$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23563c76-2fa3-3ed2-b117-b4d880178c6d.roa File: 23563c76-2fa3-3ed2-b117-b4d880178c6d.roa (raw, json) Hash identifier: 5F8+vlvW3JofQoQF6OXdixkwf8vX5URZaaIN92LXy2c= Subject key identifier: 08:A7:13:8F:A9:00:13:B4:63:D7:4E:9B:FE:47:84:65:79:28:C4:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58CED5312C53AAD42EC100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23563c76-2fa3-3ed2-b117-b4d880178c6d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.158.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:ce:d5:31:2c:53:aa:d4:2e:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=cab168aa-7af1-4fcd-b9bb-d56cca4aec6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:0d:fc:aa:52:86:51:c6:34:33:bb:f2:ea: ee:08:5c:a7:80:e0:de:6e:db:72:1b:cc:cf:dd:62: 41:ad:70:cb:a4:b9:e9:3a:33:ab:8f:41:25:04:aa: a8:09:4a:a7:a4:a8:eb:08:57:59:4b:f0:98:ae:75: 96:61:e8:26:48:72:b3:11:ce:da:61:9f:fc:08:d7: b1:a2:fe:74:a7:39:6d:43:33:b0:84:e0:37:65:e7: cb:9f:0f:63:0c:82:ec:d6:71:de:85:15:bd:2c:38: 55:1d:a6:cd:66:6d:c3:50:93:68:45:3a:08:2b:6f: c5:5a:78:87:4e:5c:88:09:c5:aa:52:10:06:6a:67: 2f:c5:23:ba:08:6d:5d:0d:8c:2f:e8:9d:72:3b:27: 8f:fd:11:25:04:8f:d5:3b:b5:cd:6d:3b:04:d7:f6: 8a:ae:c0:92:fc:8d:44:ae:13:fa:16:93:7d:91:76: 9b:9c:d4:3b:62:24:e7:2c:82:c7:c5:93:c5:b2:12: 8e:f0:03:29:27:e0:ec:1c:fc:34:e2:30:b4:e7:c3: d3:75:31:c1:7a:5b:f2:5f:eb:36:7a:cc:c1:3f:70: 2c:54:30:95:86:bd:ed:13:4e:6f:da:f0:fc:dc:5d: 78:19:14:9c:75:40:4c:8b:a4:65:fe:8c:0e:f5:8d: df:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A7:13:8F:A9:00:13:B4:63:D7:4E:9B:FE:47:84:65:79:28:C4:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23563c76-2fa3-3ed2-b117-b4d880178c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.158.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:07:a1:00:c2:27:58:87:df:6d:62:fe:e4:fd:e0:aa:99:d1: da:5f:2c:34:ac:41:fc:5b:66:87:25:d6:1b:00:3b:81:59:21: 6e:42:26:5b:ff:98:05:de:83:82:f2:7a:ba:98:14:66:5c:44: 42:d0:9b:f2:f3:1e:0d:e4:90:5e:ad:51:a1:fa:cf:97:59:c1: 46:31:20:37:ca:ce:a3:97:ea:ae:12:8e:b6:6a:72:ce:89:59: e1:06:d3:34:cc:e4:38:4b:86:ee:08:a1:4f:28:78:ee:f2:db: 07:ea:55:af:15:36:7b:66:65:9c:a7:eb:89:ee:3f:f6:42:e0: ac:e4:b0:95:fe:6d:92:94:0a:f1:52:67:fb:0f:ed:fa:cd:d4: 97:db:69:dd:b2:c6:99:f0:62:03:ac:b5:5b:88:88:83:58:1c: 99:c2:62:04:41:0a:e4:19:7d:86:d0:16:ad:fa:92:3f:04:96: ff:0b:ee:13:8a:f5:25:6f:b2:e9:2c:df:a0:64:bd:f6:63:d0: 9c:0f:4c:96:68:37:10:47:de:a6:22:93:6e:e1:52:e5:9b:de: 64:bc:aa:35:53:46:f1:7c:67:e6:dd:2c:ce:ab:22:bd:5c:2f: 78:16:5e:35:5f:2c:6f:ed:f0:cf:87:ab:49:f3:2b:34:bc:f9: b8:1f:a0:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWM7VMSxTqtQuwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2FiMTY4YWEtN2FmMS00ZmNkLWI5YmItZDU2Y2NhNGFlYzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI4N/KpShlHGNDO78uruCFyngODebttyG8zP 3WJBrXDLpLnpOjOrj0ElBKqoCUqnpKjrCFdZS/CYrnWWYegmSHKzEc7aYZ/8CNex ov50pzltQzOwhOA3ZefLnw9jDILs1nHehRW9LDhVHabNZm3DUJNoRToIK2/FWniH TlyICcWqUhAGamcvxSO6CG1dDYwv6J1yOyeP/RElBI/VO7XNbTsE1/aKrsCS/I1E rhP6FpN9kXabnNQ7YiTnLILHxZPFshKO8AMpJ+DsHPw04jC058PTdTHBelvyX+s2 eszBP3AsVDCVhr3tE05v2vD83F14GRScdUBMi6Rl/owO9Y3f3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAinE4+pABO0Y9dOm/5HhGV5KMTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjM1NjNjNzYtMmZhMy0z ZWQyLWIxMTctYjRkODgwMTc4YzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ6sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoHoQDCJ1iH321i/uT94KqZ0dpfLDSsQfxbZocl1hsAO4FZIW5CJlv/ mAXeg4LyerqYFGZcRELQm/LzHg3kkF6tUaH6z5dZwUYxIDfKzqOX6q4SjrZqcs6J WeEG0zTM5DhLhu4IoU8oeO7y2wfqVa8VNntmZZyn64nuP/ZC4KzksJX+bZKUCvFS Z/sP7frN1Jfbad2yxpnwYgOstVuIiINYHJnCYgRBCuQZfYbQFq36kj8Elv8L7hOK 9SVvsuks36BkvfZj0JwPTJZoNxBH3qYik27hUuWb3mS8qjVTRvF8Z+bdLM6rIr1c L3gWXjVfLG/t8M+Hq0nzKzS8+bgfoNA= -----END CERTIFICATE-----Generated at Mon Mar 2 00:51:45 2026 by rpki-client