$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85edeaa9-10be-37fd-84d6-23d2b96a35d5.roa File: 85edeaa9-10be-37fd-84d6-23d2b96a35d5.roa (raw, json) Hash identifier: 1sA1Le4tFGm6gc3CG0FUl6JQl9CJ0rMRjuAJBZarE/0= Subject key identifier: C0:2C:1E:53:0F:ED:56:68:CD:B7:17:AE:B4:0D:72:95:57:E8:20:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE59DC531CD686F90505B020 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85edeaa9-10be-37fd-84d6-23d2b96a35d5.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.150.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:dc:53:1c:d6:86:f9:05:05:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=7d3e83a5-a221-43fa-ba80-dab8c1d61893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e6:1d:06:24:d9:e3:9e:d8:2e:0d:bd:94:9e: 5c:91:66:0f:de:4e:77:95:6d:db:79:11:f9:37:5c: 78:f5:05:57:7a:9b:32:8c:59:76:f8:79:3a:26:c7: b7:23:fc:44:08:00:2e:b6:68:a0:36:66:eb:39:8f: 1e:36:d9:6b:1b:79:85:01:5b:bd:b3:ba:f9:bd:96: 13:28:5d:c6:38:b0:e4:94:bf:0d:41:89:57:f9:89: 18:f8:15:b1:7b:b9:15:1f:c3:2f:ed:61:6a:89:cf: c6:2a:e8:8e:27:77:ef:92:c7:b0:7c:ab:72:ad:04: 07:4c:47:9a:b2:58:bd:55:5b:e8:b0:73:84:8e:81: 19:62:4e:a8:3c:42:48:3f:99:86:9a:2d:2a:8f:6b: 4c:e0:2c:06:ae:e3:97:87:f2:98:cb:9b:d0:6f:b7: be:24:f2:c5:8c:46:b8:d6:9d:a3:32:cc:63:42:ed: 65:0c:e6:a1:4a:3f:b9:65:bc:8a:6f:42:6a:e6:02: a9:4a:65:02:88:1c:df:f9:39:16:ce:57:80:97:2c: b4:b7:09:47:59:21:ab:ef:fa:8f:f4:12:a3:52:da: 79:91:f6:2e:66:a4:45:b2:64:b1:df:38:05:c6:64: 9d:0e:f9:63:31:3b:40:a0:8b:43:fa:1e:90:de:74: c4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2C:1E:53:0F:ED:56:68:CD:B7:17:AE:B4:0D:72:95:57:E8:20:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85edeaa9-10be-37fd-84d6-23d2b96a35d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.150.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:6e:79:8a:b0:7e:8a:17:e7:5c:63:65:1a:fc:10:0f:42:be: 29:4a:03:dd:dc:16:aa:9e:21:10:4f:26:81:27:fd:6a:4b:92: b2:f3:97:60:70:9e:23:40:21:99:b8:19:39:6a:44:67:2c:1b: 4a:da:7d:0f:5a:52:b8:cc:be:27:ee:5c:ad:fc:3d:76:03:01: 71:4b:9e:9d:41:30:18:32:e8:d2:4e:a1:7b:83:05:42:e2:1f: 59:4a:dd:46:52:8b:eb:0f:06:08:0d:17:b5:76:05:a5:89:90: aa:fd:3f:23:d0:d8:8f:27:cd:67:82:e3:b1:ee:10:b4:5c:30: ce:a1:b5:a9:03:57:3f:f8:7c:69:9b:d5:6f:68:4e:00:50:cf: aa:79:0a:c0:35:fd:74:56:1d:07:d8:8d:a7:42:9b:32:37:54: 13:44:64:63:97:6e:df:d6:df:08:9b:7a:e1:f8:f4:7f:ef:8a: 75:3f:53:65:10:1f:78:a3:e8:87:fc:cb:db:42:cc:d9:85:03: bf:bc:36:fd:05:57:88:a7:d0:8d:82:aa:c3:cc:fa:60:47:f0: 94:14:e6:6c:75:84:87:72:2a:32:09:35:7d:91:e3:b0:e1:63: 2a:54:ab:06:6f:3c:1e:87:cc:3b:5c:d4:65:20:ce:ef:97:46: 17:21:59:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWdxTHNaG+QUFsCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2QzZTgzYTUtYTIyMS00M2ZhLWJhODAtZGFiOGMxZDYxODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOYdBiTZ457YLg29lJ5ckWYP3k53lW3beRH5 N1x49QVXepsyjFl2+Hk6Jse3I/xECAAutmigNmbrOY8eNtlrG3mFAVu9s7r5vZYT KF3GOLDklL8NQYlX+YkY+BWxe7kVH8Mv7WFqic/GKuiOJ3fvksewfKtyrQQHTEea sli9VVvosHOEjoEZYk6oPEJIP5mGmi0qj2tM4CwGruOXh/KYy5vQb7e+JPLFjEa4 1p2jMsxjQu1lDOahSj+5ZbyKb0Jq5gKpSmUCiBzf+TkWzleAlyy0twlHWSGr7/qP 9BKjUtp5kfYuZqRFsmSx3zgFxmSdDvljMTtAoItD+h6Q3nTE7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAsHlMP7VZozbcXrrQNcpVX6CB7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODVlZGVhYTktMTBiZS0z N2ZkLTg0ZDYtMjNkMmI5NmEzNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN1ueYqwfooX51xjZRr8EA9CvilKA93cFqqeIRBPJoEn/WpLkrLzl2Bw niNAIZm4GTlqRGcsG0rafQ9aUrjMvifuXK38PXYDAXFLnp1BMBgy6NJOoXuDBULi H1lK3UZSi+sPBggNF7V2BaWJkKr9PyPQ2I8nzWeC47HuELRcMM6htakDVz/4fGmb 1W9oTgBQz6p5CsA1/XRWHQfYjadCmzI3VBNEZGOXbt/W3wibeuH49H/vinU/U2UQ H3ij6If8y9tCzNmFA7+8Nv0FV4in0I2CqsPM+mBH8JQU5mx1hIdyKjIJNX2R47Dh YypUqwZvPB6HzDtc1GUgzu+XRhchWQw= -----END CERTIFICATE-----Generated at Sun Mar 1 20:40:14 2026 by rpki-client