$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91f0cda4-af24-3f5b-af87-801d774b52b1.roa File: 91f0cda4-af24-3f5b-af87-801d774b52b1.roa (raw, json) Hash identifier: YEf3bGDN8uD5UzpHN2z6itqG9583kG+kQ3/F3p5Dkes= Subject key identifier: 3F:89:54:98:46:3D:3F:6D:90:6F:2B:46:6D:EB:E4:55:94:7D:06:B4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5788C8C4CC7FC53A777D70 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91f0cda4-af24-3f5b-af87-801d774b52b1.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.194.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:88:c8:c4:cc:7f:c5:3a:77:7d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e8f95c78-e3b2-472a-a90e-6085c41677a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fa:b0:2e:88:82:f6:05:86:cc:8c:64:a1:31: a4:97:0d:2c:f6:fe:10:73:3b:8a:d0:c3:bb:1c:aa: e3:dc:f7:21:39:3d:b0:94:8d:9d:ae:3b:6b:d3:44: 7e:15:07:5c:35:1e:3b:be:d6:e8:e9:ee:52:76:06: 7d:80:3c:d3:1a:bd:20:e2:9d:55:6c:69:cf:7a:43: e9:92:7e:4f:be:f6:8f:93:c5:05:28:d9:96:5c:4e: a7:eb:c9:0f:07:a6:93:b9:2e:c2:67:82:1f:85:2b: d1:bf:09:61:af:35:03:d3:07:1d:63:05:82:10:f2: a0:19:3e:6c:77:c2:88:68:2c:62:d5:fc:6f:19:f0: 9c:99:65:06:4a:f7:73:5f:08:36:39:99:5b:e4:c7: dd:58:60:04:0a:65:08:b7:57:f9:13:70:ea:75:3f: 84:a6:95:20:24:26:65:58:d9:47:0f:b2:9e:00:89: 64:cc:b3:ae:4c:ed:d9:ac:58:61:30:fe:37:5c:68: 39:b8:3f:37:7a:d2:42:87:2d:49:7a:b3:8f:3b:f9: 20:6f:be:be:ad:72:ff:bb:75:c0:01:c7:3a:61:41: 02:81:63:f9:90:ae:01:93:14:3f:4a:11:82:95:87: 4b:db:f5:27:b3:73:ce:28:ff:76:25:bc:99:e2:1f: cf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:89:54:98:46:3D:3F:6D:90:6F:2B:46:6D:EB:E4:55:94:7D:06:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91f0cda4-af24-3f5b-af87-801d774b52b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.194.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:84:d5:c6:de:a3:80:22:68:0d:92:86:7f:d5:6f:e4:cc:fb: 9f:b1:c0:34:73:f0:09:45:9e:fa:b0:61:e6:77:ed:52:67:dc: 42:82:6b:94:41:ee:e3:3c:51:fa:96:47:11:c7:5e:42:b5:58: 06:6c:4d:e5:8a:69:b7:b7:eb:4e:3f:72:f5:65:d4:07:9c:71: e2:fe:f1:85:85:01:39:2c:62:9c:f2:03:74:a1:20:a0:f2:bd: ab:4a:91:85:95:11:ff:f0:e6:c1:c0:bd:86:79:61:6f:90:38: f4:f3:ba:64:e0:69:3b:c3:c1:bf:a1:a9:40:10:7c:ff:cb:db: 63:c8:7c:03:d2:b8:f8:86:66:a9:46:1b:36:6c:6f:77:21:27: d9:6b:f0:b9:7e:69:09:28:3d:93:4f:45:f0:ef:bf:b5:78:1a: 45:70:b8:40:eb:85:ea:79:e8:22:0d:8c:4f:84:8f:07:2d:13: 37:2f:ac:91:4f:b3:0f:18:fd:b2:1e:e6:07:d7:83:2f:1e:a6: 80:b2:76:6c:70:05:2a:0e:a7:a4:cd:a4:25:89:ec:af:9a:47: 04:55:da:41:9c:14:a3:cc:da:fc:77:aa:c2:85:54:a7:fa:4e: bd:6d:2e:98:7d:2b:08:55:90:30:4a:e7:4d:e3:fd:9b:28:b5: f2:3f:9a:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV4jIxMx/xTp3fXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZThmOTVjNzgtZTNiMi00NzJhLWE5MGUtNjA4NWM0MTY3N2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/qwLoiC9gWGzIxkoTGklw0s9v4QczuK0MO7 HKrj3PchOT2wlI2drjtr00R+FQdcNR47vtbo6e5SdgZ9gDzTGr0g4p1VbGnPekPp kn5PvvaPk8UFKNmWXE6n68kPB6aTuS7CZ4IfhSvRvwlhrzUD0wcdYwWCEPKgGT5s d8KIaCxi1fxvGfCcmWUGSvdzXwg2OZlb5MfdWGAECmUIt1f5E3DqdT+EppUgJCZl WNlHD7KeAIlkzLOuTO3ZrFhhMP43XGg5uD83etJChy1JerOPO/kgb76+rXL/u3XA Acc6YUECgWP5kK4BkxQ/ShGClYdL2/Uns3POKP92JbyZ4h/PSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+JVJhGPT9tkG8rRm3r5FWUfQa0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTFmMGNkYTQtYWYyNC0z ZjViLWFmODctODAxZDc3NGI1MmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAScJDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2E1cbeo4AiaA2Shn/Vb+TM+5+xwDRz8AlFnvqwYeZ37VJn3EKCa5RB 7uM8UfqWRxHHXkK1WAZsTeWKabe3604/cvVl1AecceL+8YWFATksYpzyA3ShIKDy vatKkYWVEf/w5sHAvYZ5YW+QOPTzumTgaTvDwb+hqUAQfP/L22PIfAPSuPiGZqlG GzZsb3chJ9lr8Ll+aQkoPZNPRfDvv7V4GkVwuEDrhep56CINjE+EjwctEzcvrJFP sw8Y/bIe5gfXgy8epoCydmxwBSoOp6TNpCWJ7K+aRwRV2kGcFKPM2vx3qsKFVKf6 Tr1tLph9KwhVkDBK503j/ZsotfI/msg= -----END CERTIFICATE-----Generated at Sun Mar 1 18:51:26 2026 by rpki-client