$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/2d71ec39-a5bc-3ccd-9890-aeb1e0e342ff.roa File: 2d71ec39-a5bc-3ccd-9890-aeb1e0e342ff.roa (raw, json) Hash identifier: Grxd5ZpvQTm/XFG1qY6bYc5mu0yl7t3EKFeErZPHwUo= Subject key identifier: 37:17:6C:39:C8:D3:91:E1:D4:EC:4E:78:2A:6B:5E:A9:17:A0:2C:31 Certificate issuer: /CN=1a3bba56-316c-4439-8cfd-d9c463a7aa82 Certificate serial: 010D0C9F4328584D52434B650C19397A593FDF80 Authority key identifier: 19:A9:CB:15:78:39:AD:80:84:03:DC:EC:F7:36:B5:B1:0F:6A:0D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/2d71ec39-a5bc-3ccd-9890-aeb1e0e342ff.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 12099 IP address blocks: 167.73.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/1a3bba56-316c-4439-8cfd-d9c463a7aa82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/1a3bba56-316c-4439-8cfd-d9c463a7aa82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:4b:65:0c:19:39:7a:59:3f:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a3bba56-316c-4439-8cfd-d9c463a7aa82 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=4ed0310d-8ef4-4007-ae2e-f8a43347bf66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b8:9b:3c:b8:7a:ff:e6:38:48:76:29:0b:97: 45:ce:9d:79:13:49:36:39:4e:23:07:a5:ed:1f:11: 72:7a:d1:13:2b:88:10:31:0a:86:5a:07:2a:66:d1: 4c:83:81:3b:ba:f9:e4:0e:15:79:52:1c:a5:67:9c: 85:f9:5a:26:7f:45:42:27:92:6d:50:e1:e0:ab:07: 52:ff:81:6c:21:a2:c6:0e:8a:76:a4:54:00:97:d0: 08:37:f0:07:21:81:db:e5:57:ae:3d:28:fa:2f:39: 48:cc:f2:ae:4a:d0:61:08:17:e2:dd:83:0e:dd:03: 90:dd:6f:28:dd:0c:ae:f0:b4:9e:04:5a:07:d4:a1: 9c:93:09:da:2c:c8:04:e6:3c:60:93:fc:6b:50:7a: 2f:31:1e:98:05:0c:ae:58:ae:4e:1b:01:e4:04:bf: c3:f8:50:3b:cd:4a:5f:06:9d:02:8d:f2:75:2b:39: 60:a4:a8:b4:f7:73:5c:96:ba:ba:61:b1:08:1b:be: b4:d8:64:df:9c:80:c5:3a:ec:b7:09:a3:26:dd:e3: b9:5d:89:7c:d3:45:3f:48:a4:3b:6b:67:8d:02:ea: c6:e6:32:a9:2d:a2:0d:e9:4f:34:02:de:05:c3:94: 28:b4:50:87:55:10:36:ec:1f:34:e7:31:bb:98:91: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:17:6C:39:C8:D3:91:E1:D4:EC:4E:78:2A:6B:5E:A9:17:A0:2C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/2d71ec39-a5bc-3ccd-9890-aeb1e0e342ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/1a3bba56-316c-4439-8cfd-d9c463a7aa82.crl X509v3 Authority Key Identifier: keyid:19:A9:CB:15:78:39:AD:80:84:03:DC:EC:F7:36:B5:B1:0F:6A:0D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82.cer sbgp-ipAddrBlock: critical IPv4: 167.73.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5a:aa:f5:f0:01:b9:41:b7:35:3c:0f:a8:ad:f2:d6:7e:18: 10:83:54:c4:0d:72:3e:58:ab:dc:11:c2:f1:f6:12:2e:de:f3: 14:b9:a7:74:da:91:c5:9a:17:cb:90:0e:b8:e7:5b:1a:bd:c2: ba:51:87:29:cd:d7:79:9e:cb:aa:14:b9:ce:5c:4e:99:1d:1f: ac:96:ac:1a:5f:52:77:f2:85:dc:4a:d9:c7:cf:51:79:63:3b: 7b:8a:09:c5:41:47:c1:37:29:44:9b:a1:2d:b1:c9:92:c9:d6: f3:16:6e:1a:71:ff:08:1d:33:b9:ad:d5:94:23:5a:f1:4c:18: 84:0a:4b:81:da:5d:2b:af:3d:fe:3b:13:8d:70:9c:c2:51:e1: a0:96:88:93:e4:6f:de:f9:5b:14:0a:c1:7c:1a:07:23:aa:6c: 07:ea:02:93:dd:82:9e:4b:95:ec:cf:f4:3b:dd:0b:61:4d:34: 3b:92:6d:9d:bc:6a:28:5f:e5:71:61:f6:33:91:64:5d:6e:2d: 55:2c:5c:04:da:78:1c:0b:60:37:54:b2:e7:a5:e4:78:6d:4f: 5e:59:21:ce:eb:ba:e6:f0:ab:19:d7:23:a7:bf:f2:78:f7:ff: 70:66:0f:11:78:c3:53:95:a0:e1:da:d0:0a:d1:4f:5c:a6:83: 09:27:c9:18 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1SQ0tlDBk5elk/34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWEzYmJhNTYtMzE2Yy00NDM5LThjZmQtZDljNDYzYTdh YTgyMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NGVkMDMxMGQtOGVmNC00MDA3LWFlMmUtZjhhNDMzNDdiZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLibPLh6/+Y4SHYpC5dFzp15E0k2OU4jB6Xt HxFyetETK4gQMQqGWgcqZtFMg4E7uvnkDhV5UhylZ5yF+Vomf0VCJ5JtUOHgqwdS /4FsIaLGDop2pFQAl9AIN/AHIYHb5VeuPSj6LzlIzPKuStBhCBfi3YMO3QOQ3W8o 3Qyu8LSeBFoH1KGckwnaLMgE5jxgk/xrUHovMR6YBQyuWK5OGwHkBL/D+FA7zUpf Bp0CjfJ1KzlgpKi093Nclrq6YbEIG7602GTfnIDFOuy3CaMm3eO5XYl800U/SKQ7 a2eNAurG5jKpLaIN6U80At4Fw5QotFCHVRA27B805zG7mJH9gwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDcXbDnI05Hh1OxOeCprXqkXoCwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYTNi YmE1Ni0zMTZjLTQ0MzktOGNmZC1kOWM0NjNhN2FhODIvMmQ3MWVjMzktYTViYy0z Y2NkLTk4OTAtYWViMWUwZTM0MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWEzYmJhNTYtMzE2Yy00NDM5LThj ZmQtZDljNDYzYTdhYTgyLzFhM2JiYTU2LTMxNmMtNDQzOS04Y2ZkLWQ5YzQ2M2E3 YWE4Mi5jcmwwHwYDVR0jBBgwFoAUGanLFXg5rYCEA9zs9za1sQ9qDVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xYTNiYmE1Ni0zMTZjLTQ0MzktOGNmZC1kOWM0 NjNhN2FhODIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp0kwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhVqq9fABuUG3NTwPqK3y1n4YEINUxA1yPlir3BHC8fYSLt7zFLmndNqR xZoXy5AOuOdbGr3CulGHKc3XeZ7LqhS5zlxOmR0frJasGl9Sd/KF3ErZx89ReWM7 e4oJxUFHwTcpRJuhLbHJksnW8xZuGnH/CB0zua3VlCNa8UwYhApLgdpdK689/jsT jXCcwlHhoJaIk+Rv3vlbFArBfBoHI6psB+oCk92CnkuV7M/0O90LYU00O5Jtnbxq KF/lcWH2M5FkXW4tVSxcBNp4HAtgN1Sy56XkeG1PXlkhzuu65vCrGdcjp7/yePf/ cGYPEXjDU5Wg4drQCtFPXKaDCSfJGA== -----END CERTIFICATE-----Generated at Mon Mar 30 10:20:07 2026 by rpki-client