$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa File: d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa (raw, json) Hash identifier: jmuMcJ/scKW+akKn3KgZOMB/57wP3Fl1/WAyNh2wvYs= Subject key identifier: E1:56:D9:0E:10:1B:90:B6:D0:E4:15:C6:BB:B0:0C:B0:38:27:2A:7A Certificate issuer: /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Certificate serial: 010D0C9F4328584D492A81D85255E381BAF98A00 Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 12208 IP address blocks: 74.209.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:81:d8:52:55:e3:81:ba:f9:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=abc2bc10-c64d-4801-9351-3091dd8c9bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:23:b1:7d:36:ae:80:89:6b:0b:be:6c:1b: fa:d9:6f:20:d7:d5:9e:30:23:66:79:ce:6d:72:6e: 1e:39:e8:f2:75:5a:4c:cc:41:65:b4:c5:6d:bc:dd: ce:95:3d:5a:2d:c3:56:75:54:9d:2b:d1:da:f3:d6: 86:26:a2:2b:bd:2c:63:c6:86:ce:69:3a:cf:53:7d: a9:37:db:15:5e:27:3b:84:b1:b6:46:0b:7c:c3:9e: b7:1a:e2:e7:6d:5f:78:8c:b4:cd:3b:7c:ff:f2:7d: 1d:0e:a7:7a:6e:d2:3b:ea:0e:8e:ca:db:b8:bb:f5: 95:8a:af:fa:3c:df:fb:90:f2:00:1e:21:98:c2:10: 53:92:08:da:c5:db:b7:bd:5b:de:c9:b7:c6:28:ab: 08:02:66:70:f3:29:2d:71:d9:44:38:e0:7d:da:6f: ea:f8:b6:8b:f8:e0:13:75:cc:76:ac:6c:4b:e2:4f: c7:4f:cd:8c:9d:39:6d:74:bd:06:50:36:0d:90:fc: 71:55:4c:9f:f9:9e:c6:25:d9:04:82:fd:49:b5:e2: 26:26:41:50:c9:f4:c2:e4:75:a8:eb:81:ca:d3:ac: 8f:d8:6c:63:8d:49:8c:b0:c3:25:f6:25:6d:46:ca: d3:23:47:6b:f3:85:ef:6a:ea:97:b3:7d:e0:d6:79: ed:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:56:D9:0E:10:1B:90:B6:D0:E4:15:C6:BB:B0:0C:B0:38:27:2A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/d28c0d91-39a9-3da2-8fad-d1cbd09f8102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl X509v3 Authority Key Identifier: keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer sbgp-ipAddrBlock: critical IPv4: 74.209.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:17:22:e2:8c:a0:51:ed:c8:ae:55:68:1a:5f:a0:b1:96:de: fa:d3:ed:75:b0:35:16:47:4b:c5:aa:ea:b7:3c:97:bf:3d:d4: 82:33:cf:79:29:49:c3:3d:41:07:2a:ba:25:c7:79:5c:23:1e: 48:53:5d:78:1f:b8:77:43:39:f6:e9:bd:82:db:76:88:16:4c: fc:25:0d:49:aa:21:48:37:0b:8f:d8:03:fe:47:c0:b4:67:55: 65:0c:f5:42:b0:bd:74:9c:64:f3:93:58:38:96:13:b6:56:ae: b9:c7:90:08:cc:ca:68:88:d8:ec:20:d3:5d:fc:8e:af:9e:f8: da:dd:58:48:28:91:7a:85:4d:04:73:66:f5:00:84:a3:80:bd: 42:ce:40:b5:26:c1:39:a3:c1:a2:61:3c:67:1d:32:1a:18:ef: 20:8d:f8:67:27:6f:c7:3b:33:6c:4b:ec:58:31:03:94:8f:e1: fd:d3:d9:45:66:f4:5f:04:8a:6a:ff:bf:6d:5d:89:6e:a3:fa: b1:08:a0:99:f9:62:d6:3a:a8:66:1b:1f:a4:91:08:1d:78:38: 6a:cc:80:c0:af:39:57:72:6e:96:f8:a3:b6:a4:8c:a2:fa:58: 11:26:29:da:f9:aa:a0:82:b1:95:fa:68:6e:74:9d:72:c5:60: e7:5d:4b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKoHYUlXjgbr5igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzczZTEwNTQtNWY0Yi00YWE1LTllNTUtMWM1Yzg3ZmI3 MDlkMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YWJjMmJjMTAtYzY0ZC00ODAxLTkzNTEtMzA5MWRkOGM5YmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH0jsX02roCJawu+bBv62W8g19WeMCNmec5t cm4eOejydVpMzEFltMVtvN3OlT1aLcNWdVSdK9Ha89aGJqIrvSxjxobOaTrPU32p N9sVXic7hLG2Rgt8w563GuLnbV94jLTNO3z/8n0dDqd6btI76g6Oytu4u/WViq/6 PN/7kPIAHiGYwhBTkgjaxdu3vVveybfGKKsIAmZw8yktcdlEOOB92m/q+LaL+OAT dcx2rGxL4k/HT82MnTltdL0GUDYNkPxxVUyf+Z7GJdkEgv1JteImJkFQyfTC5HWo 64HK06yP2GxjjUmMsMMl9iVtRsrTI0dr84XvauqXs33g1nntlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFW2Q4QG5C20OQVxruwDLA4Jyp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNl MTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVjODdmYjcwOWQvZDI4YzBkOTEtMzlhOS0z ZGEyLThmYWQtZDFjYmQwOWY4MTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzczZTEwNTQtNWY0Yi00YWE1LTll NTUtMWM1Yzg3ZmI3MDlkL2M3M2UxMDU0LTVmNGItNGFhNS05ZTU1LTFjNWM4N2Zi NzA5ZC5jcmwwHwYDVR0jBBgwFoAUrzLMgojaa/ENvSnJtECK+OjGFtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNlMTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVj ODdmYjcwOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFStFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgXIuKMoFHtyK5VaBpfoLGW3vrT7XWwNRZHS8Wq6rc8l7891IIzz3kp ScM9QQcquiXHeVwjHkhTXXgfuHdDOfbpvYLbdogWTPwlDUmqIUg3C4/YA/5HwLRn VWUM9UKwvXScZPOTWDiWE7ZWrrnHkAjMymiI2Owg0138jq+e+NrdWEgokXqFTQRz ZvUAhKOAvULOQLUmwTmjwaJhPGcdMhoY7yCN+Gcnb8c7M2xL7FgxA5SP4f3T2UVm 9F8Eimr/v21diW6j+rEIoJn5YtY6qGYbH6SRCB14OGrMgMCvOVdybpb4o7akjKL6 WBEmKdr5qqCCsZX6aG50nXLFYOddSyk= -----END CERTIFICATE-----Generated at Thu Mar 26 14:15:27 2026 by rpki-client