$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/340b553e-f26c-3004-9865-bb2b0b0a9b95.roa File: 340b553e-f26c-3004-9865-bb2b0b0a9b95.roa (raw, json) Hash identifier: oN0XCb7OBD72RkijTNwTwWdQ6kpJEBFC/Q8aR4XDOFg= Subject key identifier: DF:D6:F0:F6:24:A2:B2:8C:9C:DE:98:81:C1:94:B9:DF:16:CB:28:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58D54A10B2191B7A0B7B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/340b553e-f26c-3004-9865-bb2b0b0a9b95.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.170.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:d5:4a:10:b2:19:1b:7a:0b:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5ef45bfe-5115-40e9-a677-b8ddd81bd2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:11:d2:97:af:71:7c:f7:87:a8:19:65:16:68: ec:e3:27:08:99:01:91:68:ee:9b:18:2a:77:d0:ca: 7f:4d:c0:03:7d:e8:4d:db:39:4b:3e:1a:2c:78:f0: 0c:f7:d7:8c:ca:cb:a3:38:41:d1:58:0f:59:fe:db: 93:32:13:11:86:17:35:60:04:24:1e:ed:4f:ea:1b: 08:42:09:82:4e:3d:55:f9:54:0b:55:b8:be:5b:e6: d0:7c:57:f4:2d:1c:b2:ac:b2:33:09:0d:ff:6c:ef: 0d:30:50:4a:01:d4:53:4d:f1:88:64:66:c9:d2:c4: 5b:b1:b2:c5:5f:53:c3:04:62:85:fa:e4:b2:8f:da: 40:0b:1d:0f:96:5d:f3:80:95:11:25:42:94:07:63: 20:94:f3:a6:a8:e4:98:ad:81:84:fe:5c:ae:b2:91: e3:09:05:ba:9c:30:85:42:66:56:67:05:02:ca:f6: 0c:6c:d4:8e:b3:24:85:d3:fd:2b:39:e2:e3:dd:03: 34:b5:7c:99:0b:6a:09:44:1e:7b:da:67:bb:c6:80: b9:fd:f1:90:6b:11:27:2c:56:a1:fe:0f:fc:a3:1c: d4:87:ab:05:41:0a:3d:ef:73:3c:b6:32:03:4f:db: 88:27:f1:d0:f0:d4:81:17:c8:df:d2:66:8f:c0:84: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D6:F0:F6:24:A2:B2:8C:9C:DE:98:81:C1:94:B9:DF:16:CB:28:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/340b553e-f26c-3004-9865-bb2b0b0a9b95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.170.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:43:4a:c9:59:67:c5:bb:83:4e:20:e9:8b:87:aa:22:94:01: 20:66:2f:5a:f2:91:4f:4d:b2:03:18:1c:f1:85:08:c6:28:05: ec:4b:8b:9d:85:01:50:1f:bf:48:e6:c2:62:77:1b:10:6d:0a: 00:e0:2b:59:84:7b:9e:2a:fe:71:6e:af:43:e2:a0:e7:4d:42: 43:56:f0:35:31:17:e5:f6:e3:14:f1:48:e0:2f:03:ae:c0:ae: 39:05:64:05:96:2d:3d:60:f3:49:43:bc:a8:1c:7a:1e:c8:eb: d5:c5:05:a6:2d:22:34:fc:46:a9:41:74:3f:c4:88:80:84:a4: ef:05:33:d5:c1:00:bd:ca:cb:ae:aa:0f:6b:6a:a7:da:e8:d7: e6:f9:6e:85:29:74:c2:95:3c:1f:c0:83:1e:ce:53:5e:3d:20: f1:10:db:0b:72:59:bf:14:38:21:2a:a2:13:6a:af:57:02:99: 34:5b:1e:4d:4b:b3:9c:31:7a:34:83:5a:44:fb:22:3a:3a:c9: b7:17:c6:d8:c5:9a:a2:1a:df:ab:9c:8e:4c:36:b8:0c:65:9c: 3a:d4:9d:d6:d9:1e:a9:ab:60:5e:a3:ce:8f:ad:dd:79:f0:a4: 60:04:e2:c5:7c:3f:79:35:3c:74:db:e4:59:91:26:41:7c:d0: cb:40:f3:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWNVKELIZG3oLewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NWVmNDViZmUtNTExNS00MGU5LWE2NzctYjhkZGQ4MWJkMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRHSl69xfPeHqBllFmjs4ycImQGRaO6bGCp3 0Mp/TcADfehN2zlLPhosePAM99eMysujOEHRWA9Z/tuTMhMRhhc1YAQkHu1P6hsI QgmCTj1V+VQLVbi+W+bQfFf0LRyyrLIzCQ3/bO8NMFBKAdRTTfGIZGbJ0sRbsbLF X1PDBGKF+uSyj9pACx0Pll3zgJURJUKUB2MglPOmqOSYrYGE/lyuspHjCQW6nDCF QmZWZwUCyvYMbNSOsySF0/0rOeLj3QM0tXyZC2oJRB572me7xoC5/fGQaxEnLFah /g/8oxzUh6sFQQo973M8tjIDT9uIJ/HQ8NSBF8jf0maPwIRB4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/W8PYkorKMnN6YgcGUud8Wyyi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQwYjU1M2UtZjI2Yy0z MDA0LTk4NjUtYmIyYjBiMGE5Yjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMtDSslZZ8W7g04g6YuHqiKUASBmL1rykU9NsgMYHPGFCMYoBexLi52F AVAfv0jmwmJ3GxBtCgDgK1mEe54q/nFur0PioOdNQkNW8DUxF+X24xTxSOAvA67A rjkFZAWWLT1g80lDvKgceh7I69XFBaYtIjT8RqlBdD/EiICEpO8FM9XBAL3Ky66q D2tqp9ro1+b5boUpdMKVPB/Agx7OU149IPEQ2wtyWb8UOCEqohNqr1cCmTRbHk1L s5wxejSDWkT7Ijo6ybcXxtjFmqIa36ucjkw2uAxlnDrUndbZHqmrYF6jzo+t3Xnw pGAE4sV8P3k1PHTb5FmRJkF80MtA8xo= -----END CERTIFICATE-----Generated at Sun Mar 1 19:17:45 2026 by rpki-client