$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf7a12a-844e-3ebf-bf0d-330790488703.roa File: baf7a12a-844e-3ebf-bf0d-330790488703.roa (raw, json) Hash identifier: tPx6HMK1rVv2pLe9CGDAKzB+8i2CyuK5LNeHbnZDExs= Subject key identifier: B3:3E:0A:48:AE:0D:2B:C2:17:08:3C:D8:6E:AE:F0:9E:75:25:31:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE578E53FF4BE9E191D25780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf7a12a-844e-3ebf-bf0d-330790488703.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 73.196.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:8e:53:ff:4b:e9:e1:91:d2:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=f110a5bf-a8c4-4997-a050-0a3088477ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b5:7b:7b:39:99:65:10:b1:20:79:5d:b2:7c: 04:1f:95:8e:4c:63:5b:70:ec:47:28:93:c0:34:6b: d7:c1:1a:84:ea:d9:31:9e:27:89:f8:b9:3c:54:32: 8c:04:20:a2:95:0a:38:0f:44:cc:32:9f:41:0b:d1: 09:d7:1f:6b:df:db:44:20:6c:2a:a1:b6:51:48:2a: be:5e:8f:f3:e6:68:3c:e6:76:b0:e0:c0:03:62:8f: df:76:67:2d:a9:3a:f7:1b:c9:fb:f6:c6:50:9d:d8: 30:70:6b:b3:ac:c4:c3:b1:74:06:56:47:9b:7f:9a: 36:26:8d:25:a4:a2:4f:be:d2:b6:03:a8:1f:3d:67: f0:97:e0:a7:3f:9d:b6:e0:67:8b:c9:79:ba:3a:86: 84:25:b4:20:76:3a:4b:55:4d:06:a7:30:00:bd:47: 4b:16:bb:8e:43:b2:c9:f1:58:f9:9c:f4:1f:e3:c4: de:0e:7b:96:0f:20:96:53:6b:3c:42:42:46:76:11: 5f:d4:1a:06:e7:cf:80:80:7f:5c:28:72:d5:a6:16: 82:a1:19:ae:b8:5c:48:de:8c:79:92:c8:ef:81:18: f9:76:f3:b0:ef:8d:cf:21:e4:13:f5:d5:d2:a9:55: 9a:9c:ec:e0:ab:c1:46:72:c6:f7:8e:78:aa:b9:1f: 98:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3E:0A:48:AE:0D:2B:C2:17:08:3C:D8:6E:AE:F0:9E:75:25:31:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf7a12a-844e-3ebf-bf0d-330790488703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.196.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:15:56:a8:8c:b4:ce:80:fb:9c:20:4e:54:26:40:84:b2:73: 8c:f1:76:51:68:72:ac:58:e6:a7:6b:d2:01:76:e0:65:57:8f: 85:57:40:7d:43:0c:6d:53:d0:5e:7c:43:a6:9a:ad:04:4e:d0: 6e:c7:64:64:1c:90:76:37:aa:76:ac:4d:d7:70:65:32:8b:99: 78:c7:ba:68:39:5d:b8:52:f2:94:18:94:57:b0:95:5e:d3:ec: 44:8f:8b:e8:54:bd:7f:f7:f7:b8:c0:c2:e6:85:44:d8:25:7c: 29:b4:ac:a3:a3:78:07:1b:74:54:09:92:0c:4f:72:1f:14:2f: 70:bc:71:f8:5e:62:26:f0:ce:1f:be:b9:b1:a7:1b:56:71:aa: 68:a7:40:92:0c:20:18:4c:1e:b8:1e:44:f5:7f:92:90:c9:f2: 5d:ae:f5:4b:5c:68:31:ab:24:32:eb:8d:c5:e5:6c:7f:4f:72: e9:68:a0:9a:14:17:86:9e:fa:84:2a:7c:26:5b:72:12:17:e3: ac:bd:2e:af:15:ae:f2:e9:f0:13:aa:d2:ad:b8:c0:3f:e4:a9: 41:31:ac:a6:c0:a6:e3:d0:43:09:77:95:3f:ac:e5:f1:12:72: ef:95:70:ac:29:84:5b:5e:18:a2:6e:ef:94:ea:18:be:29:51: ad:96:b2:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV45T/0vp4ZHSV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjExMGE1YmYtYThjNC00OTk3LWEwNTAtMGEzMDg4NDc3YWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprV7ezmZZRCxIHldsnwEH5WOTGNbcOxHKJPA NGvXwRqE6tkxnieJ+Lk8VDKMBCCilQo4D0TMMp9BC9EJ1x9r39tEIGwqobZRSCq+ Xo/z5mg85naw4MADYo/fdmctqTr3G8n79sZQndgwcGuzrMTDsXQGVkebf5o2Jo0l pKJPvtK2A6gfPWfwl+CnP5224GeLyXm6OoaEJbQgdjpLVU0GpzAAvUdLFruOQ7LJ 8Vj5nPQf48TeDnuWDyCWU2s8QkJGdhFf1BoG58+AgH9cKHLVphaCoRmuuFxI3ox5 ksjvgRj5dvOw743PIeQT9dXSqVWanOzgq8FGcsb3jniquR+YfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLM+CkiuDSvCFwg82G6u8J51JTFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFmN2ExMmEtODQ0ZS0z ZWJmLWJmMGQtMzMwNzkwNDg4NzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScTCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsVVqiMtM6A+5wgTlQmQISyc4zxdlFocqxY5qdr0gF24GVXj4VXQH1D DG1T0F58Q6aarQRO0G7HZGQckHY3qnasTddwZTKLmXjHumg5XbhS8pQYlFewlV7T 7ESPi+hUvX/397jAwuaFRNglfCm0rKOjeAcbdFQJkgxPch8UL3C8cfheYibwzh++ ubGnG1ZxqminQJIMIBhMHrgeRPV/kpDJ8l2u9UtcaDGrJDLrjcXlbH9PculooJoU F4ae+oQqfCZbchIX46y9Lq8VrvLp8BOq0q24wD/kqUExrKbApuPQQwl3lT+s5fES cu+VcKwphFteGKJu75TqGL4pUa2WsiU= -----END CERTIFICATE-----Generated at Sun Mar 1 23:24:52 2026 by rpki-client