$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d20669f-84e9-3d0e-86d6-c953b9fb4b3d.roa File: 5d20669f-84e9-3d0e-86d6-c953b9fb4b3d.roa (raw, json) Hash identifier: 93e5Oyg54LtpSRYFIkcgjRSQuGwqoFyfyrhJPOU78bo= Subject key identifier: F6:90:CB:7D:6A:98:47:F2:7C:A7:FD:89:C4:F0:4F:91:27:88:EB:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D702DD3E93BF03E316A50 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d20669f-84e9-3d0e-86d6-c953b9fb4b3d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 73.158.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:70:2d:d3:e9:3b:f0:3e:31:6a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=fc770431-ad5a-4750-8dba-18bae63ff5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:35:1c:de:88:99:75:70:72:31:d2:8d:4b:eb: af:df:50:a8:a1:25:5d:72:ee:28:81:57:1b:cc:27: b6:38:92:b5:db:0f:d4:a9:cf:3e:c6:fd:c4:74:28: 33:7e:76:57:59:b5:c0:3d:f0:6d:33:86:3e:9d:90: e2:e9:06:1a:4b:ab:7a:f0:34:fb:c7:cf:8b:f4:36: 7a:f9:e2:96:a1:33:05:f3:53:77:1a:74:3a:a2:a7: ad:68:b0:84:83:e7:ba:7d:94:f0:99:f2:53:ff:a6: de:1a:0c:e6:bc:e9:44:39:b0:77:d5:31:4d:7f:3a: 7e:1b:1a:17:1f:42:f1:93:1d:d9:5c:f5:68:75:72: 6c:a3:f4:d7:71:1b:ad:5f:3f:d6:52:f0:05:0c:79: b1:cb:76:f0:43:68:5a:86:a1:13:54:eb:76:b0:fc: 83:e0:cf:06:31:92:d9:37:7e:63:96:a4:18:3f:18: 9f:1d:91:39:d0:1a:c5:54:82:8a:29:fd:d9:06:c5: 03:8b:1d:71:53:ff:0b:5c:61:63:b8:c3:5f:74:5c: 68:20:bf:8a:e7:ff:62:9f:37:ea:05:fb:e8:fd:f4: 25:4c:01:6c:19:15:11:c8:d2:19:be:a0:56:40:99: 01:65:8a:26:eb:8a:ae:d1:f4:4f:f6:fa:20:23:f0: 1a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:90:CB:7D:6A:98:47:F2:7C:A7:FD:89:C4:F0:4F:91:27:88:EB:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d20669f-84e9-3d0e-86d6-c953b9fb4b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.158.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:9e:ee:f9:49:3a:fa:74:18:46:aa:d9:c9:ac:41:77:66:54: d9:0c:15:74:6f:a9:91:7d:14:f1:0d:82:ce:e7:3f:c5:71:4f: 3f:0b:89:a7:8f:63:24:fc:66:e9:42:4d:83:d2:57:97:f4:79: f2:99:a1:95:06:f9:15:43:4b:46:13:31:18:3a:6e:be:55:28: 90:68:68:1e:53:30:f7:97:d1:b4:d2:1f:45:45:f4:3b:41:7f: 21:0d:f5:fe:c4:e7:54:b1:03:93:10:3c:32:9d:a7:d1:83:39: 9f:8c:ef:8c:e8:77:7c:7d:79:31:13:0c:5b:23:1e:08:0c:18: 66:28:cf:64:ef:5f:1b:13:84:c5:95:37:48:51:98:f7:a6:61: d7:a1:7e:78:1c:9b:57:da:f5:cc:fb:70:90:f5:88:c9:23:2d: d1:e7:4d:db:37:c5:54:77:04:73:31:ce:f4:32:1a:5c:42:75: 5a:92:5b:13:b5:92:6b:df:d0:db:85:21:88:9a:2a:6a:06:67: 70:01:6f:db:f0:47:1b:46:d9:1c:95:93:83:2a:d9:2f:fd:45: 6f:13:7e:d2:e4:97:13:21:4a:cf:42:c2:5e:de:86:fc:4e:a5: 54:84:6f:51:98:83:f9:9b:0d:60:13:8e:aa:e5:8d:71:a6:5d: 18:97:69:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXXAt0+k78D4xalAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmM3NzA0MzEtYWQ1YS00NzUwLThkYmEtMThiYWU2M2ZmNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTUc3oiZdXByMdKNS+uv31CooSVdcu4ogVcb zCe2OJK12w/Uqc8+xv3EdCgzfnZXWbXAPfBtM4Y+nZDi6QYaS6t68DT7x8+L9DZ6 +eKWoTMF81N3GnQ6oqetaLCEg+e6fZTwmfJT/6beGgzmvOlEObB31TFNfzp+GxoX H0Lxkx3ZXPVodXJso/TXcRutXz/WUvAFDHmxy3bwQ2hahqETVOt2sPyD4M8GMZLZ N35jlqQYPxifHZE50BrFVIKKKf3ZBsUDix1xU/8LXGFjuMNfdFxoIL+K5/9inzfq Bfvo/fQlTAFsGRURyNIZvqBWQJkBZYom64qu0fRP9vogI/AaDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaQy31qmEfyfKf9icTwT5EniOvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWQyMDY2OWYtODRlOS0z ZDBlLTg2ZDYtYzk1M2I5ZmI0YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKe7vlJOvp0GEaq2cmsQXdmVNkMFXRvqZF9FPENgs7nP8VxTz8LiaeP YyT8ZulCTYPSV5f0efKZoZUG+RVDS0YTMRg6br5VKJBoaB5TMPeX0bTSH0VF9DtB fyEN9f7E51SxA5MQPDKdp9GDOZ+M74zod3x9eTETDFsjHggMGGYoz2TvXxsThMWV N0hRmPemYdehfngcm1fa9cz7cJD1iMkjLdHnTds3xVR3BHMxzvQyGlxCdVqSWxO1 kmvf0NuFIYiaKmoGZ3ABb9vwRxtG2RyVk4Mq2S/9RW8TftLklxMhSs9Cwl7ehvxO pVSEb1GYg/mbDWATjqrljXGmXRiXaa8= -----END CERTIFICATE-----Generated at Sun Mar 1 18:32:12 2026 by rpki-client