$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a86fed49-1809-37b2-bb12-447b9bd6776e.roa File: a86fed49-1809-37b2-bb12-447b9bd6776e.roa (raw, json) Hash identifier: LKCY+0UhpxPSCZkLMW54fPcL+mBFJ/gvdx4kdy2WkwQ= Subject key identifier: 6C:10:02:8C:48:8C:15:CF:3F:A9:56:45:5E:F4:A6:7B:2E:09:F0:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE577D8898F764C50800DCC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a86fed49-1809-37b2-bb12-447b9bd6776e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.150.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:7d:88:98:f7:64:c5:08:00:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=edbb5634-4d6d-4620-a7be-ec887281c91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:a7:41:06:51:4a:d8:55:e3:2f:ff:51:3f: 71:2f:96:79:07:e4:b3:36:ee:e7:ca:e7:07:a6:58: 9a:f2:4a:53:f7:ea:2b:5d:50:ef:32:b4:bb:46:76: 46:35:d8:c1:20:05:be:f6:3e:49:df:51:75:8a:d8: 68:26:21:43:bc:fb:a2:46:30:49:03:c0:73:13:50: 15:94:f7:2b:09:0c:85:4a:0c:cc:b9:62:00:78:9c: 39:36:e8:10:64:b4:b8:d5:02:46:22:b3:5c:3c:1a: 73:d3:b6:44:77:d8:23:16:24:88:fc:a6:17:49:b5: af:8a:b4:eb:9c:a6:a5:a7:ac:71:79:4c:e5:58:b7: ff:08:0f:13:c5:30:b7:ef:cb:9a:90:98:2d:29:8c: 78:19:43:b8:7b:23:23:13:0e:d7:ae:cc:d4:92:df: 0d:54:f7:c7:a3:09:52:61:b5:1e:d2:96:52:3f:53: 11:0a:4c:ab:b7:66:e1:a6:7d:9c:44:33:b6:38:d8: b1:00:02:b8:ab:aa:37:a2:86:be:e6:fd:b0:3e:2c: e2:59:83:18:c6:be:da:be:1f:37:04:ef:54:db:b5: 96:52:72:e7:9b:51:14:21:40:e5:d6:46:09:ec:9c: 8c:4b:59:28:90:d3:19:37:93:30:c3:3f:b9:9d:c7: 1b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:10:02:8C:48:8C:15:CF:3F:A9:56:45:5E:F4:A6:7B:2E:09:F0:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a86fed49-1809-37b2-bb12-447b9bd6776e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.150.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:01:ac:8f:f4:30:a9:a7:19:b2:c6:1d:b4:b6:9d:ad:41:9e: 46:ca:58:0a:a2:2c:b9:de:50:e4:31:a5:ca:11:a1:fd:17:95: 4c:8d:c9:18:57:38:06:10:5b:8b:83:a6:db:84:cf:ae:62:ec: 23:13:e7:90:6a:44:6c:61:91:97:cd:64:0a:38:a6:6f:96:27: 24:4d:0c:35:15:a6:60:d6:b4:ea:2e:fd:38:c5:6b:31:50:26: 67:c1:16:52:c7:c0:dc:81:70:62:63:0b:c3:81:04:77:11:b7: 48:2c:ba:7d:c4:07:98:40:df:48:66:78:4a:21:05:9e:74:95: 3b:45:10:a9:86:39:9b:b3:cd:00:db:72:32:4a:48:53:a4:6e: 47:04:27:c0:6f:64:7e:7a:1a:33:7c:88:bc:95:f9:97:7b:b1: 61:11:18:58:ad:ab:af:d5:3d:61:ea:22:4c:f0:f9:b9:04:0a: 85:b1:cd:e0:42:08:0e:a0:c8:d8:48:74:72:0d:c8:3a:dc:c6: 44:66:1d:21:fc:db:b2:7a:01:18:e4:76:4f:31:22:f7:35:3f: 77:49:90:5a:66:ef:d3:6b:a2:5f:2f:2b:e0:ad:6c:46:85:a0: c5:5c:6d:34:f4:29:dd:41:d4:88:04:72:33:c2:da:9d:59:27: ff:b7:18:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV32ImPdkxQgA3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWRiYjU2MzQtNGQ2ZC00NjIwLWE3YmUtZWM4ODcyODFjOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos+nQQZRSthV4y//UT9xL5Z5B+SzNu7nyucH plia8kpT9+orXVDvMrS7RnZGNdjBIAW+9j5J31F1ithoJiFDvPuiRjBJA8BzE1AV lPcrCQyFSgzMuWIAeJw5NugQZLS41QJGIrNcPBpz07ZEd9gjFiSI/KYXSbWvirTr nKalp6xxeUzlWLf/CA8TxTC378uakJgtKYx4GUO4eyMjEw7XrszUkt8NVPfHowlS YbUe0pZSP1MRCkyrt2bhpn2cRDO2ONixAAK4q6o3ooa+5v2wPiziWYMYxr7avh83 BO9U27WWUnLnm1EUIUDl1kYJ7JyMS1kokNMZN5Mwwz+5nccbBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwQAoxIjBXPP6lWRV70pnsuCfC1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTg2ZmVkNDktMTgwOS0z N2IyLWJiMTItNDQ3YjliZDY3NzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSZbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANoBrI/0MKmnGbLGHbS2na1BnkbKWAqiLLneUOQxpcoRof0XlUyNyRhX OAYQW4uDptuEz65i7CMT55BqRGxhkZfNZAo4pm+WJyRNDDUVpmDWtOou/TjFazFQ JmfBFlLHwNyBcGJjC8OBBHcRt0gsun3EB5hA30hmeEohBZ50lTtFEKmGOZuzzQDb cjJKSFOkbkcEJ8BvZH56GjN8iLyV+Zd7sWERGFitq6/VPWHqIkzw+bkECoWxzeBC CA6gyNhIdHINyDrcxkRmHSH827J6ARjkdk8xIvc1P3dJkFpm79Nrol8vK+CtbEaF oMVcbTT0Kd1B1IgEcjPC2p1ZJ/+3GEA= -----END CERTIFICATE-----Generated at Sun Mar 1 18:43:01 2026 by rpki-client