$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db8142bc-f137-3eb5-8b8c-6efd2ed13dfa.roa File: db8142bc-f137-3eb5-8b8c-6efd2ed13dfa.roa (raw, json) Hash identifier: HQ6/cYhpsAOoAEtEBQaCdGVSRfTsYbtYZDGnX85Wk4o= Subject key identifier: 38:16:60:05:35:9E:8A:8B:5D:74:98:C6:92:51:7B:13:95:C6:57:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5C2A93480C4790F9246E88 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db8142bc-f137-3eb5-8b8c-6efd2ed13dfa.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 73.211.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:2a:93:48:0c:47:90:f9:24:6e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a97a2916-5095-414b-a1ee-e890a127e50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:f4:df:ab:2f:71:82:83:82:4c:31:20:03: 88:d5:5b:2c:6f:e7:b8:4a:42:c5:35:c4:fa:f3:1f: f7:ae:fa:60:cc:83:d9:74:57:e4:f5:5c:2f:f9:65: 9b:16:33:1f:4e:9f:46:aa:9c:f1:88:8d:7a:75:9d: cd:9f:46:ce:da:3b:ec:4d:22:f7:0c:94:0e:11:96: 10:ba:55:7a:99:a2:73:40:9e:d7:ca:35:40:3f:d9: 18:77:ff:3e:f6:12:32:12:0b:04:48:4a:87:4a:21: 0a:45:5d:5f:3c:9e:55:b6:2b:cf:61:51:ae:ea:d1: 13:e2:6f:28:b0:b9:6f:e4:8d:bc:37:1a:4b:96:f8: 53:cc:74:c7:64:0d:1a:63:71:ea:07:be:12:ab:ba: 47:33:47:54:03:26:9f:f5:4e:fa:67:be:84:df:dc: 3d:cf:22:43:a1:ff:6c:3f:d8:a2:9c:a2:d5:a0:f6: d2:0f:69:55:05:93:71:4d:d8:d1:ac:3c:4f:f8:19: eb:a4:9e:a3:05:c3:07:4f:95:34:a5:e8:e1:74:af: e8:3d:53:0d:37:08:47:01:b6:b6:87:17:a6:51:2a: 54:59:cb:2f:e8:5a:a2:c9:2a:0f:a8:b6:8f:40:2b: e4:f2:24:f2:6d:07:bf:7e:6d:a8:a8:57:55:0a:6e: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:16:60:05:35:9E:8A:8B:5D:74:98:C6:92:51:7B:13:95:C6:57:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db8142bc-f137-3eb5-8b8c-6efd2ed13dfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.211.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ca:01:e1:c0:5b:31:0e:07:ec:36:8a:36:d7:65:c6:14:39: 9a:11:ae:da:bc:1d:bd:69:2f:79:17:88:62:8a:66:b3:79:c5: c4:c0:36:ef:d3:7c:c6:4f:a3:5c:a1:31:79:09:41:4f:a7:10: 5a:18:ee:f8:d6:68:f5:65:f7:aa:a9:30:da:8e:00:1a:e7:80: f0:fe:4b:d3:14:8a:31:d2:5d:ca:3d:83:19:36:81:42:9c:ef: eb:1d:94:f4:6b:57:9c:45:a6:11:e9:27:a6:4c:53:aa:c6:bd: 95:92:db:ec:04:9d:7c:e4:41:da:c1:db:28:c4:32:6e:e5:7e: 32:39:ff:87:fa:27:43:1b:a9:a5:40:c0:e2:46:41:0f:c7:fb: ea:ae:f2:8f:af:4f:2e:43:b1:03:78:53:a2:ef:fc:79:d5:07: b2:7e:81:47:07:1c:f1:bb:7c:41:78:a0:f6:d9:2d:af:f0:e8: a5:8b:82:a6:b7:15:1f:7c:1a:1a:a8:70:86:08:46:86:04:f3: a1:e2:4e:31:c5:89:50:8f:1e:ad:9e:39:a5:c4:72:bc:8c:a2: c2:9e:65:23:5a:f1:46:1a:a5:b2:af:7c:49:1e:a3:7e:de:d9: 7c:22:ae:56:dd:33:77:cb:ef:a3:85:1b:4f:a6:4c:92:d5:80: ad:dc:b0:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXCqTSAxHkPkkbogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTk3YTI5MTYtNTA5NS00MTRiLWExZWUtZTg5MGExMjdlNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK7036svcYKDgkwxIAOI1Vssb+e4SkLFNcT6 8x/3rvpgzIPZdFfk9Vwv+WWbFjMfTp9GqpzxiI16dZ3Nn0bO2jvsTSL3DJQOEZYQ ulV6maJzQJ7XyjVAP9kYd/8+9hIyEgsESEqHSiEKRV1fPJ5VtivPYVGu6tET4m8o sLlv5I28NxpLlvhTzHTHZA0aY3HqB74Sq7pHM0dUAyaf9U76Z76E39w9zyJDof9s P9iinKLVoPbSD2lVBZNxTdjRrDxP+BnrpJ6jBcMHT5U0pejhdK/oPVMNNwhHAba2 hxemUSpUWcsv6FqiySoPqLaPQCvk8iTybQe/fm2oqFdVCm45YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgWYAU1noqLXXSYxpJRexOVxlfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGI4MTQyYmMtZjEzNy0z ZWI1LThiOGMtNmVmZDJlZDEzZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPKAeHAWzEOB+w2ijbXZcYUOZoRrtq8Hb1pL3kXiGKKZrN5xcTANu/T fMZPo1yhMXkJQU+nEFoY7vjWaPVl96qpMNqOABrngPD+S9MUijHSXco9gxk2gUKc 7+sdlPRrV5xFphHpJ6ZMU6rGvZWS2+wEnXzkQdrB2yjEMm7lfjI5/4f6J0MbqaVA wOJGQQ/H++qu8o+vTy5DsQN4U6Lv/HnVB7J+gUcHHPG7fEF4oPbZLa/w6KWLgqa3 FR98GhqocIYIRoYE86HiTjHFiVCPHq2eOaXEcryMosKeZSNa8UYapbKvfEkeo37e 2XwirlbdM3fL76OFG0+mTJLVgK3csG4= -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:20 2026 by rpki-client