$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a6abdf5-135f-3fc1-9e3e-6ef8bfaa0371.roa File: 1a6abdf5-135f-3fc1-9e3e-6ef8bfaa0371.roa (raw, json) Hash identifier: k2da+vYFnlP60rYyM4OqJuKkueiv2+6UWK/Rg+MZzfE= Subject key identifier: 70:B0:BB:13:A6:80:F3:B6:4F:F2:89:A4:3B:E7:98:67:AD:96:89:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57CBFA336DF78B69B81840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a6abdf5-135f-3fc1-9e3e-6ef8bfaa0371.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 73.141.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:cb:fa:33:6d:f7:8b:69:b8:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a87fe2e5-ac27-429e-bb56-c240ef029b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:25:67:29:5a:36:0c:b6:60:9f:1d:74:4f:e0: 22:40:f4:29:b0:d1:9f:09:67:a6:43:32:80:45:82: 63:1b:7c:2b:de:a1:5a:09:32:78:40:3d:f1:b2:de: 52:8b:68:71:4a:e6:58:43:b0:eb:ea:fe:eb:cf:4c: 1a:e1:80:0d:1d:00:e4:07:0c:b2:1b:3b:38:a9:e9: 83:f6:b0:ec:32:12:77:c7:ac:f2:13:59:43:eb:c8: 13:af:72:80:19:02:ac:bf:19:f4:bb:4c:d2:d3:4c: bc:22:c2:74:5d:35:21:dc:9a:4a:0f:f7:b5:74:a0: d5:5d:59:d5:1a:05:63:bf:db:c7:ba:66:a1:69:69: 81:19:7c:bb:6e:0c:29:ae:9d:e7:08:9f:64:aa:f0: f6:32:aa:7e:db:74:48:1e:0a:6c:7c:3a:62:f2:5c: 51:f1:b6:7e:16:d1:d1:3b:65:34:89:d5:04:10:54: ad:6e:09:a8:1a:69:75:e1:51:25:81:8e:a9:1b:df: b7:28:63:c7:5c:65:26:73:85:f8:07:2b:03:01:aa: 95:fd:d0:7c:b5:81:00:65:70:7b:f2:9b:0c:74:9b: 38:d6:d8:06:b9:d2:48:4c:24:fb:66:24:99:6d:21: 3d:f0:37:62:c9:3a:1e:fa:23:d4:43:3e:6c:bd:6e: 1e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B0:BB:13:A6:80:F3:B6:4F:F2:89:A4:3B:E7:98:67:AD:96:89:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a6abdf5-135f-3fc1-9e3e-6ef8bfaa0371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.141.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e9:e3:e7:c0:68:d0:54:3d:15:a5:5b:31:58:94:53:70:67: 23:35:f5:56:bb:22:91:00:14:c7:e2:5d:17:18:08:0a:8d:87: 4c:9a:8d:87:67:d9:ea:39:02:2f:69:f4:01:53:d5:29:e7:2a: c6:00:ed:df:a6:ac:c7:38:05:7a:fd:12:70:f2:75:0a:86:76: a2:ce:27:7c:b5:75:0d:63:f2:6a:ad:77:38:fa:48:ef:ca:74: de:22:24:ce:99:85:63:da:1a:0c:fd:2d:c2:56:c6:05:95:c7: 44:39:63:bb:86:56:50:29:67:7b:83:11:75:64:36:0c:41:28: 9f:ba:f4:1b:50:8f:bb:18:e9:10:61:7b:61:a4:30:c2:42:39: 53:5a:15:a0:9e:d9:e7:16:4a:2d:b1:75:5c:e6:aa:0c:f5:8f: 37:7d:b9:6c:6d:9d:08:e8:84:a1:c9:cd:ca:73:db:28:2f:d9: d9:8a:66:3b:0b:26:eb:85:bc:c0:b5:5d:10:cb:70:39:9f:76: b5:6c:83:27:c0:23:9c:d1:4f:7f:3a:dc:96:a1:b0:52:89:a7: c6:59:6a:9e:b5:11:7f:01:a1:ec:3a:ea:3b:27:5f:a6:44:d9: 60:58:19:f2:3f:18:ff:12:9c:4e:d7:20:ee:db:20:67:26:ed: cf:9a:26:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV8v6M233i2m4GEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTg3ZmUyZTUtYWMyNy00MjllLWJiNTYtYzI0MGVmMDI5YjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yVnKVo2DLZgnx10T+AiQPQpsNGfCWemQzKA RYJjG3wr3qFaCTJ4QD3xst5Si2hxSuZYQ7Dr6v7rz0wa4YANHQDkBwyyGzs4qemD 9rDsMhJ3x6zyE1lD68gTr3KAGQKsvxn0u0zS00y8IsJ0XTUh3JpKD/e1dKDVXVnV GgVjv9vHumahaWmBGXy7bgwprp3nCJ9kqvD2Mqp+23RIHgpsfDpi8lxR8bZ+FtHR O2U0idUEEFStbgmoGml14VElgY6pG9+3KGPHXGUmc4X4BysDAaqV/dB8tYEAZXB7 8psMdJs41tgGudJITCT7ZiSZbSE98DdiyToe+iPUQz5svW4erQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCwuxOmgPO2T/KJpDvnmGetlolRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWE2YWJkZjUtMTM1Zi0z ZmMxLTllM2UtNmVmOGJmYWEwMzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSY3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3p4+fAaNBUPRWlWzFYlFNwZyM19Va7IpEAFMfiXRcYCAqNh0yajYdn 2eo5Ai9p9AFT1SnnKsYA7d+mrMc4BXr9EnDydQqGdqLOJ3y1dQ1j8mqtdzj6SO/K dN4iJM6ZhWPaGgz9LcJWxgWVx0Q5Y7uGVlApZ3uDEXVkNgxBKJ+69BtQj7sY6RBh e2GkMMJCOVNaFaCe2ecWSi2xdVzmqgz1jzd9uWxtnQjohKHJzcpz2ygv2dmKZjsL JuuFvMC1XRDLcDmfdrVsgyfAI5zRT3863JahsFKJp8ZZap61EX8Boew66jsnX6ZE 2WBYGfI/GP8SnE7XIO7bIGcm7c+aJts= -----END CERTIFICATE-----Generated at Sun Mar 1 18:44:42 2026 by rpki-client