$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa880a6-6226-3864-b7fe-87f0062e90f0.roa File: 3aa880a6-6226-3864-b7fe-87f0062e90f0.roa (raw, json) Hash identifier: NdIx2tR2UxvsBblQp0KEhAbqi0uK43ikB7vf8jS8kuk= Subject key identifier: 3B:5D:5E:B3:BE:22:E7:39:C0:CD:1C:07:AF:1C:D1:EF:67:D7:3C:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D8AFF964628D8808B0200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa880a6-6226-3864-b7fe-87f0062e90f0.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.189.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:8a:ff:96:46:28:d8:80:8b:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5cd15305-6acf-44ca-bdc6-57fa599c5ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:71:a8:b3:3e:4e:14:0f:74:bd:8b:ca:62: 36:eb:36:56:1e:97:9f:6e:c7:88:22:7e:bc:82:9a: 5a:6b:ed:9e:ec:c2:e7:02:7a:00:33:bd:f4:42:3d: b0:f0:4f:23:ba:d8:a4:ef:65:63:1a:94:fc:49:fb: 12:a3:48:a3:d4:f7:6a:b1:9c:6f:f3:68:48:54:98: 8a:b1:40:e8:85:4f:57:d8:44:19:71:a8:b7:43:44: df:cf:7c:ed:95:90:f6:51:c1:e2:6b:11:15:c2:81: 8b:55:9c:f3:e3:3e:3b:90:1e:e0:b0:00:53:99:25: ae:c5:a2:da:1f:5a:c3:61:68:bf:3b:8b:45:85:fd: df:43:26:ce:73:48:86:b2:d9:f1:52:94:c7:9b:53: ba:d4:16:e0:25:0d:db:6b:20:18:fd:48:61:39:f8: c9:18:d2:50:37:82:6c:09:40:83:18:37:fc:77:69: b3:09:e9:1f:ea:16:20:17:c6:0f:00:a0:17:f2:98: 7e:e7:56:3e:00:d9:ce:95:e8:11:ee:78:29:25:f4: ae:54:ad:48:2a:b6:05:19:74:60:11:f0:b6:92:bf: 80:8a:ed:9c:b2:a4:7a:97:e7:01:a6:6e:90:0c:22: 39:70:5e:7e:d0:eb:1e:03:a4:ac:64:6e:d3:9e:8f: a7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5D:5E:B3:BE:22:E7:39:C0:CD:1C:07:AF:1C:D1:EF:67:D7:3C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa880a6-6226-3864-b7fe-87f0062e90f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.189.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:1d:74:bf:0b:38:e6:dd:02:1e:57:fa:53:2d:dc:f5:fe:64: 29:30:2a:22:2d:1c:f4:b9:42:fd:aa:2b:cd:df:ef:3b:af:49: 21:f4:fe:57:a2:a0:a4:00:08:e6:27:22:15:29:25:c9:cf:35: 0b:68:cc:30:b8:7d:1b:42:66:b5:79:32:9b:f9:d8:2a:6e:0f: 6b:9c:b9:91:43:53:d7:c8:c1:cd:51:66:e8:f1:cb:b9:5b:ef: 09:3b:21:a7:b2:60:fb:1d:3d:52:d5:ca:78:9d:ae:55:ae:74: a7:9a:fd:d3:e8:ae:0c:d8:a5:36:a3:e4:bd:d9:46:8a:01:9d: db:64:96:07:26:b6:ea:11:3a:37:96:51:eb:39:f0:22:31:7a: 0b:2c:72:c7:3d:a7:94:49:7c:ff:4d:db:cb:a1:0e:87:8c:bf: 76:60:cb:d9:8e:4f:6b:12:cd:3f:a1:69:99:ed:8b:80:27:ef: 22:93:7c:87:eb:9b:06:86:3e:81:4e:5d:5d:68:48:3f:37:63: ad:ae:0c:4d:6f:5e:38:67:2f:f5:31:e7:8d:35:5d:ee:f3:8b: 63:89:2b:7d:9e:5f:8b:9a:11:cb:a7:77:16:0e:aa:46:87:74: b4:ed:c4:1e:2d:e1:4e:17:49:66:97:59:5e:b2:c8:29:b6:c3: 30:fe:71:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXYr/lkYo2ICLAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NWNkMTUzMDUtNmFjZi00NGNhLWJkYzYtNTdmYTU5OWM1Y2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq49xqLM+ThQPdL2LymI26zZWHpefbseIIn68 gppaa+2e7MLnAnoAM730Qj2w8E8jutik72VjGpT8SfsSo0ij1PdqsZxv82hIVJiK sUDohU9X2EQZcai3Q0Tfz3ztlZD2UcHiaxEVwoGLVZzz4z47kB7gsABTmSWuxaLa H1rDYWi/O4tFhf3fQybOc0iGstnxUpTHm1O61BbgJQ3bayAY/UhhOfjJGNJQN4Js CUCDGDf8d2mzCekf6hYgF8YPAKAX8ph+51Y+ANnOlegR7ngpJfSuVK1IKrYFGXRg EfC2kr+Aiu2csqR6l+cBpm6QDCI5cF5+0OseA6SsZG7Tno+nfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtdXrO+Iuc5wM0cB68c0e9n1zwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FhODgwYTYtNjIyNi0z ODY0LWI3ZmUtODdmMDA2MmU5MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwddL8LOObdAh5X+lMt3PX+ZCkwKiItHPS5Qv2qK83f7zuvSSH0/lei oKQACOYnIhUpJcnPNQtozDC4fRtCZrV5Mpv52CpuD2ucuZFDU9fIwc1RZujxy7lb 7wk7IaeyYPsdPVLVynidrlWudKea/dPorgzYpTaj5L3ZRooBndtklgcmtuoROjeW Ues58CIxegsscsc9p5RJfP9N28uhDoeMv3Zgy9mOT2sSzT+haZnti4An7yKTfIfr mwaGPoFOXV1oSD83Y62uDE1vXjhnL/Ux5401Xe7zi2OJK32eX4uaEcundxYOqkaH dLTtxB4t4U4XSWaXWV6yyCm2wzD+ceI= -----END CERTIFICATE-----Generated at Sun Mar 1 18:58:17 2026 by rpki-client