$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18125e86-12ee-3bb1-bcf5-0c64aa0365a7.roa File: 18125e86-12ee-3bb1-bcf5-0c64aa0365a7.roa (raw, json) Hash identifier: KvcEJbHf89S12Y9OpaQybM31gt5EXhG5o3vj8t8zyMg= Subject key identifier: D6:C5:12:47:41:EC:28:18:AD:A5:CC:85:E6:1F:3D:D3:C7:07:7D:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE59FF4713AEDCA1C1E9D980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18125e86-12ee-3bb1-bcf5-0c64aa0365a7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.194.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:ff:47:13:ae:dc:a1:c1:e9:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=40d5f873-051a-44e0-ab6d-f1245a0940b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:57:a9:75:6e:a0:cd:7d:14:2e:23:56:05:aa: e9:d4:31:5b:9a:4b:dc:25:01:cb:a4:dd:e7:77:a0: 77:dd:06:ab:04:b7:60:95:a4:6c:fe:a7:2f:72:75: d2:cc:94:d5:77:71:33:cc:98:c4:fa:a5:a0:d0:82: cd:88:1e:76:29:5e:f9:2f:94:95:c1:49:51:51:03: 92:ca:be:aa:fc:86:d3:93:90:29:fb:ee:94:14:c9: c6:34:a4:7b:5d:72:0f:2c:0d:dd:7f:18:7c:2d:5a: 40:02:33:da:c2:fc:eb:61:60:98:d0:42:28:c6:b9: a4:30:77:91:59:70:24:1d:26:81:67:f8:2b:fb:2b: 7b:15:47:de:9a:82:61:90:64:ca:2e:6f:34:87:c0: da:c1:0e:23:fe:1e:83:dc:c0:16:b0:a8:7d:e2:54: 55:80:7f:03:8d:f3:08:e9:81:d1:d5:46:0a:62:34: c2:53:cb:f8:74:97:7d:9e:f9:b6:57:54:0e:50:3a: 77:08:94:61:cd:fa:18:8d:58:76:d8:4f:ca:93:1a: d5:27:d3:17:eb:03:62:a7:c8:a7:f7:71:71:e6:70: e3:5f:97:95:e4:98:70:c5:26:ac:a0:6b:52:a9:3b: c8:80:48:ad:60:86:18:e1:f7:83:11:a0:35:0a:91: 48:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C5:12:47:41:EC:28:18:AD:A5:CC:85:E6:1F:3D:D3:C7:07:7D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18125e86-12ee-3bb1-bcf5-0c64aa0365a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.194.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:9a:eb:bb:c9:10:e0:86:d6:86:a9:a7:2c:9d:35:c2:75:0b: 21:5d:74:52:40:71:5f:60:ea:96:11:d1:5f:3c:32:f1:94:c8: d0:87:2e:d0:96:32:7a:02:61:6a:16:f0:3a:31:93:63:47:de: e3:90:14:e6:a9:f3:86:e1:6a:ec:25:b5:7e:40:e4:5e:42:ea: 89:cd:a1:68:72:dc:d8:c3:ca:e3:6e:f0:33:6e:1f:76:7c:92: 47:5a:bc:55:cf:83:53:3f:d2:61:f9:e1:ba:d5:a8:82:6a:d9: 52:96:6b:dd:3d:47:7f:6f:9a:03:97:ea:f6:f4:65:05:23:ae: fd:64:a3:f3:67:42:58:64:a2:54:d7:f6:88:a4:00:e2:fa:cd: b0:7f:57:58:0c:73:c4:ea:d7:18:8e:fc:52:b3:cd:c9:80:d4: 2d:05:c6:a8:23:ef:6a:28:f5:00:aa:79:47:23:85:2a:58:c0: ba:d9:fa:33:41:f6:75:17:28:51:d0:12:96:80:32:0b:20:2c: dc:e5:49:2b:b5:44:fd:ef:d6:e6:82:1c:6f:80:90:0e:d5:e9: 3e:ff:f6:d2:16:4b:ee:63:9f:cf:3d:09:07:df:c6:34:85:a0: 30:2a:c0:08:51:be:d0:d5:4d:1c:37:ac:54:a2:e7:61:09:93: e8:c5:34:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWf9HE67cocHp2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDBkNWY4NzMtMDUxYS00NGUwLWFiNmQtZjEyNDVhMDk0MGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVepdW6gzX0ULiNWBarp1DFbmkvcJQHLpN3n d6B33QarBLdglaRs/qcvcnXSzJTVd3EzzJjE+qWg0ILNiB52KV75L5SVwUlRUQOS yr6q/IbTk5Ap++6UFMnGNKR7XXIPLA3dfxh8LVpAAjPawvzrYWCY0EIoxrmkMHeR WXAkHSaBZ/gr+yt7FUfemoJhkGTKLm80h8DawQ4j/h6D3MAWsKh94lRVgH8DjfMI 6YHR1UYKYjTCU8v4dJd9nvm2V1QOUDp3CJRhzfoYjVh22E/KkxrVJ9MX6wNip8in 93Fx5nDjX5eV5JhwxSasoGtSqTvIgEitYIYY4feDEaA1CpFI3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbFEkdB7CgYraXMheYfPdPHB30OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTgxMjVlODYtMTJlZS0z YmIxLWJjZjUtMGM2NGFhMDM2NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCScKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKa67vJEOCG1oappyydNcJ1CyFddFJAcV9g6pYR0V88MvGUyNCHLtCW MnoCYWoW8Doxk2NH3uOQFOap84bhauwltX5A5F5C6onNoWhy3NjDyuNu8DNuH3Z8 kkdavFXPg1M/0mH54brVqIJq2VKWa909R39vmgOX6vb0ZQUjrv1ko/NnQlhkolTX 9oikAOL6zbB/V1gMc8Tq1xiO/FKzzcmA1C0Fxqgj72oo9QCqeUcjhSpYwLrZ+jNB 9nUXKFHQEpaAMgsgLNzlSSu1RP3v1uaCHG+AkA7V6T7/9tIWS+5jn889CQffxjSF oDAqwAhRvtDVTRw3rFSi52EJk+jFNDk= -----END CERTIFICATE-----Generated at Mon Mar 2 01:13:42 2026 by rpki-client