$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14bec1de-b55a-38ea-9a44-cf2cd80e248a.roa File: 14bec1de-b55a-38ea-9a44-cf2cd80e248a.roa (raw, json) Hash identifier: ykqgJil+fJQ8qcAlk+N1BgSJhGX4ahJd2rUsDyGgmFc= Subject key identifier: E8:49:BC:A0:9C:93:FB:AA:AB:E0:84:D5:37:29:3A:75:DC:D7:70:E3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BF6D7383D1F1D833B2D40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14bec1de-b55a-38ea-9a44-cf2cd80e248a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.168.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:f6:d7:38:3d:1f:1d:83:3b:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=577d0e1b-4869-405f-a1a3-e240bb345acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:37:96:48:02:39:40:1a:6d:2a:ea:c2:79: ec:46:17:6b:5b:24:4b:7c:11:47:0f:6c:2a:ed:51: e4:89:df:17:13:99:22:2b:ea:0c:3c:27:e2:92:dc: 4d:70:f8:74:d0:7a:9b:51:a1:24:d8:7a:d2:5a:0d: 1e:57:fb:0c:8f:17:06:98:b4:fa:9d:6d:08:8c:1e: 83:e2:37:f2:b6:76:70:f1:56:73:5b:0d:58:04:6a: b1:f9:64:5c:b1:46:7a:16:40:fc:1d:d9:7d:72:ff: 9e:43:78:fd:66:3e:24:86:be:14:6f:b7:6a:d0:33: 90:e6:c8:20:e6:7e:73:a6:a5:c7:ec:f1:9e:2e:fd: 48:55:56:b0:28:c1:27:f5:08:66:44:a6:9c:8c:61: a5:d9:b3:1b:94:25:09:1a:9e:c5:59:a2:3e:dd:00: ef:50:0a:ac:92:cd:ee:77:79:93:db:b3:c6:05:16: 1c:70:bf:b7:bc:61:7b:d3:42:37:be:93:24:cc:4e: 24:bd:2c:a0:80:8b:0f:9c:06:50:fb:f0:56:bf:b1: 9e:44:33:35:c8:dd:67:7a:8c:24:bd:cc:c4:69:74: 9b:42:97:e9:ed:58:bd:7b:f9:2c:14:2d:f5:5e:e7: cf:86:2c:37:3f:f7:ed:b0:65:df:0c:38:5e:53:62: 6d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:49:BC:A0:9C:93:FB:AA:AB:E0:84:D5:37:29:3A:75:DC:D7:70:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14bec1de-b55a-38ea-9a44-cf2cd80e248a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.168.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:03:71:3f:b9:93:ff:01:5b:ee:5f:30:78:46:68:7a:2b:4d: 9b:6d:87:84:05:ef:22:49:14:6c:ae:ac:ed:37:03:6e:14:92: b3:40:31:36:ca:4e:a8:75:85:e3:1c:0b:93:dd:88:06:4a:98: de:5d:81:50:62:ff:9e:2c:ce:56:0c:c7:3b:47:14:28:cb:a7: 51:f8:4c:d7:50:10:3a:f7:06:cb:10:05:ce:cc:f8:c6:14:2a: 8c:a6:d4:9b:42:36:cc:1b:17:64:4f:48:04:8e:19:79:7a:c9: 27:15:a9:e8:47:76:96:65:32:16:81:fa:4a:8e:c5:97:8f:e0: 28:dc:66:97:28:65:42:b8:2c:f7:58:02:21:e7:1f:44:95:d1: 35:e7:f1:b2:6c:65:54:ea:6c:68:d0:9d:d4:d5:64:73:63:3a: 2f:a5:ec:b7:be:4c:f9:ec:51:2c:1b:20:be:31:8c:41:f3:78: 8e:e3:e0:75:e8:da:9a:e6:0b:4d:0b:14:9d:14:5a:e0:72:32: bc:6e:fe:fc:62:83:1e:d7:12:ec:d7:09:ac:f0:30:4c:93:14: 95:5c:9d:d9:8e:e3:a2:fd:9d:f3:28:c5:e6:8a:34:11:d1:ad: de:a9:52:b5:75:bb:33:b4:dc:9f:46:72:82:be:1a:98:48:ef: 31:39:ad:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW/bXOD0fHYM7LUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTc3ZDBlMWItNDg2OS00MDVmLWExYTMtZTI0MGJiMzQ1YWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZo3lkgCOUAabSrqwnnsRhdrWyRLfBFHD2wq 7VHkid8XE5kiK+oMPCfiktxNcPh00HqbUaEk2HrSWg0eV/sMjxcGmLT6nW0IjB6D 4jfytnZw8VZzWw1YBGqx+WRcsUZ6FkD8Hdl9cv+eQ3j9Zj4khr4Ub7dq0DOQ5sgg 5n5zpqXH7PGeLv1IVVawKMEn9QhmRKacjGGl2bMblCUJGp7FWaI+3QDvUAqsks3u d3mT27PGBRYccL+3vGF700I3vpMkzE4kvSyggIsPnAZQ+/BWv7GeRDM1yN1neowk vczEaXSbQpfp7Vi9e/ksFC31XufPhiw3P/ftsGXfDDheU2Jt+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhJvKCck/uqq+CE1TcpOnXc13DjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTRiZWMxZGUtYjU1YS0z OGVhLTlhNDQtY2YyY2Q4MGUyNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSahwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYDcT+5k/8BW+5fMHhGaHorTZtth4QF7yJJFGyurO03A24UkrNAMTbK Tqh1heMcC5PdiAZKmN5dgVBi/54szlYMxztHFCjLp1H4TNdQEDr3BssQBc7M+MYU Koym1JtCNswbF2RPSASOGXl6yScVqehHdpZlMhaB+kqOxZeP4CjcZpcoZUK4LPdY AiHnH0SV0TXn8bJsZVTqbGjQndTVZHNjOi+l7Le+TPnsUSwbIL4xjEHzeI7j4HXo 2prmC00LFJ0UWuByMrxu/vxigx7XEuzXCazwMEyTFJVcndmO46L9nfMoxeaKNBHR rd6pUrV1uzO03J9GcoK+GphI7zE5rbE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:53:57 2026 by rpki-client