$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/434b15e9-2396-3a98-bfd0-43bb3c3d6bd6.roa File: 434b15e9-2396-3a98-bfd0-43bb3c3d6bd6.roa (raw, json) Hash identifier: RkzT+3hrl+/yRSm+k1foV/ioL/iWp5GcvUdp1i1ZpUQ= Subject key identifier: 83:F6:09:B9:64:83:AA:94:95:AC:29:E2:79:AC:05:D8:8F:B8:D0:46 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58D0A0E4E12015E796EA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/434b15e9-2396-3a98-bfd0-43bb3c3d6bd6.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.158.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:d0:a0:e4:e1:20:15:e7:96:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=1bbc0ef0-506a-415c-ad48-af9f3b045969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b9:7a:76:43:f6:6d:7d:ba:2c:81:41:4f:4b: 01:5d:b9:d3:15:ff:fe:92:fe:cc:b4:b8:89:9c:00: a9:f6:1a:59:7d:0f:6f:bd:60:4f:a8:f1:b6:f1:d2: 52:7d:4f:0b:62:7b:2d:f5:fc:b2:09:69:71:7d:2c: 88:08:f9:0e:29:95:b8:0a:e3:c8:5e:5a:05:c4:a9: 4f:1b:64:90:ee:6c:87:3a:72:21:0a:58:51:7b:11: 7a:9e:21:cd:f7:e6:0e:01:b4:b8:ce:7b:45:67:4b: 19:02:23:d6:e3:e5:59:3b:9f:6d:0a:7f:82:7f:18: f9:6f:ae:61:4d:71:f2:ea:43:4e:21:35:95:dc:33: 14:2a:e8:ab:de:bc:b8:d9:00:93:2a:5e:5b:30:5a: 58:19:d0:be:cd:bb:0d:13:60:c1:f7:07:82:6d:cf: a4:6f:db:e3:1a:2d:10:03:4d:c1:85:6b:80:42:e9: 37:d2:1f:1e:3c:9a:7b:1c:65:58:41:63:52:6f:ab: 6a:e8:5e:6b:3d:90:71:8a:e6:0d:1c:9c:00:1a:2e: 47:67:52:e3:0f:9d:ec:49:22:23:76:2d:3e:21:56: cf:f4:02:9b:b1:bd:d2:21:92:d5:af:2d:cb:02:e4: 53:73:84:e8:52:9a:29:1b:4a:38:75:84:cc:83:d4: dc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F6:09:B9:64:83:AA:94:95:AC:29:E2:79:AC:05:D8:8F:B8:D0:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/434b15e9-2396-3a98-bfd0-43bb3c3d6bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.158.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:99:11:8c:f2:2a:03:1e:76:af:34:d7:49:85:36:03:94:74: 3a:4a:a7:bc:76:0f:47:aa:c6:b6:2b:3f:4c:ea:82:a1:e3:32: 86:be:ed:ee:7d:f4:0e:8f:be:8d:38:93:52:71:15:36:62:11: 62:69:7c:c5:a6:c8:b1:a3:f8:7a:7c:df:e1:99:30:42:e0:19: 35:15:6d:f6:ad:2a:bc:0f:db:74:b9:50:d6:54:a5:81:72:c0: 7d:b7:73:99:05:9d:08:00:58:19:0d:53:95:30:53:64:05:03: 87:bf:93:0c:d1:d8:3a:a1:bd:df:bc:b8:89:0f:fc:70:7d:41: 7d:c1:b2:f9:82:e5:97:61:f9:4c:89:18:b1:8d:d6:0f:ae:cd: 15:34:fc:c6:f4:dc:71:ff:0b:01:1c:fc:7d:15:61:f0:0d:c4: c2:29:8c:42:a7:80:27:d3:75:dc:8c:5a:d2:5f:e1:5e:0c:e4: 45:8e:9b:0c:1f:6c:a8:33:3a:00:8a:73:12:5b:9b:3e:a2:6e: 37:34:d2:6b:bf:d8:0d:76:73:2d:03:ed:27:3a:1e:d7:53:f0: 5f:fc:46:7f:d7:38:43:a1:8e:e0:a0:71:4a:98:0a:bb:6e:f3: 78:5d:be:22:ae:21:75:52:5b:51:c9:bc:0f:92:ad:b9:e0:9a: 3d:a9:27:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWNCg5OEgFeeW6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MWJiYzBlZjAtNTA2YS00MTVjLWFkNDgtYWY5ZjNiMDQ1OTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLl6dkP2bX26LIFBT0sBXbnTFf/+kv7MtLiJ nACp9hpZfQ9vvWBPqPG28dJSfU8LYnst9fyyCWlxfSyICPkOKZW4CuPIXloFxKlP G2SQ7myHOnIhClhRexF6niHN9+YOAbS4zntFZ0sZAiPW4+VZO59tCn+Cfxj5b65h TXHy6kNOITWV3DMUKuir3ry42QCTKl5bMFpYGdC+zbsNE2DB9weCbc+kb9vjGi0Q A03BhWuAQuk30h8ePJp7HGVYQWNSb6tq6F5rPZBxiuYNHJwAGi5HZ1LjD53sSSIj di0+IVbP9AKbsb3SIZLVry3LAuRTc4ToUpopG0o4dYTMg9TcHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP2Cblkg6qUlawp4nmsBdiPuNBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM0YjE1ZTktMjM5Ni0z YTk4LWJmZDAtNDNiYjNjM2Q2YmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSZEYzyKgMedq8010mFNgOUdDpKp7x2D0eqxrYrP0zqgqHjMoa+7e59 9A6Pvo04k1JxFTZiEWJpfMWmyLGj+Hp83+GZMELgGTUVbfatKrwP23S5UNZUpYFy wH23c5kFnQgAWBkNU5UwU2QFA4e/kwzR2Dqhvd+8uIkP/HB9QX3BsvmC5Zdh+UyJ GLGN1g+uzRU0/Mb03HH/CwEc/H0VYfANxMIpjEKngCfTddyMWtJf4V4M5EWOmwwf bKgzOgCKcxJbmz6ibjc00mu/2A12cy0D7Sc6HtdT8F/8Rn/XOEOhjuCgcUqYCrtu 83hdviKuIXVSW1HJvA+Srbngmj2pJ/Q= -----END CERTIFICATE-----Generated at Sun Mar 1 23:09:02 2026 by rpki-client