$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43a1e58d-ea23-3c3b-b28c-7dc26de1f9d2.roa File: 43a1e58d-ea23-3c3b-b28c-7dc26de1f9d2.roa (raw, json) Hash identifier: 9qSPmflxBK6wu9zCzT25kwAFIX1W/Hh17deUa9ZS9n8= Subject key identifier: F8:7B:5F:45:66:DA:D4:62:73:87:9F:DD:EC:34:9C:F1:47:D0:63:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5852FBD7D7E43E693F2340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43a1e58d-ea23-3c3b-b28c-7dc26de1f9d2.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.22.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:52:fb:d7:d7:e4:3e:69:3f:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=84eaa44e-29e6-4765-89c6-64f172980b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:ef:9a:2e:65:11:2c:28:76:0a:20:84:14: 96:d2:68:b8:7b:da:51:c5:3f:03:e1:1c:ff:b5:de: 73:76:03:81:fc:5d:90:e2:bd:ab:67:b5:88:27:0a: 56:fb:17:5c:de:b0:db:8b:18:a1:d5:ca:e1:3f:6c: ca:5a:a7:4a:eb:b5:8c:60:66:7d:c8:19:71:24:87: ed:c8:6e:e9:08:f1:a1:59:ca:e3:6c:91:5a:79:73: 35:98:ca:0b:a6:71:67:a9:70:7e:09:9b:c4:23:0c: b3:75:47:5b:fc:3d:2b:12:77:d7:5e:6f:5a:79:6e: c9:b6:ff:18:ba:c3:2a:bf:36:ae:20:02:80:e1:cc: b5:5a:d0:05:37:46:0c:d5:e1:f0:c4:89:5d:d7:a4: a4:aa:91:f3:be:2f:dd:cd:3f:fc:9d:c0:2b:dd:10: ea:c0:30:5c:24:f3:cf:c4:0e:2e:3b:51:a5:cd:32: c0:f0:11:88:8b:26:91:f8:d8:59:0f:50:f4:70:74: 7f:42:b3:cf:97:91:c1:72:9c:7a:45:27:18:19:bf: 2f:f3:11:c6:cf:90:e3:e9:93:3d:b9:c1:18:eb:5c: ee:8f:79:a8:57:ba:59:c9:53:21:3a:6f:3e:69:4d: 57:bf:9a:fe:3c:ac:dc:41:a5:43:8b:05:3f:f6:29: ca:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7B:5F:45:66:DA:D4:62:73:87:9F:DD:EC:34:9C:F1:47:D0:63:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43a1e58d-ea23-3c3b-b28c-7dc26de1f9d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.22.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ab:21:ce:02:0f:a5:dc:e4:a7:b5:2d:94:30:3d:65:b9:17: 7d:20:f1:70:2c:60:9e:d5:21:c9:1f:a5:c8:ba:c6:cc:4d:5d: 5e:b4:3a:a5:c1:ca:ab:08:06:2c:46:38:43:68:6b:b6:98:22: 90:65:7e:f9:68:c1:06:59:fa:80:6d:25:c4:da:a4:ab:40:12: 57:db:d0:59:c9:1d:b1:16:35:57:ac:ab:bb:c8:a4:5b:cc:11: d2:ef:3d:ff:18:d0:e6:5c:76:0f:aa:36:81:e2:49:b7:f1:0f: 64:d4:4b:41:19:dd:09:0f:11:1c:69:cf:ab:26:cf:38:45:55: 4e:d3:02:93:08:05:a8:2b:8f:b1:be:97:02:aa:11:69:d1:78: ed:52:60:7a:2f:cc:a1:19:0a:6e:44:97:3c:70:7a:bd:7d:be: 78:0a:50:8b:36:bc:29:fb:d3:40:26:37:3b:d6:b5:af:ef:2c: 08:25:ed:b6:0f:92:12:c9:e1:fe:f7:5e:8e:2c:41:11:ad:73: a3:28:04:b1:b9:4a:92:aa:3a:bd:c0:0d:2d:13:cc:38:16:60: bd:8b:45:4f:2e:0b:76:c8:5f:3d:01:0c:c1:b5:e5:02:bb:e9: 53:dd:a6:24:58:ef:bb:2c:8d:00:67:5f:a3:eb:f2:27:e5:2e: 7f:31:04:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWFL719fkPmk/I0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODRlYWE0NGUtMjllNi00NzY1LTg5YzYtNjRmMTcyOTgwYjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIfvmi5lESwodgoghBSW0mi4e9pRxT8D4Rz/ td5zdgOB/F2Q4r2rZ7WIJwpW+xdc3rDbixih1crhP2zKWqdK67WMYGZ9yBlxJIft yG7pCPGhWcrjbJFaeXM1mMoLpnFnqXB+CZvEIwyzdUdb/D0rEnfXXm9aeW7Jtv8Y usMqvzauIAKA4cy1WtAFN0YM1eHwxIld16SkqpHzvi/dzT/8ncAr3RDqwDBcJPPP xA4uO1GlzTLA8BGIiyaR+NhZD1D0cHR/QrPPl5HBcpx6RScYGb8v8xHGz5Dj6ZM9 ucEY61zuj3moV7pZyVMhOm8+aU1Xv5r+PKzcQaVDiwU/9inKywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPh7X0Vm2tRic4ef3ew0nPFH0GPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNhMWU1OGQtZWEyMy0z YzNiLWIyOGMtN2RjMjZkZTFmOWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGrIc4CD6Xc5Ke1LZQwPWW5F30g8XAsYJ7VIckfpci6xsxNXV60OqXB yqsIBixGOENoa7aYIpBlfvlowQZZ+oBtJcTapKtAElfb0FnJHbEWNVesq7vIpFvM EdLvPf8Y0OZcdg+qNoHiSbfxD2TUS0EZ3QkPERxpz6smzzhFVU7TApMIBagrj7G+ lwKqEWnReO1SYHovzKEZCm5Elzxwer19vngKUIs2vCn700AmNzvWta/vLAgl7bYP khLJ4f73Xo4sQRGtc6MoBLG5SpKqOr3ADS0TzDgWYL2LRU8uC3bIXz0BDMG15QK7 6VPdpiRY77ssjQBnX6Pr8iflLn8xBFs= -----END CERTIFICATE-----Generated at Sun Mar 1 18:29:02 2026 by rpki-client