$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7cfe43-938b-36bf-8f85-5f834a114059.roa File: 8a7cfe43-938b-36bf-8f85-5f834a114059.roa (raw, json) Hash identifier: il6fEp7cKiK5lz+7Ng43WaCi9pR1sl2D2m615myeP/w= Subject key identifier: CC:6C:4D:1C:92:29:A6:7E:58:70:83:1A:BB:EA:ED:31:27:9C:07:AC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5C28F2F2509443BBFE5B84 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7cfe43-938b-36bf-8f85-5f834a114059.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.211.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:28:f2:f2:50:94:43:bb:fe:5b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=32ef8e60-7446-4cd0-b9e5-321a745498c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:39:39:a2:83:31:3a:2d:f9:94:7e:14:b9:d5: 4b:a9:09:73:ac:66:58:57:ef:39:d4:90:9a:e9:d7: c5:13:6b:e6:62:58:df:b5:d3:70:a8:35:c4:10:5a: 71:5d:d5:44:68:fb:5c:b9:df:c6:73:ed:c0:34:57: 03:a9:14:a5:f8:1d:4a:02:aa:ba:fa:c9:62:69:59: 17:7d:c5:7b:dd:6a:80:15:3a:7e:a7:c1:a0:dd:3e: fb:8c:2c:cc:97:9d:09:8a:46:24:a9:59:7f:49:fd: 36:c9:7c:a5:a3:71:f9:f1:7b:7f:f1:7f:33:97:24: c6:71:91:89:7c:14:f9:8b:3b:52:13:bd:5f:47:41: c8:31:20:2c:4c:88:2e:5a:24:de:44:b0:2d:de:02: 19:45:91:cf:65:c1:25:65:b5:df:65:9b:76:1d:b2: d1:ba:f2:de:64:0e:8a:04:2f:79:0b:d1:ae:bd:fa: a3:50:a8:d6:fe:93:f2:b4:1b:31:04:5f:d4:19:75: 4d:5a:58:09:86:28:ed:23:eb:a1:f7:fd:6b:cc:ec: 18:c2:77:1c:7f:02:ac:78:79:5d:8b:73:5f:69:22: a1:0e:67:24:5c:59:df:e3:dc:43:78:82:2c:00:24: 48:b1:da:c3:fa:ce:0f:59:36:a5:51:b6:aa:9e:66: fe:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6C:4D:1C:92:29:A6:7E:58:70:83:1A:BB:EA:ED:31:27:9C:07:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7cfe43-938b-36bf-8f85-5f834a114059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.211.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b7:8f:54:51:cf:2c:51:4a:8e:1d:c0:66:50:8b:97:b0:ec: 95:ad:b5:33:dd:0d:1d:f3:d4:c9:3e:4a:03:a0:29:13:5d:a7: 9e:d6:fc:c6:f1:f2:d8:e6:34:ef:08:b4:83:21:ca:97:cd:ba: 78:8d:d0:4f:50:15:bf:79:a6:fd:e5:c4:8d:d4:43:87:f4:8f: 62:e5:70:9d:23:fe:68:dc:2a:ca:55:5e:86:32:69:a7:19:9f: 64:d4:e9:16:0d:4e:74:65:17:eb:1f:75:4f:a7:0f:dd:28:ae: 83:34:b1:8f:45:0f:3a:06:76:79:8d:83:fd:2d:1b:1f:91:c1: 99:b6:e0:79:79:da:96:7d:41:b2:74:6d:dd:db:ce:54:a7:a5: bd:16:21:9f:e0:3f:bf:84:b0:51:97:22:3e:73:ee:c6:bd:20: 61:7c:84:a3:a6:d6:a8:d4:e0:2d:0b:0b:c3:21:78:f9:40:6e: 7d:6f:be:7e:30:f0:cd:54:74:96:76:75:ea:c2:86:e7:b5:79: ee:85:a0:a5:d4:a9:e9:59:f2:f2:2c:3a:af:a3:1e:ac:67:83: 67:2f:6a:5f:d5:0d:6c:24:0b:52:6e:8d:62:68:10:26:ae:90: 12:79:16:a6:59:b3:d9:83:11:e9:95:1b:ed:dd:3f:3c:ce:c3: 42:e4:7a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXCjy8lCUQ7v+W4QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MzJlZjhlNjAtNzQ0Ni00Y2QwLWI5ZTUtMzIxYTc0NTQ5OGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzk5ooMxOi35lH4UudVLqQlzrGZYV+851JCa 6dfFE2vmYljftdNwqDXEEFpxXdVEaPtcud/Gc+3ANFcDqRSl+B1KAqq6+sliaVkX fcV73WqAFTp+p8Gg3T77jCzMl50JikYkqVl/Sf02yXylo3H58Xt/8X8zlyTGcZGJ fBT5iztSE71fR0HIMSAsTIguWiTeRLAt3gIZRZHPZcElZbXfZZt2HbLRuvLeZA6K BC95C9GuvfqjUKjW/pPytBsxBF/UGXVNWlgJhijtI+uh9/1rzOwYwnccfwKseHld i3NfaSKhDmckXFnf49xDeIIsACRIsdrD+s4PWTalUbaqnmb+4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxsTRySKaZ+WHCDGrvq7TEnnAesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE3Y2ZlNDMtOTM4Yi0z NmJmLThmODUtNWY4MzRhMTE0MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdPCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF63j1RRzyxRSo4dwGZQi5ew7JWttTPdDR3z1Mk+SgOgKRNdp57W/Mbx 8tjmNO8ItIMhypfNuniN0E9QFb95pv3lxI3UQ4f0j2LlcJ0j/mjcKspVXoYyaacZ n2TU6RYNTnRlF+sfdU+nD90oroM0sY9FDzoGdnmNg/0tGx+RwZm24Hl52pZ9QbJ0 bd3bzlSnpb0WIZ/gP7+EsFGXIj5z7sa9IGF8hKOm1qjU4C0LC8MhePlAbn1vvn4w 8M1UdJZ2derChue1ee6FoKXUqelZ8vIsOq+jHqxng2cval/VDWwkC1JujWJoECau kBJ5FqZZs9mDEemVG+3dPzzOw0Lkegs= -----END CERTIFICATE-----Generated at Sun Mar 1 18:46:29 2026 by rpki-client