$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32ead25b-6254-367d-8640-1f524fd36b93.roa File: 32ead25b-6254-367d-8640-1f524fd36b93.roa (raw, json) Hash identifier: kb+slpI52l+Z1AJTEGwHc2MqR3HP471ngWw/QzW9sj8= Subject key identifier: 4F:CA:5C:80:7C:82:35:0B:0D:E7:E6:AC:8F:B4:98:15:5C:93:F5:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58CFAF1BBB46AF232BA200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32ead25b-6254-367d-8640-1f524fd36b93.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.158.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:cf:af:1b:bb:46:af:23:2b:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=0ccd12a6-2437-4740-ad48-3f804c03ccc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:21:81:29:ff:48:3a:2e:fd:be:94:be:81:f8: cf:d4:3b:da:24:09:16:5a:97:b5:33:3f:a6:0f:a2: c4:c7:61:20:e7:c6:e3:a2:15:22:ac:a5:ef:13:af: 67:4b:bc:3e:fc:cd:d5:9b:91:f0:ce:7d:3c:c5:91: 12:6b:c3:36:9b:41:42:b3:65:b5:e6:b7:86:80:e6: 46:b8:46:72:0e:96:fd:11:14:49:4e:47:75:98:08: af:74:bd:95:d2:2c:b5:83:44:9a:4c:3f:58:a0:1d: 4f:34:81:31:7b:b6:0f:48:64:c3:b7:5b:19:a6:37: ca:5c:e1:b7:75:9f:a0:61:3e:8a:74:42:13:45:1a: 89:3f:44:07:2c:3e:58:ae:37:7e:18:6f:26:8e:56: b5:5e:11:d9:53:54:ae:a7:75:a5:d2:cd:c3:e7:05: 0c:6f:76:47:0a:42:68:92:35:2a:d3:10:7d:68:1a: 7d:07:06:97:09:89:32:30:02:b6:d3:6d:6f:ec:57: 92:62:cc:03:00:59:9e:1d:9a:96:7e:f4:d5:0e:05: d4:dd:82:f5:eb:41:ea:34:c3:02:ee:9f:f6:2c:a0: 80:76:14:6b:cb:74:b3:0e:0e:85:0c:ce:1d:ff:29: 1f:7a:22:56:34:66:07:07:a4:02:dc:10:26:0e:aa: 86:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CA:5C:80:7C:82:35:0B:0D:E7:E6:AC:8F:B4:98:15:5C:93:F5:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32ead25b-6254-367d-8640-1f524fd36b93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.158.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:1f:7b:1e:27:6c:48:29:22:72:4f:8c:6e:51:ed:94:44:0e: 11:a7:c0:96:7d:1f:45:1d:1d:6c:0a:c3:96:d1:f9:9f:4b:a7: 6c:db:6b:e4:5a:b2:9b:76:f9:c3:2d:08:a8:89:67:b5:64:b9: 8d:3d:d6:2c:e8:76:cd:61:e3:73:a0:f1:d2:67:af:c6:4a:1d: ae:be:0e:93:ba:82:45:e1:fb:70:b8:7b:8a:8b:40:4b:b8:27: 64:5d:c0:20:4d:2e:4e:69:a9:3f:6a:ff:87:dc:32:f0:d8:b1: 8c:f1:e6:f8:c0:7b:a3:e2:75:bd:c4:77:66:03:93:31:e3:c1: 08:55:de:2d:a1:c1:2c:e8:17:ce:76:18:a8:ac:89:6b:ab:5f: 70:2d:e6:60:d8:e5:a2:da:fb:04:32:61:42:11:bf:de:2b:ba: 96:0d:dc:18:79:cd:c8:b5:9e:c3:40:fc:0c:2a:8b:29:3c:2e: 25:d4:4e:d1:dd:a7:46:98:b2:45:8e:f7:a9:fd:37:ea:5b:17: 3f:cb:38:ec:8b:c3:c2:d2:68:37:16:fe:5d:f9:4d:b3:c7:f5: 7d:19:48:af:96:cf:0e:df:4d:a8:23:fc:fa:c5:6f:49:2d:ce: 95:d8:9c:e7:42:11:b6:02:7a:d6:4b:fb:f2:c1:0e:d0:9d:0b: d2:f0:2f:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWM+vG7tGryMrogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MGNjZDEyYTYtMjQzNy00NzQwLWFkNDgtM2Y4MDRjMDNjY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiGBKf9IOi79vpS+gfjP1DvaJAkWWpe1Mz+m D6LEx2Eg58bjohUirKXvE69nS7w+/M3Vm5Hwzn08xZESa8M2m0FCs2W15reGgOZG uEZyDpb9ERRJTkd1mAivdL2V0iy1g0SaTD9YoB1PNIExe7YPSGTDt1sZpjfKXOG3 dZ+gYT6KdEITRRqJP0QHLD5Yrjd+GG8mjla1XhHZU1Sup3Wl0s3D5wUMb3ZHCkJo kjUq0xB9aBp9BwaXCYkyMAK2021v7FeSYswDAFmeHZqWfvTVDgXU3YL160HqNMMC 7p/2LKCAdhRry3SzDg6FDM4d/ykfeiJWNGYHB6QC3BAmDqqGJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/KXIB8gjULDefmrI+0mBVck/WWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzJlYWQyNWItNjI1NC0z NjdkLTg2NDAtMWY1MjRmZDM2YjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIfex4nbEgpInJPjG5R7ZREDhGnwJZ9H0UdHWwKw5bR+Z9Lp2zba+Ra spt2+cMtCKiJZ7VkuY091izods1h43Og8dJnr8ZKHa6+DpO6gkXh+3C4e4qLQEu4 J2RdwCBNLk5pqT9q/4fcMvDYsYzx5vjAe6Pidb3Ed2YDkzHjwQhV3i2hwSzoF852 GKisiWurX3At5mDY5aLa+wQyYUIRv94rupYN3Bh5zci1nsNA/Awqiyk8LiXUTtHd p0aYskWO96n9N+pbFz/LOOyLw8LSaDcW/l35TbPH9X0ZSK+Wzw7fTagj/PrFb0kt zpXYnOdCEbYCetZL+/LBDtCdC9LwLyA= -----END CERTIFICATE-----Generated at Sun Mar 1 18:47:03 2026 by rpki-client