62YNFiIUHkgjN yPa41CIsZ0eAQi6fiJbBN017PF9af47TjA3+vnjiBQsKdcyj6FhVajYFxvKbi92O ruvI+rOuSMA94URTs7gfb3Owtk1pJEanX6iEVeaL7HiiE0O8AI77lMqzKfWnM8G8 vFUd6tmYbhMhz1DDrkJEl6Q6fxJjQhc= -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:58 2026 by rpki-client