$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23babe3f-6faf-3a04-be09-0daf99d193de.roa File: 23babe3f-6faf-3a04-be09-0daf99d193de.roa (raw, json) Hash identifier: 5tjAJ+cXufzwGMDKr4caAF7ReA5uylGMzWQG6OPEfYg= Subject key identifier: 98:69:D7:C9:62:44:24:BD:FE:35:6C:1B:23:A0:9B:CC:9E:EB:B5:40 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5C172DACCDAA4E19006C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23babe3f-6faf-3a04-be09-0daf99d193de.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.209.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:17:2d:ac:cd:aa:4e:19:00:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=24a58552-8b9e-43a3-bc0e-63a95a6ff3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:fb:7f:36:70:bc:46:87:fc:4a:d0:af:c9: b2:4a:92:17:20:9e:e4:af:52:4b:0f:6a:9b:64:ab: d5:f3:08:29:17:13:ef:f1:46:45:c2:66:18:7e:d0: 12:09:81:54:82:28:a6:89:e0:d2:18:80:3e:11:c0: ae:15:71:d8:e6:73:7a:c3:28:a5:42:4d:43:6f:cf: aa:c0:0f:ba:58:b5:bf:b7:13:ca:7f:94:1c:82:db: a7:d6:97:1f:81:ce:8a:0b:78:72:57:50:88:39:85: ac:c1:d5:23:79:37:30:a1:91:2e:15:d1:27:bc:66: 03:b2:7d:66:1d:a5:0b:2c:7f:b8:38:95:61:56:00: 21:29:f5:1c:87:a8:74:b0:14:03:e3:99:a9:74:58: 19:91:12:76:1b:54:29:3b:10:f6:0b:7a:f5:5e:e2: 5d:a5:e0:77:b0:a2:93:ff:a1:e4:7f:bb:82:4a:d7: e8:47:1c:f7:f0:0c:48:81:dc:a1:92:d0:0e:cb:69: 90:f1:97:e8:0c:8a:07:4b:5a:7e:6a:46:c1:f1:f1: b8:92:14:8c:91:4e:30:9a:8a:4d:39:96:90:87:f0: 67:8f:e8:6d:4f:db:45:6e:76:20:47:ab:82:a5:9e: 0e:d6:c1:3b:f7:f1:10:eb:0e:1e:fe:0e:71:a9:f5: 57:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:69:D7:C9:62:44:24:BD:FE:35:6C:1B:23:A0:9B:CC:9E:EB:B5:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23babe3f-6faf-3a04-be09-0daf99d193de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:c4:3c:90:11:af:6e:fe:1e:7e:26:19:ad:13:0a:51:20:f5: aa:04:e8:ac:3a:e2:e8:fd:05:d0:f2:c5:f3:bb:68:44:61:f3: aa:8f:4b:88:16:9d:0f:6c:ee:9d:95:b9:68:ff:1d:99:a0:08: 3b:91:fc:1d:b7:94:b0:f4:be:22:85:78:f6:44:18:3f:e2:7c: 5a:b8:57:fa:fd:fe:19:97:1d:09:a6:2e:50:0a:23:60:6f:4c: d7:99:f7:fe:ca:e4:e8:bc:ed:30:7d:52:7d:f7:77:f7:51:24: e5:04:dd:59:08:6e:d9:ad:6c:7c:75:02:4b:34:f0:21:32:0a: 1c:8b:d6:8b:ed:b8:d9:13:c4:fc:dd:0a:8e:db:e3:56:fd:bc: ef:34:1c:79:04:3c:02:20:58:a7:ce:e1:44:52:41:6e:c7:e9: 38:a7:e4:c8:35:b8:6d:8a:03:a0:1b:3c:79:3e:42:c4:bd:70: 39:66:6e:6c:49:c4:b2:91:15:0e:68:58:86:29:13:c3:68:22: bb:5e:ea:67:ca:17:81:72:04:35:b3:77:93:e5:e3:78:ce:f9: ef:46:ee:72:48:55:e1:93:00:4f:34:26:f8:2a:2a:16:94:3b: b3:a9:e1:26:f5:07:a6:99:ba:57:aa:dc:19:9b:15:ca:b2:19: a7:ea:a0:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXBctrM2qThkAbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjRhNTg1NTItOGI5ZS00M2EzLWJjMGUtNjNhOTVhNmZmM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojv7fzZwvEaH/ErQr8mySpIXIJ7kr1JLD2qb ZKvV8wgpFxPv8UZFwmYYftASCYFUgiimieDSGIA+EcCuFXHY5nN6wyilQk1Db8+q wA+6WLW/txPKf5Qcgtun1pcfgc6KC3hyV1CIOYWswdUjeTcwoZEuFdEnvGYDsn1m HaULLH+4OJVhVgAhKfUch6h0sBQD45mpdFgZkRJ2G1QpOxD2C3r1XuJdpeB3sKKT /6Hkf7uCStfoRxz38AxIgdyhktAOy2mQ8ZfoDIoHS1p+akbB8fG4khSMkU4wmopN OZaQh/Bnj+htT9tFbnYgR6uCpZ4O1sE79/EQ6w4e/g5xqfVXXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhp18liRCS9/jVsGyOgm8ye67VAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjNiYWJlM2YtNmZhZi0z YTA0LWJlMDktMGRhZjk5ZDE5M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdG8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfEPJARr27+Hn4mGa0TClEg9aoE6Kw64uj9BdDyxfO7aERh86qPS4gW nQ9s7p2VuWj/HZmgCDuR/B23lLD0viKFePZEGD/ifFq4V/r9/hmXHQmmLlAKI2Bv TNeZ9/7K5Oi87TB9Un33d/dRJOUE3VkIbtmtbHx1Aks08CEyChyL1ovtuNkTxPzd Co7b41b9vO80HHkEPAIgWKfO4URSQW7H6Tin5Mg1uG2KA6AbPHk+QsS9cDlmbmxJ xLKRFQ5oWIYpE8NoIrte6mfKF4FyBDWzd5Pl43jO+e9G7nJIVeGTAE80JvgqKhaU O7Op4Sb1B6aZuleq3BmbFcqyGafqoGM= -----END CERTIFICATE-----Generated at Sun Mar 1 23:01:56 2026 by rpki-client