$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f8946a7-87cf-3ac2-ad87-beee7121790e.roa File: 1f8946a7-87cf-3ac2-ad87-beee7121790e.roa (raw, json) Hash identifier: fEFj0zGhhg4gtNvoQu/Kb1/hN5YbL3yrQvZto+OqEGo= Subject key identifier: 81:CA:48:55:7E:3A:72:B3:06:3A:94:3C:C8:B3:DC:52:70:03:19:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B1D085E862FB51954D980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f8946a7-87cf-3ac2-ad87-beee7121790e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 73.248.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:1d:08:5e:86:2f:b5:19:54:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=4b24ab56-3cc5-4542-a3a5-40a59ab6c12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:49:19:90:f8:96:e8:04:f7:e7:37:08:50: a8:ec:e5:96:62:75:34:40:83:57:88:ea:7b:2a:e2: bb:f0:ee:6e:db:5c:c3:61:22:bc:2a:44:9c:0a:5d: c7:da:91:6d:a0:9d:f8:e6:f6:d7:b0:9f:04:1c:c0: c0:4e:54:85:37:87:06:d5:7c:d6:95:43:b3:3d:f6: de:fe:27:b6:28:7a:02:c5:83:6b:56:4b:7d:f8:36: 82:38:2e:61:f7:f4:84:cb:bc:17:b8:85:a3:52:e9: 68:fa:5d:7d:80:7a:1b:0a:02:68:b5:6f:53:d9:08: ef:b1:3f:dc:91:0d:65:e2:38:00:6d:21:28:6a:d6: ae:7c:7f:0e:bb:78:29:4b:7a:e4:2a:aa:b9:c2:d0: e6:06:d3:89:40:f0:c7:b6:94:48:91:04:2b:71:26: e7:07:2f:ac:8e:fc:65:5a:0c:56:62:e0:f3:12:81: 35:fb:c1:56:96:da:59:a6:dc:24:33:b3:a1:f5:cc: 23:18:90:e9:a8:ce:7e:ba:0e:e6:a9:81:8e:72:8c: 04:f9:53:32:87:1c:d7:bf:71:c7:7a:70:15:27:9e: 12:dd:98:69:bf:c7:23:5e:87:b2:8d:ba:42:f9:30: 4f:cd:6e:00:7e:0f:dc:dd:08:c2:5a:ae:0c:eb:af: 09:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CA:48:55:7E:3A:72:B3:06:3A:94:3C:C8:B3:DC:52:70:03:19:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f8946a7-87cf-3ac2-ad87-beee7121790e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b4:84:98:d0:69:c1:64:f5:66:e9:2d:d8:b9:f9:bc:59:e9: e6:10:4e:62:77:84:e3:1a:5f:2e:67:f5:11:2a:13:d6:44:f9: 9c:25:25:36:9b:9d:93:0c:b0:ae:24:9d:2f:aa:46:04:a6:81: 80:57:a9:1e:53:3a:2b:85:5a:84:c1:4e:08:09:77:60:e0:67: cb:07:9e:ea:32:66:a5:2f:a0:f1:90:b3:f8:5c:5d:d0:52:af: 3b:cb:d8:e4:5d:a1:e7:ac:2c:b2:d9:fe:ea:a1:5c:e8:4d:25: cc:48:b6:c7:16:40:d7:1d:42:7e:be:ef:79:ef:5b:31:72:13: be:68:18:88:20:5e:b2:e7:23:73:3a:f5:74:21:ce:ef:29:50: 88:9b:39:4d:ae:0f:66:17:af:83:7d:97:6a:49:4a:86:9d:15: b5:5f:ca:29:4b:1e:3a:65:6a:f6:46:49:2f:2f:99:cb:0c:10: 98:54:29:5c:06:f8:76:da:b8:76:e6:17:40:f8:ed:03:13:21: 9f:b8:19:c3:10:7b:50:b6:90:09:59:bb:5c:8e:66:df:b2:15: 5c:4c:af:e2:67:15:6c:c0:be:b9:d5:3f:b2:6d:4c:e6:13:af: 81:da:e2:e1:6a:6c:f1:be:f1:3d:fd:56:c5:73:98:d1:5b:30: b7:67:f8:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWx0IXoYvtRlU2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NGIyNGFiNTYtM2NjNS00NTQyLWEzYTUtNDBhNTlhYjZjMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxdJGZD4lugE9+c3CFCo7OWWYnU0QINXiOp7 KuK78O5u21zDYSK8KkScCl3H2pFtoJ345vbXsJ8EHMDATlSFN4cG1XzWlUOzPfbe /ie2KHoCxYNrVkt9+DaCOC5h9/SEy7wXuIWjUulo+l19gHobCgJotW9T2QjvsT/c kQ1l4jgAbSEoataufH8Ou3gpS3rkKqq5wtDmBtOJQPDHtpRIkQQrcSbnBy+sjvxl WgxWYuDzEoE1+8FWltpZptwkM7Oh9cwjGJDpqM5+ug7mqYGOcowE+VMyhxzXv3HH enAVJ54S3Zhpv8cjXoeyjbpC+TBPzW4Afg/c3QjCWq4M668JpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHKSFV+OnKzBjqUPMiz3FJwAxkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWY4OTQ2YTctODdjZi0z YWMyLWFkODctYmVlZTcxMjE3OTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASfiLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi0hJjQacFk9WbpLdi5+bxZ6eYQTmJ3hOMaXy5n9REqE9ZE+ZwlJTab nZMMsK4knS+qRgSmgYBXqR5TOiuFWoTBTggJd2DgZ8sHnuoyZqUvoPGQs/hcXdBS rzvL2ORdoeesLLLZ/uqhXOhNJcxItscWQNcdQn6+73nvWzFyE75oGIggXrLnI3M6 9XQhzu8pUIibOU2uD2YXr4N9l2pJSoadFbVfyilLHjplavZGSS8vmcsMEJhUKVwG +HbauHbmF0D47QMTIZ+4GcMQe1C2kAlZu1yOZt+yFVxMr+JnFWzAvrnVP7JtTOYT r4Ha4uFqbPG+8T39VsVzmNFbMLdn+O4= -----END CERTIFICATE-----Generated at Sun Mar 1 18:47:20 2026 by rpki-client