$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20dd57f6-0c91-3122-a592-58e75f14f4c7.roa File: 20dd57f6-0c91-3122-a592-58e75f14f4c7.roa (raw, json) Hash identifier: NLp1OiCxJ2bvAflNs52sahSks8iv0em6Mk2CPuoL2Qw= Subject key identifier: 33:5D:1F:2A:25:E3:45:75:4C:5A:A0:86:1D:CC:16:4F:0B:E9:4F:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BED1176CD03A487610B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20dd57f6-0c91-3122-a592-58e75f14f4c7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.146.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:ed:11:76:cd:03:a4:87:61:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3de879ef-1b4e-4b6f-948a-f6ea908917c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ad:39:81:9d:a7:6e:0d:5c:11:b3:fa:29:16: be:9b:11:09:97:57:8e:9c:68:2c:cb:30:c3:21:7e: 36:3d:06:cb:89:2c:d4:b4:7c:6d:43:3d:78:45:8b: 98:63:fb:e6:8d:ee:df:01:06:5c:85:e2:79:c2:13: ae:ac:68:65:1b:e7:0a:d2:25:68:38:e1:56:90:06: eb:1d:b3:90:1c:e1:5f:d8:2d:05:38:4a:14:e5:67: b1:01:ec:35:ea:93:9b:63:fb:73:de:1d:27:75:06: e3:eb:88:0e:50:9d:88:f4:99:d0:63:27:d7:9a:31: 36:3f:6c:53:62:4f:4f:97:3b:04:ed:bc:66:1c:c8: 2a:98:d4:58:3b:f6:83:c5:5d:66:af:02:33:36:90: 16:d0:55:13:1d:1e:4e:c8:5f:fe:9d:4c:4f:59:78: 07:b1:af:22:67:11:3d:5c:74:8d:4a:79:0b:8b:42: ac:55:52:1f:83:56:63:11:98:10:a9:41:94:66:14: 80:79:0e:e2:5b:47:40:52:f4:ef:ee:a4:7a:fa:0c: d0:82:38:4f:00:57:26:ab:48:cf:7b:54:ec:95:4c: fc:49:df:ac:97:f5:6d:f9:2c:43:bf:a6:e3:c5:62: 6c:c3:4a:e5:9e:9e:b9:1a:49:0c:08:91:08:7f:2b: 60:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5D:1F:2A:25:E3:45:75:4C:5A:A0:86:1D:CC:16:4F:0B:E9:4F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20dd57f6-0c91-3122-a592-58e75f14f4c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.146.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b4:0b:12:88:7a:21:51:b0:29:35:dd:44:6d:73:1b:a5:c0: 2d:5c:43:49:7b:fa:a0:3c:19:2e:bb:96:74:cd:96:a1:c3:7e: e5:35:6c:9b:f7:9d:63:d6:7a:2f:9f:97:2a:db:d4:a2:7b:16: 9d:1c:a4:95:a9:64:71:4f:c8:e8:04:89:85:a7:1a:fe:f5:d3: d1:f8:77:b1:68:2a:88:d6:82:45:2d:9d:53:ff:eb:7b:6b:0f: 2b:d5:f4:c2:e7:01:85:ca:99:68:c7:76:ae:e2:e0:73:cd:07: 9e:bf:0e:74:3c:66:55:03:23:5b:4d:6b:aa:0a:09:6f:50:35: 5a:7c:0a:a4:94:36:de:30:c3:02:a2:9e:03:2c:6c:01:7b:59: 5c:49:30:2b:ab:ff:e9:c3:7e:db:c5:80:b3:16:e6:84:2d:2a: 81:52:a6:ad:f4:65:c2:5f:fc:11:3b:b2:b2:a1:66:bf:30:72: 40:3b:c1:29:e2:08:fd:a3:97:f9:f5:3f:d3:ae:b5:f6:a7:ec: 50:95:86:48:04:3a:1d:02:46:95:13:49:c3:3c:a3:44:71:8f: c2:14:42:f2:22:e0:dc:ab:a5:62:c2:47:09:6e:26:3b:b2:19: 3b:e2:0e:41:a9:59:df:8c:9d:f8:e0:90:e6:69:58:43:b1:e5: 29:11:66:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW+0Rds0DpIdhCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2RlODc5ZWYtMWI0ZS00YjZmLTk0OGEtZjZlYTkwODkxN2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa05gZ2nbg1cEbP6KRa+mxEJl1eOnGgsyzDD IX42PQbLiSzUtHxtQz14RYuYY/vmje7fAQZcheJ5whOurGhlG+cK0iVoOOFWkAbr HbOQHOFf2C0FOEoU5WexAew16pObY/tz3h0ndQbj64gOUJ2I9JnQYyfXmjE2P2xT Yk9PlzsE7bxmHMgqmNRYO/aDxV1mrwIzNpAW0FUTHR5OyF/+nUxPWXgHsa8iZxE9 XHSNSnkLi0KsVVIfg1ZjEZgQqUGUZhSAeQ7iW0dAUvTv7qR6+gzQgjhPAFcmq0jP e1TslUz8Sd+sl/Vt+SxDv6bjxWJsw0rlnp65GkkMCJEIfytgpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNdHyol40V1TFqghh3MFk8L6U8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBkZDU3ZjYtMGM5MS0z MTIyLWE1OTItNThlNzVmMTRmNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK0CxKIeiFRsCk13URtcxulwC1cQ0l7+qA8GS67lnTNlqHDfuU1bJv3 nWPWei+flyrb1KJ7Fp0cpJWpZHFPyOgEiYWnGv7109H4d7FoKojWgkUtnVP/63tr DyvV9MLnAYXKmWjHdq7i4HPNB56/DnQ8ZlUDI1tNa6oKCW9QNVp8CqSUNt4wwwKi ngMsbAF7WVxJMCur/+nDftvFgLMW5oQtKoFSpq30ZcJf/BE7srKhZr8wckA7wSni CP2jl/n1P9Outfan7FCVhkgEOh0CRpUTScM8o0Rxj8IUQvIi4NyrpWLCRwluJjuy GTviDkGpWd+MnfjgkOZpWEOx5SkRZoU= -----END CERTIFICATE-----Generated at Sun Mar 1 19:02:00 2026 by rpki-client