$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf1b1df-23a5-33ff-a3b6-ccf25fed3461.roa File: baf1b1df-23a5-33ff-a3b6-ccf25fed3461.roa (raw, json) Hash identifier: 1+GemzEitZJsOwMCiyXxXRLReiO67xApmULxM6aXJ9k= Subject key identifier: 37:E2:CA:63:81:22:04:D9:05:5A:0C:8F:5B:4E:D1:49:6B:F2:EB:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5C9139A32387D6EBED0760 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf1b1df-23a5-33ff-a3b6-ccf25fed3461.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.8.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:91:39:a3:23:87:d6:eb:ed:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3ebb3ecc-d7b5-4a1b-9448-976ac8cee5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:aa:14:a5:10:fc:b1:6b:42:76:7b:2b:44:67: 06:cc:8a:dd:19:48:aa:5b:1b:a1:bb:f7:d7:26:91: ca:7e:7f:d9:6f:4b:82:83:84:9e:c1:42:de:f9:c2: 6e:58:77:4b:17:f4:35:4e:23:63:21:9e:00:61:ad: dd:05:6e:a4:f7:15:89:e0:2b:03:35:31:79:1f:1f: 71:2d:65:07:c9:c9:36:5f:5f:7d:8d:d3:86:d9:58: 41:46:85:a5:af:d5:41:84:83:f0:27:c1:a3:9e:ad: 33:b0:2f:3e:cc:b3:6e:86:85:4a:07:05:00:a7:8e: 99:79:24:a0:ae:49:79:a2:30:e9:b8:dc:68:53:59: 5c:87:15:42:5c:8b:14:06:1a:2d:52:b3:dc:18:fc: 6b:f6:73:38:2e:cc:4e:f7:8e:46:b9:53:72:6a:32: 53:3a:e4:54:77:39:96:1d:ca:9e:f4:6a:ff:3d:ff: bb:79:7f:b0:64:17:a0:a0:12:2f:69:25:ab:d5:06: 9b:6f:2c:ae:ff:9c:46:69:72:98:9f:d4:13:62:7d: 82:39:4d:ee:96:dd:69:fc:4b:21:e3:6e:d3:42:5a: e5:a2:19:4c:68:bd:fd:55:7a:90:bb:11:b6:9f:16: de:01:31:58:f6:93:32:88:c0:c0:11:55:b4:9e:38: 1c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E2:CA:63:81:22:04:D9:05:5A:0C:8F:5B:4E:D1:49:6B:F2:EB:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf1b1df-23a5-33ff-a3b6-ccf25fed3461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.8.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:56:8c:a9:7f:02:08:4c:39:e1:07:24:75:f1:3b:d7:e4:69: 95:5a:ed:a8:b7:4c:46:38:be:80:70:f9:dc:b7:cf:80:61:07: 8d:b4:c8:12:f5:68:b3:c2:b7:dc:75:15:80:02:fc:17:c9:b9: 8d:88:df:28:cb:63:78:b2:c3:9c:b7:d8:1f:c4:62:a8:c7:cb: a0:d5:b1:8d:a9:6c:23:a8:79:90:d1:d2:16:3f:f2:47:24:26: ff:00:b3:25:3d:69:d1:02:67:23:3b:a5:3f:1d:a7:35:60:3a: bf:c6:a0:64:4a:e8:ee:e4:27:e2:c5:01:68:2f:a5:24:eb:7e: a4:3e:57:df:cc:bf:5d:81:38:76:74:74:c6:e3:19:af:81:24: 7c:b0:d2:ed:a8:e0:09:b9:5a:89:58:c3:8f:be:e6:d7:ec:71: f8:03:c4:ca:f9:aa:1f:cc:d1:d5:3f:aa:63:57:2b:1a:09:cf: fa:b5:5c:50:56:ec:d3:33:da:e6:43:03:26:18:ce:ee:e7:9b: 0b:87:5f:61:d3:97:02:d3:5a:ec:36:de:1f:f5:81:60:c0:22: 78:59:82:6f:83:1e:96:d1:6e:fc:74:40:e8:97:8c:e5:45:cd: ac:83:5a:80:23:00:b7:85:f9:6b:bf:b1:2c:66:f6:96:57:c9: eb:08:a5:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXJE5oyOH1uvtB2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2ViYjNlY2MtZDdiNS00YTFiLTk0NDgtOTc2YWM4Y2VlNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KoUpRD8sWtCdnsrRGcGzIrdGUiqWxuhu/fX JpHKfn/Zb0uCg4SewULe+cJuWHdLF/Q1TiNjIZ4AYa3dBW6k9xWJ4CsDNTF5Hx9x LWUHyck2X199jdOG2VhBRoWlr9VBhIPwJ8Gjnq0zsC8+zLNuhoVKBwUAp46ZeSSg rkl5ojDpuNxoU1lchxVCXIsUBhotUrPcGPxr9nM4LsxO945GuVNyajJTOuRUdzmW Hcqe9Gr/Pf+7eX+wZBegoBIvaSWr1Qabbyyu/5xGaXKYn9QTYn2COU3ult1p/Esh 427TQlrlohlMaL39VXqQuxG2nxbeATFY9pMyiMDAEVW0njgc0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfiymOBIgTZBVoMj1tO0Ulr8usZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFmMWIxZGYtMjNhNS0z M2ZmLWEzYjYtY2NmMjVmZWQzNDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQiOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFWjKl/AghMOeEHJHXxO9fkaZVa7ai3TEY4voBw+dy3z4BhB420yBL1 aLPCt9x1FYAC/BfJuY2I3yjLY3iyw5y32B/EYqjHy6DVsY2pbCOoeZDR0hY/8kck Jv8AsyU9adECZyM7pT8dpzVgOr/GoGRK6O7kJ+LFAWgvpSTrfqQ+V9/Mv12BOHZ0 dMbjGa+BJHyw0u2o4Am5WolYw4++5tfscfgDxMr5qh/M0dU/qmNXKxoJz/q1XFBW 7NMz2uZDAyYYzu7nmwuHX2HTlwLTWuw23h/1gWDAInhZgm+DHpbRbvx0QOiXjOVF zayDWoAjALeF+Wu/sSxm9pZXyesIpYE= -----END CERTIFICATE-----Generated at Mon Mar 2 02:36:04 2026 by rpki-client